ACISC Privacy Policy
How Personal Information May Be Collected, Used and Handled
The Accrediting Council for International Schools and Colleges (ACISC) recognizes the importance of privacy and responsible information handling in connection with its website, accreditation activities, membership services, professional activities and communications.
This Privacy Policy explains the general categories of personal information ACISC may receive, why information may be processed, circumstances in which information may be disclosed, how information may be retained and protected, and how individuals can contact ACISC about privacy matters.
This policy applies to personal information handled by ACISC in connection with its website and organizational activities unless a more specific notice, agreement, process or legal requirement applies.
When This Privacy Policy Applies
This Privacy Policy applies to personal information ACISC receives or processes through activities such as website enquiries, accreditation and membership processes, institutional communications, professional participation, events, applications, forms and other interactions with ACISC.
Some ACISC activities may involve additional instructions, notices, agreements or requirements concerning information handling. Where a specific process provides additional privacy information, that information should be read together with this policy.
Information Received Through
Website enquiries
Accreditation processes
Membership activities
Institutional submissions
Professional participation
Events and workshops
Complaints or public comments
Direct communications
Categories of Personal Information
The information ACISC receives depends on how an individual or institution interacts with the organization.
ACISC seeks to collect and use information that is relevant to the applicable purpose rather than requesting personal information without an appropriate reason.
Identity Information
Name, title, professional role, organization or institution and other information used to identify an individual in the relevant context.
Contact Information
Email address, telephone number, postal address or other information provided for communication.
Professional Information
Professional role, qualifications, experience, institutional responsibilities or related information where relevant to an ACISC activity.
Institutional Information
Information submitted by or concerning an institution that may identify institutional representatives, personnel or other individuals.
Communications
Information contained in correspondence, enquiries, forms, responses, complaints, comments and other communications with ACISC.
Technical Information
Information that may be generated when visitors interact with the website or online services, subject to the technologies and services in use.
Personal Information Can Reach ACISC Through Different Channels
Information may be provided directly by an individual, supplied by an institution or authorized representative, generated through interaction with ACISC services, or received from another appropriate source in connection with an ACISC activity.
Directly From You
For example, when you contact ACISC, complete a form, make an enquiry or participate in an ACISC process.
From an Institution
An educational institution may provide information concerning its personnel or representatives as part of accreditation, membership or another institutional activity.
Through Professional Activity
Information may arise through evaluation, review, events, workshops, professional participation or other ACISC activities.
Through the Website
Website and server technologies may process information necessary for website operation, security, functionality and related purposes.
Public Sources
Where appropriate, ACISC may consider information lawfully available from institutional websites, public records or other relevant public sources.
Other Appropriate Sources
Information may be received from third parties where relevant to an ACISC process and where receipt and use of that information are appropriate.
Purposes of Processing
ACISC may use personal information where reasonably necessary for its organizational activities, to respond to individuals and institutions, administer relevant processes, maintain appropriate records, protect legitimate interests and meet applicable responsibilities.
Accreditation
Administer accreditation applications, institutional evaluation, evidence review, professional review, decisions, continuing accreditation and related activities.
Membership
Administer membership enquiries, applications, services, participation and related institutional communications.
Communications
Respond to enquiries, provide requested information, issue relevant notices and maintain appropriate correspondence.
Professional Activities
Administer evaluator, reviewer, consultant, workshop, event or other professional participation where applicable.
Accountability
Receive and consider complaints, comments, concerns or other matters submitted through applicable ACISC channels.
Website & Security
Operate, maintain, protect and improve website functionality and help identify misuse, technical problems or security concerns.
Information Should Be Used for an Appropriate Purpose
The legal basis applicable to processing can depend on the information involved, the purpose of processing, the individual’s relationship with ACISC and the jurisdiction whose law applies.
Depending on the circumstances, processing may relate to consent, contractual or pre-contractual activity, compliance with a legal obligation, legitimate organizational interests or another lawful basis recognized by applicable law.
Where consent is specifically relied upon, applicable rights concerning that consent will be respected subject to relevant law and circumstances.
Purpose • Relevance • Accuracy • Security
Purpose — use information for appropriate and identifiable purposes.
Relevance — avoid unnecessary collection where information is not reasonably required.
Accuracy — maintain appropriate information quality where accuracy is relevant.
