Privacy & Data Protection Policy
Summary
Spanish House MX respects and protects personal information collected during academic programs. We comply with Mexico’s Federal Law on Protection of Personal Data Held by Private Parties and adopt comparable safeguards to U.S. educational privacy standards. All data are used exclusively for program coordination and never shared without consent.
Policy
Spanish House MX manages all participant information in strict accordance with privacy and confidentiality obligations.
Scope of Data
Personal, academic, and health information required for program logistics, housing, and safety planning.
Data Handling Principles
-
Lawful Purpose: Data are used solely for program administration.
-
Security: Encrypted storage and password-restricted systems.
-
Access Control: Only authorized staff access personal records.
-
Retention: Data are stored for 180 days post-program, then deleted or anonymized.
-
Rights (ARCO): Individuals may request Access, Rectification, Cancellation, or Opposition by email to admin@spanishhouse.mx.
-
Data Breach Response: Any unauthorized disclosure triggers internal containment and notification within 24 hours.
âš– Legal Framework
-
Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP, DOF 05-07-2010)
-
Reglamento de la LFPDPPP (DOF 21-12-2011)
-
FERPA (U.S. Family Educational Rights and Privacy Act) – comparative compliance model