Privacy Policy

BEACON SCHOOL PRIVACY POLICY

BEACON SCHOOL ENSINO INTEGRADO LTDA., a private legal entity headquartered at Av. Mofarrej, nº 1.267, Vila Leopoldina district, ZIP Code 05311-000, in the city of São Paulo, State of São Paulo, registered under CNPJ nº 15.177.464/0003-07 (“School” or “BEACON”), takes privacy seriously and is committed to ensuring the security and protection of the Personal Data of all users of our services (“Data Subject” or “you”).

This Beacon School Privacy Policy (“Privacy Policy”) provides an overview of our data privacy and protection practices, and is intended to inform you about how we collect, use, share, and store your Personal Data when you interact with us.

What concepts do you need to understand to navigate this Policy?

This section would likely include key terms such as:

Personal Data: Information that directly or indirectly identifies an individual.
Data Processing: Any operation performed on Personal Data, such as collection, storage, use, or sharing.
Data Controller: The entity responsible for determining the purposes and means of processing Personal Data (in this case, BEACON).
Data Subject: The individual whose personal information is being processed (e.g., students, parents, staff).
Consent: A clear affirmative action by the Data Subject allowing the processing of their Personal Data.

These concepts are fundamental to understanding how BEACON manages Personal Data in compliance with applicable laws.

Termo	Definição
Lei Geral de Proteção de Dados Pessoais (LGPD)	Law No. 13.709 of August 14, 2018, which regulates the processing of personal data, including in digital media, with the aim of protecting the fundamental rights of freedom, privacy, and the free development of the personality of the individual.
Personal Data	It is any information related to a natural person that can identify them or make them identifiable.
Data Subject	It is the natural person to whom the Personal Data refers.
Treatment	It is any operation or set of operations carried out with Personal Data, such as collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, deletion, among others.
Controller	It is any natural or legal person, whether public or private, responsible for making decisions regarding the Processing of Personal Data.
Encarregado	It is the person designated by the Controller to act as a communication channel between the Controller, the Data Subjects, and the ANPD (National Data Protection Authority), among other responsibilities provided for by law.
Autoridade Nacional de Proteção de Dados (ANPD)	It is a special regulatory agency linked to the Ministry of Justice and Public Security, responsible for ensuring the protection of Personal Data and for regulating, implementing, and overseeing compliance with the LGPD (General Data Protection Law) in Brazil.
Security Incident	It is any adverse event related to a breach of Personal Data security that may result in risk to the rights and freedoms of the Personal Data Subjects.

Who is the Controller of your Personal Data?

BEACON is the Controller of your Personal Data in the context of the relationship established with you. In accordance with the transparency principle set out in the LGPD (General Data Protection Law), the School, through this Policy, communicates clear and precise information to Data Subjects about how their Personal Data is processed.

For what purposes does BEACON process your Personal Data?

Personal Data of prospective students: required for enrollment and participation in the School’s admission process, such as name, phone number, home address, date of birth, among others.
Personal Data of students and their legal guardians: for the purpose of providing educational services, as detailed in the “Beacon School Students and Guardians Privacy Policy.”
Personal Data of visitors and users of the School’s websites: such as IP addresses, browser type, pages accessed, time spent on the site, as detailed in our “Cookies Policy.”
Personal Data of visitors to Beacon’s campuses: such as name, images captured by CCTV, and biometrics.

Additionally, the Personal Data provided may also be used as necessary or appropriate: (a) under applicable laws; (b) to comply with legal processes; (c) to meet judicial or regulatory requirements; (d) to protect BEACON’s operations; (e) to safeguard BEACON’s rights, privacy, and security or those of third parties; (f) to detect and prevent fraud; (g) to allow BEACON to take legal action or limit potential damages; (h) to manage BEACON’s infrastructure and operations, including internal policies related to auditing, finances, IT systems, and document management; and (i) for other legitimate uses permitted by law.

Personal Data of Children and Adolescents

In cases where the processing of Personal Data involves children and adolescents, BEACON will comply with the provisions of the LGPD and the guidelines issued by the ANPD (National Data Protection Authority). Furthermore, processing will always prioritize the best interests of the minor, as regulated by the Child and Adolescent Statute (ECA).

With whom do we share your Personal Data?

BEACON may share your Personal Data with suppliers and partners authorized to use your data only for the specific purposes for which they were contracted, such as document storage, software providers, cloud hosting services, and other technologies used to manage tasks related to the School’s relationship with you. These professionals assist in providing educational services as required for specific tasks.

BEACON may also transfer your Personal Data internationally if it contracts commercial partners that offer cloud storage services on servers located outside Brazil. In such cases, we ensure that we only contract top-tier service providers with the necessary technical, organizational, and administrative structure to guarantee the security and integrity of your Personal Data, as well as compliance with the principles and obligations set out in the LGPD.

How long do we store your Personal Data?

Personal Data processed by BEACON will only be stored for as long as necessary to fulfill the purposes for which it was collected or to comply with legal, contractual, and regulatory obligations.

Your Personal Data will be deleted from our systems after the purposes are fulfilled or when deletion is requested by the Data Subject, unless its retention is necessary to comply with legal obligations and/or to protect our rights.

What are your rights as a Personal Data Subject?

You may, at any time, request from BEACON: (i) confirmation that your Personal Data is being processed; (ii) access to your Personal Data; (iii) corrections of incomplete, inaccurate, or outdated Personal Data; (iv) anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed Personal Data; (v) deletion of Personal Data processed with your consent, as permitted by data protection laws; (vi) information about entities with whom your Personal Data has been shared; (vii) information about the possibility of not providing consent and the consequences of refusal; and (viii) revocation of consent.

Requests will be handled with special care to ensure the effectiveness of your rights within a reasonable timeframe and always in compliance with applicable legislation.

What is BEACON’s stance on your Personal Data?

BEACON only processes your Personal Data for the purposes described in this Policy. While we are committed to privacy and protection of your Personal Data, we are not immune to security incidents, such as hardware or software failures, unauthorized account use, and other occurrences that may compromise the security of your data.

However, we guarantee that in the event of a Personal Data Security Incident that poses a relevant risk or harm to the Data Subject, we will follow all guidelines set forth by data privacy legislation and the ANPD.

If you detect any security issue with your Personal Data or wish to exercise any of your Data Subject rights, please contact us.

How to contact BEACON regarding your Personal Data?

The School has a communication channel for Personal Data Subjects. If you have any questions, suggestions, or requests related to your Personal Data or your rights, you can contact our Data Protection Officer via email at: dpo@beaconschool.com.br.

What if our Privacy Policy changes?

BEACON is continuously improving its services, which may lead to updates in our Privacy Policy. We recommend that you periodically review this Policy, which will have its most updated version available on this website.

September 2024