Retention — avoid retaining personal information indefinitely without an appropriate reason.
Security — use reasonable safeguards appropriate to the information and circumstances.
Privacy Within Institutional Accreditation
Accreditation can require institutions to provide substantial organizational evidence. Some institutional records may contain personal, confidential, commercially sensitive, safeguarding-related or otherwise restricted information.
Institutions remain responsible for considering privacy and other applicable legal obligations when providing information to ACISC and should avoid submitting unnecessary personal information where it is not relevant to the accreditation purpose.
Where appropriate, institutions should consider whether records can be limited, redacted or otherwise prepared so that the information necessary for evaluation is available without unnecessary disclosure of personal information.
Do Not Send Sensitive Records Unless They Are Required
Before providing personal information concerning students, employees, faculty, applicants or other individuals, institutions should determine whether that information is necessary for the applicable ACISC process.
Institutions should also consider whether they have the appropriate authority or other lawful basis to disclose information and whether any required notices, safeguards or redactions apply.
If an institution is uncertain whether sensitive information is required, it should request appropriate submission instructions before transmitting the information.
Check the Information
Is it required?
Is it relevant?
Can unnecessary personal data be removed?
Is redaction appropriate?
Is the submission channel appropriate?
Does another legal or safeguarding requirement apply?
Additional Care Is Appropriate for Student and Child-Related Information
Educational institutions can hold information concerning children, young people and students. ACISC does not encourage institutions to provide identifiable student information merely because an accreditation evaluation is taking place.
Where student-related evidence is necessary, institutions should consider data minimization, confidentiality, safeguarding requirements and appropriate redaction before submission.
Information concerning safeguarding matters requires particular care and should be handled according to applicable procedures, legal obligations and the legitimate needs of the relevant process.
When Information May Need to Be Disclosed
ACISC does not need to make personal information public merely because information has been received through an accreditation, membership or other organizational process.
Information may nevertheless need to be shared where appropriate for the applicable activity, with authorized professional participants or service providers, where disclosure is required by law, or where another legitimate and lawful reason applies.
Authorized Personnel
Information may be accessible to ACISC personnel who require it for relevant organizational responsibilities.
Evaluators & Reviewers
Relevant information may be made available to authorized professional participants where necessary for accreditation evaluation or review.
Service Providers
Organizations supporting website, communications, technology, administration or other functions may process information where necessary to provide those services.
Legal Requirements
Information may be disclosed where required or permitted by applicable law, legal process or competent authority.
Protection & Security
Disclosure may occur where appropriately necessary to protect rights, security, systems, individuals or legitimate organizational interests.
With Appropriate Authorization
Information may be disclosed where the individual or institution has appropriately authorized the disclosure.
Privacy Does Not Prevent Appropriate Accreditation Transparency
ACISC may publish appropriate institutional accreditation information where publication forms part of its accreditation transparency and verification functions.
Public institutional information may include matters such as institutional identity, accreditation status, approved scope, relevant dates or accreditation actions where appropriate under applicable ACISC procedures.
This should be distinguished from confidential institutional records or unnecessary personal information, which should not be disclosed simply because transparency is important.
Transparency + Privacy
Publish appropriate institutional status information
Protect unnecessary personal information
Respect confidentiality where applicable
Provide sufficient information for accreditation verification
ACISC Works in an International Educational Environment
ACISC works with institutions, professionals and stakeholders in different countries. As a result, information connected with ACISC activities may involve more than one jurisdiction.
Where personal information is transferred, accessed or processed internationally, applicable legal requirements and appropriate safeguards should be considered according to the circumstances.
Institutions remain responsible for their own obligations when transferring information to ACISC from their jurisdiction.
Information Is Not Intended to Be Retained Without Purpose
Retention requirements vary according to the nature of the information and the purpose for which it is held.
ACISC may retain information for periods reasonably necessary for accreditation or membership records, organizational administration, professional activities, dispute or complaint handling, legal responsibilities, security, historical record requirements or other legitimate purposes.
Different categories of information may therefore be subject to different retention considerations.
Why Information May Need to Be Kept
Accreditation record integrity
Continuing institutional relationship
Membership administration
Legal responsibilities
Complaints or disputes
Security requirements
Organizational recordkeeping
Reasonable Safeguards Should Protect Personal Information
ACISC seeks to use reasonable organizational and technical measures appropriate to the nature of the information and the relevant risks.
