Privacy Policy
Last updated: March 2025 · Golden Valley School (GVS) · Costa Rica
Golden Valley School ("GVS") is committed to protecting the privacy and personal data of students, families, staff, and visitors. This Privacy Policy explains how we collect, use, store, and protect information in compliance with Costa Rica's Law No. 8968 (PRODHAB) and internationally recognized data protection standards.
1. Information We Collect
We collect the following categories of personal data:
- Identity data: Full name, date of birth, nationality, and identification documents.
- Contact data: Email address, phone number, and home address.
- Academic data: Enrollment records, grades, attendance, and program information.
- Health data: Medical conditions or dietary requirements relevant to student safety (collected with explicit consent).
- Usage data: IP address, browser type, and pages visited when using our website.
- Communications: Messages submitted through our contact or inquiry forms.
2. How We Use Your Information
We process personal data for the following lawful purposes:
- Administering student enrollment, academic progress, and school operations.
- Communicating important school news, events, and emergency notifications.
- Complying with legal obligations under Costa Rican and international educational regulations.
- Processing applications for admission or employment.
- Improving our website and digital services.
- Ensuring campus security and student safety.
3. Legal Basis for Processing
- Contractual necessity: To fulfill the educational agreement between GVS and enrolled families.
- Legal obligation: To comply with MEP regulations and other applicable laws.
- Legitimate interest: For school administration and communication with the GVS community.
- Consent: For optional activities such as newsletters, photography, and health-related disclosures.
4. Data Sharing and Third Parties
We do not sell or rent personal data. We may share data with:
- Government authorities: As required by Costa Rican law (MEP, CCSS, PRODHAB).
- Accreditation bodies: Such as the International Baccalaureate Organization (IBO) and Cognia.
- Service providers: Trusted partners who assist with school management systems — all under data protection agreements.
- Emergency services: When required to protect the life or safety of a student.
5. Data Retention
We retain personal data only as long as necessary for the purposes it was collected, or as required by law. Academic records are retained for a minimum of 10 years following graduation or withdrawal. Website usage data is retained for up to 12 months.
6. Your Rights
Under Law No. 8968 and applicable international standards, you have the right to:
- Access: Request a copy of your personal data held by GVS.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of data where no legal basis for retention exists.
- Restriction: Limit how your data is processed in certain circumstances.
- Objection: Object to processing based on legitimate interests.
- Withdraw consent: At any time, where processing is based on consent.
To exercise any of these rights, contact our Data Protection Officer at soporte.it@goldenvalley.ed.cr. We will respond within 30 business days.
7. Cookies and Tracking
Our website uses essential cookies for functionality (e.g., language preferences and login sessions). We do not use advertising or tracking cookies. You can disable cookies in your browser settings, though some features may not function correctly.
8. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure. These include encrypted connections (HTTPS), access controls, and regular security reviews.
9. Children's Privacy
As a school, we routinely process data relating to minors. We do so exclusively in the context of our educational mission and with the informed consent of parents or legal guardians, in accordance with Law No. 8968 and the UN Convention on the Rights of the Child.
10. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or a notice on our website.
11. Contact Us
For privacy-related inquiries, requests, or complaints, please contact:
Golden Valley School — Data Protection OfficerSan Isidro de Heredia, Costa Rica
soporte.it@goldenvalley.ed.cr
+506 6036-9841
You may also file a complaint with Costa Rica's data protection authority: PRODHAB.