Privacy Notice
Version 2026-09-draft. Draft for review by the TCMS Data Protection Officer.
Who we are
Thy Covenant Montessori School (TCMS), Taguig City, is the personal information controller for the TCMS portal. You can reach our Data Protection Officer through the school registrar (contact details to be published by TCMS).
What we collect
Parent/guardian contact details; student identity, birth and school records; documents you upload for admission; payment records; attendance and gate (RFID) records; academic progress; and, where applicable, health information you provide for your child's safety. We collect only what the school needs.
Why we process it
To evaluate and process admission, keep school records required by law and DepEd, bill and receive payments, ensure safety at school (including gate attendance alerts), communicate with families, and — only with your consent — send marketing updates, publish photos, or list alumni in the directory.
Children's information
Information about minors is provided and consented to by their parents or guardians. Student information is never public by default. Community and messaging features for students are moderated and restricted by grade level.
Who can see it
Only authorized TCMS personnel, each limited to what their role requires (for example, teachers see their own classes; finance staff see payment records). Parents see only their own children. Service providers (hosting, email/SMS, payment processors) process data under written agreements.
How we protect it
Encryption in transit, restricted access, two-step verification for staff, private document storage with expiring links, audit logs of sensitive actions, and regular backups.
How long we keep it
School records are kept as required by law and school policy. Admission records of applicants who do not enroll and marketing inquiries are deleted or anonymized after the retention period set by TCMS.
Your rights
Under the Data Privacy Act of 2012 (RA 10173) you may access, correct, object to, request deletion or blocking of, and obtain a copy of your personal data, and file a complaint with the National Privacy Commission. Signed-in users can make a request under Account → Privacy & my data.