Loading
Asian School of Hospitality Arts campus

Privacy Policy

Your privacy matters

Effective: [Month Day, Year]Sample for legal review

Our commitment

Hospitality begins with trust.

A clear guide to how the Asian School of Hospitality Arts may collect, use, protect, and respect your personal information.

ASHA values the trust placed in us by prospective students, learners, parents, alumni, partners, employees, and website visitors. This sample policy explains the privacy practices intended for the ASHA website and related school services.

Before publishing: Have this sample reviewed by ASHA’s Data Protection Officer and legal counsel. Replace all bracketed text and verify the actual systems, cookies, providers, retention periods, and contact details used by the school.

Transparent

We explain what information is collected and why it is needed.

Protected

We apply appropriate safeguards to personal information under our care.

Purposeful

We use personal information only for legitimate, declared purposes.

01

Who we are

The Asian School of Hospitality Arts (“ASHA,” “we,” “us,” or “our”) provides hospitality and culinary education and related services in the Philippines. For activities covered by this policy, ASHA acts as the personal information controller unless another notice says otherwise.

Official school and Data Protection Officer details should be inserted here before publication: [legal entity name, registered address, and DPO registration or contact details].

02

Information we collect

The information we collect depends on how you interact with ASHA. It may include:

Identity and contact details, such as your name, address, email address, phone number, date of birth, and government-issued identifiers when required.

Inquiry and application details, including your preferred program, educational background, application materials, interview notes, and communications with us.

Student and education records, such as enrollment information, attendance, grades, assessments, payment status, certificates, and school activity records.

Website and device information, such as IP address, browser type, pages visited, referral source, and cookie identifiers.

Other information you choose to provide, including messages, feedback, event registrations, photos, or documents.

Please provide only information that is accurate, relevant, and necessary for your request.

03

How we use information

We may use personal information to:

respond to inquiries and provide information about ASHA programs, admissions, tuition, events, and services;

process applications, enrollment, student services, academic requirements, assessments, records, and certifications;

manage payments, scholarships, financial assistance, and related administrative obligations;

operate, secure, maintain, and improve our website, facilities, learning platforms, and communications;

meet legal, regulatory, accreditation, audit, health, safety, and recordkeeping requirements; and

send relevant updates or marketing communications where allowed, with a way to opt out.

Depending on the activity, we process personal information based on your consent, the performance of a contract or steps requested before a contract, compliance with a legal obligation, protection of vital interests, fulfillment of a public or regulatory function, or ASHA’s legitimate interests when these do not override your rights.

Where sensitive personal information is involved, we rely only on a basis permitted by the Data Privacy Act of 2012 and other applicable law.

05

When we share information

We do not sell personal information. We may share only what is reasonably necessary with:

authorized ASHA personnel and faculty who need the information for their work;

service providers supporting hosting, learning systems, payments, communications, security, analytics, or records management under appropriate safeguards;

government agencies, regulators, accreditation bodies, banks, internship partners, or other institutions when required or appropriately authorized; and

professional advisers, emergency responders, or law enforcement where permitted or required by law.

If information is transferred outside the Philippines, ASHA should confirm that appropriate contractual, organizational, and technical safeguards are in place.

06

Cookies and analytics

Website note: This section must be matched to the cookies and analytics tools actually enabled on asha.edu.ph.

Our website may use essential cookies to function and optional cookies to understand site performance or remember preferences. Where required, we ask for consent before setting non-essential cookies. You can manage cookies through the site’s consent controls, if available, and through your browser settings.

Disabling some cookies may affect certain website features. A current cookie inventory, provider list, duration, and purpose should be added here or linked in a separate cookie notice.

07

Storage and security

ASHA uses reasonable and appropriate organizational, physical, and technical measures designed to protect personal information from accidental or unlawful destruction, alteration, disclosure, misuse, and unauthorized access. Measures may include access controls, staff confidentiality duties, secure backups, system monitoring, and vendor reviews.

No system can guarantee absolute security. If a personal data breach creates a material risk, ASHA will assess, document, contain, and notify affected individuals and the National Privacy Commission when required.

08

How long we keep information

We retain personal information only for as long as necessary for the purpose for which it was collected, to maintain legitimate school and academic records, to resolve disputes, and to meet legal, regulatory, audit, and contractual requirements.

Before publication, ASHA should insert or link its approved retention schedule, including the periods for inquiries, unsuccessful applications, student records, finance records, CCTV, website logs, and marketing preferences: [insert verified retention periods].

09

Your privacy rights

Subject to the conditions and exceptions under Philippine law, you may have the right to be informed, object to processing, access your personal information, correct inaccurate data, request erasure or blocking, obtain data portability, seek damages, and file a complaint with the National Privacy Commission.

To exercise a right, contact ASHA’s Data Protection Officer using the details below. We may need to verify your identity and clarify your request. We will respond within the period required by applicable law.

10

Children and minors

Some ASHA applicants or students may be minors. We process their information with added care and obtain parent or guardian involvement or consent where required. Parents and guardians should help minors understand safe and responsible disclosure of personal information.

If you believe a minor provided information without appropriate authorization, please contact us so we can review and take suitable action.

11

Changes to this policy

We may update this policy when our practices, services, or legal obligations change. The latest version will be posted on this page with a revised effective date. For significant changes, we may provide an additional notice through appropriate ASHA channels.

12

Contact us

Questions, concerns, or privacy-rights requests should be directed to ASHA’s official Data Protection Officer.

Data Protection Officer

[dpo@asha.edu.ph — confirm before publishing]

Mailing address

[Insert ASHA legal address and DPO office]

Admissions contact

+63 939 633 4548

You may also contact the National Privacy Commission through its official website if you believe your privacy rights have been violated.

Questions about your data?

We’re here to help.

Contact ASHA so the appropriate team can review your privacy concern.

Contact ASHA