The International University of the Caribbean

Introduction

International University of the Caribbean] ("the Institution") is committed to protecting the privacy of personal data of our students, staff, faculty, alumni, and other stakeholders (collectively, "data subjects"). This Privacy Policy outlines how we collect, use, disclose, and store personal data following the Jamaica Data Protection Act, 2020 (JDPA 2020).

1. Personal Data We Collect

The Institution collects various personal data to fulfill its educational and administrative functions. This data may include:

Student Data:
Name, contact information, date of birth, academic records, transcripts, financial aid information, and disciplinary records.

Staff and Faculty Data:
Name, contact information, date of birth, employment history, qualifications, salary information, and benefits information.

Alumni Data:
Name, contact information, graduation year, degree information, giving history.

Website and Online Services Data:

Information is collected through website forms, online applications, and learning management systems, including browsing activity, IP addresses, and device information.

CCTV Footage:
Images captured by security cameras on campus.

2. Purposes for Collecting Personal Data
We collect personal data only for legitimate purposes, including:

Student Admissions and Registration:

Processing applications, managing academic records, and providing educational services.

Human Resources:
Recruitment, payroll, benefits administration, performance management.

Alumni Relations:
Maintaining communication with alumni, promoting alumni events and fundraising activities.

Website and Online Services:
Providing access to online resources, improving user experience, and ensuring website security.

Safety and Security:
Maintaining a safe and secure campus environment.

3. Lawful Basis for Processing Personal Data

We process personal data based on one or more of the following lawful grounds permitted by JDPA 2020:

Consent:
In certain cases, we may collect your data with your explicit consent.

Contractual Necessity:
Processing data is necessary to fulfill our contractual obligations with you (e.g., student enrollment, employment agreements).

Legal Obligation:
We comply with legal and regulatory requirements that mandate the processing of personal data.

Legitimate Interests:
We process data for our legitimate interests, such as improving our services, sending educational materials, or conducting fundraising activities, provided such processing does not outweigh your data protection rights.

4. Disclosure of Personal Data

We will only disclose your data to third parties in the following circumstances:

Service Providers:
We may share your data with third-party service providers who assist us with our operations (e.g., IT service providers, and background check companies). We ensure these providers have appropriate data security measures in place.

Law Enforcement:
We may disclose data to law enforcement agencies or regulatory bodies if required by law or to investigate suspected illegal activity.

Emergencies:
We may disclose data to protect the health or safety of individuals in an emergency.
We will never sell or rent your data to third parties.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law or regulation. We have a data retention schedule that outlines specific timeframes for deleting different categories of personal data.

6. Data Security

The Institution implements appropriate technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:

*Secure storage facilities
*Access controls
*Regular security audits
*Staff training on data protection

7. Your Data Subject Rights

Under JDPA 2020, you have certain rights regarding your personal data, including:

*Right to Access:
You have the right to request a copy of your personal data held by the Institution.
*Right to Rectification:
You have the right to request that inaccurate or incomplete personal data be corrected.
*Right to Erasure:
You have the right to request the erasure of your personal data under certain circumstances.
*Right to Restrict Processing:
You have the right to request that the Institution restrict the processing of your personal data.
*Right to Object:
You have the right to object to the processing of your personal data for marketing purposes.

8. Exercising Your Data Subject Rights

To exercise any of your data subject rights, you can contact our Data Protection Officer (DPO) at [DPO email address] or [DPO phone number].

9. Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. We will post any changes on our website and notify you if required by law.

10. Contact Us

If you have any questions about this Privacy Policy or the Institution.