No website, email system, electronic transmission or information-storage method can be represented as completely risk-free. Users and institutions should therefore use appropriate care when transmitting confidential or sensitive information.
Where ACISC provides a specific submission process for sensitive institutional information, institutions should use that process rather than sending sensitive records through an unrelated public form.
Cookies, Logs and Similar Technologies
The ACISC website may use cookies, server logs or similar technologies necessary for website operation, security, functionality, performance or other appropriate purposes.
Where optional technologies require consent under applicable law, relevant choices or notices should be provided through the website where required.
Browser settings may also allow users to control certain cookies. Restricting essential technologies may affect website functionality.
External Providers May Have Their Own Privacy Practices
ACISC may use third-party services to support website hosting, communications, forms, security, analytics, document handling or other organizational functions.
Where another organization processes information on behalf of ACISC, appropriate data-protection considerations should form part of the relevant service relationship.
The ACISC website may also link to external websites. ACISC does not control the privacy practices of independent external websites, and users should review the privacy information provided by those organizations.
Privacy Rights May Depend on Applicable Law
Depending on the applicable jurisdiction and circumstances, individuals may have legal rights concerning personal information held about them.
These rights are not identical in every country and can be subject to legal conditions, exemptions and verification requirements.
Access
You may have a right to request information about personal data held about you.
Correction
You may have a right to request correction of inaccurate personal information.
Deletion
In applicable circumstances, you may have a right to request deletion of certain personal information.
Restriction or Objection
Applicable law may provide rights to restrict or object to certain processing.
Data Portability
Applicable law may provide a right to receive certain information in a portable form.
Consent
Where processing relies specifically on consent, applicable law may permit withdrawal of that consent.
Contact ACISC About Your Personal Information
If you have a question concerning personal information handled by ACISC or wish to make an applicable privacy request, contact ACISC and clearly identify the nature of your request.
ACISC may need sufficient information to identify the relevant records and verify the identity or authority of the person making a request before disclosing, changing or deleting personal information.
Do not send passwords, unnecessary identification documents or unrelated sensitive information in your initial privacy enquiry.
ACISC
Email:
info@acisc.org
United States Office:
1177 Avenue of the Americas
New York City, NY 10036
USA
Questions About Privacy or Information Handling
If you believe personal information has been handled incorrectly, you may contact ACISC with sufficient information to identify and consider the concern.
Depending on applicable law, individuals may also have the right to raise a concern with an appropriate data-protection or supervisory authority.
This privacy pathway is distinct from complaints concerning institutional accreditation, educational provision or other matters governed by separate ACISC procedures.
Tell ACISC When Relevant Information Changes
Individuals and institutions should provide accurate information when interacting with ACISC and should notify ACISC where significant contact or identifying information relevant to an active relationship changes.
This is particularly important where information is needed for accreditation communications, institutional records, membership administration or another continuing process.
This Privacy Policy May Be Updated
ACISC may revise this Privacy Policy when its activities, website, technologies, organizational practices or applicable requirements change.
The current version should be published on this page. Where an update materially affects a specific ongoing activity, additional communication may be provided where appropriate or required.
Visitors and participating institutions should refer to the current published policy when they need information about ACISC privacy practices.
Privacy Is Part of a Wider Accountability Framework
Data Protection
Review ACISC information concerning responsible data handling and data-protection considerations.
Terms & Conditions
Review the terms governing use of the ACISC website and its publicly available resources.
Policies & Accountability
Explore ACISC’s wider framework for organizational responsibility and accountability.
Transparency
Understand the relationship between appropriate public information, accreditation transparency and responsible disclosure.
Safeguarding
Review information concerning safeguarding responsibilities and appropriate handling of sensitive student-related matters.
Contact ACISC
Contact ACISC if you need clarification concerning privacy, information handling or the appropriate submission route.
Responsible Information Handling Supports Trust, Accountability and Institutional Integrity
ACISC seeks to balance the information requirements of accreditation, membership and organizational activities with appropriate privacy, confidentiality, safeguarding and data-protection considerations.
If you are uncertain whether personal or sensitive information should be submitted to ACISC, contact ACISC first and request the appropriate submission instructions.