Additional Information

If our site engages in complex collection or processing of personal data, we will include additional information in this privacy policy as required by relevant laws and regulations.

How We Protect Your Data

We gather personal data through secured third-party applications and rely on their encryption for security purposes. Our Student Portal uses the latest Moodle software, which includes its own security process. We constantly monitor the data we collect for possible breaches.

Data Breach Response and Notification Procedure

We take data security and privacy seriously. In the event of a data breach, we have established a comprehensive procedure to respond promptly, mitigate risks, and notify affected parties as required by applicable laws and regulations. This procedure outlines the steps to be taken in the event of a data breach:

1. Identification and Assessment

• • Immediate Response: As soon as a potential data breach is identified, the incident response team, IT personnel, and relevant stakeholders, must be notified immediately.

  • Investigation: The incident response team will conduct a thorough investigation to determine the nature and scope of the breach. This includes identifying the types of data compromised, the cause of the breach, and any vulnerabilities that were exploited.

2. Containment and Mitigation

• • Isolation: If the breach is ongoing, steps will be taken to isolate and contain it to prevent further unauthorized access or data loss.

  • Mitigation: Actions will be taken to mitigate the impact of the breach, which may include shutting down compromised systems, resetting passwords, and patching security vulnerabilities.

3. Assessment of Risks

• • Risk Evaluation: The incident response team will assess the potential risks associated with the breach, considering the sensitivity of the compromised data, the number of affected individuals, and the likelihood of harm.

  • Legal Obligations: Legal counsel will be consulted to determine the legal obligations, including notification requirements, under applicable data protection laws.

4. Notification

• • Affected Parties: If the breach poses a significant risk to individuals’ rights and freedoms, affected individuals will be notified promptly. Notifications will be made via email, postal mail, or other suitable methods, as required by law.

  • Regulatory Authorities: If required by law, we will notify relevant regulatory authorities about the breach, providing all necessary details as specified by applicable regulations.

5. Communication and Coordination

• • Internal Communication: The incident response team will maintain clear and open communication with all internal stakeholders, including management, legal counsel, IT, and public relations teams.

  • External Communication: External communication will be managed carefully, including press releases and updates to affected individuals. A designated spokesperson may be assigned for media inquiries.

6. Remediation and Resolution

• • Correction Measures: We will take corrective actions to address the vulnerabilities that led to the breach, ensuring that similar incidents are less likely to occur in the future.

  • Continuous Improvement: We will review the incident and our response thoroughly to identify areas for improvement in our security measures and incident response procedures.

7. Documentation and Reporting

• • Documentation: All actions taken during the incident response process will be documented, including the incident’s timeline, investigative findings, response actions, and communications.

  • Reporting: A detailed incident report will be prepared and submitted to regulatory authorities as required by law.

8. Review and Training

• • Incident Review: The incident response team will conduct a post-incident review to analyze the effectiveness of the response and identify lessons learned.

  • Training and Awareness: Staff will receive ongoing training and awareness programs to enhance their understanding of data breach prevention and response.

This Data Breach Response and Notification Procedure is designed to guide our actions in the event of a data breach. It is regularly reviewed and updated to ensure compliance with evolving data protection regulations and to enhance our data security practices.

 Third Parties We Receive Data From

We will disclose if we receive data about users from third parties, including advertisers.

Automated Decision Making and Profiling

If our website engages in automated decision making or profiling, we will provide information about the process and users’ rights in relation to it.

Industry Regulatory Disclosure Requirements

If we are subject to additional privacy laws or regulations, we will disclose that information in this section.

This Privacy Policy is effective as of [Effective Date] and will be updated as necessary to reflect any changes in our data practices. Please review it periodically for updates.