SPACS College Online Examination Portal
Effective Date: 15 June 2026 | Last Updated: 15 June 2026 | Version 2.0
SPACS College is an educational institution based at 5 James Ave., Ocho Rios, St. Ann, Jamaica. For the purposes of the Jamaica DPA and the GDPR, SPACS is the data controller that determines the purposes and means of processing your Personal Data through the Portal. Our Data Protection Officer can be reached at info@spacscollege.com.
This Policy applies to all users of the Portal worldwide — students, faculty, external examiners, administrators, and visitors.
To verify your identity and supervise examinations, we may collect:
We collect Personal Data: (a) directly from you when you register, complete your profile, take examinations, or contact us; (b) automatically through your use of the Portal and proctoring tools; and (c) from authorised third parties such as SPACS administrators who create accounts or assign you to programmes.
We process Personal Data for the following purposes, relying on one or more lawful bases recognised under the Jamaica DPA and the GDPR:
Where we rely on consent, you may withdraw it at any time (see Section 12); withdrawal does not affect processing carried out before withdrawal and may limit your ability to use certain features such as online proctored examinations.
We comply with the eight Data Protection Standards set out in the Jamaica DPA:
| Standard | How we apply it |
|---|---|
| 1. Fair & lawful processing | We process data fairly, lawfully, and transparently, meeting the Act's conditions for ordinary and sensitive personal data (including explicit consent for biometric data). |
| 2. Purpose limitation | We collect data for the specified, explicit, and lawful purposes in this Policy and do not use it in incompatible ways. |
| 3. Data minimisation | We collect only data that is adequate, relevant, and not excessive for those purposes. |
| 4. Accuracy | We take reasonable steps to keep data accurate and up to date, and to correct it on request. |
| 5. Storage limitation | We keep data only as long as necessary for the purposes or as required by law (see Section 10). |
| 6. Data-subject rights | We process data in accordance with your rights under the Act (see Section 12). |
| 7. Security | We apply appropriate technical and organisational measures against unauthorised or unlawful processing, loss, or damage (see Section 11). |
| 8. Cross-border transfers | We do not transfer data outside Jamaica unless an adequate level of protection or another lawful condition under the Act is met (see Section 8). |
Your data may be accessed by faculty teaching your courses, external examiners reviewing your work, administrators, and authorised support/IT staff — on a need-to-know basis.
We share data with trusted providers who process it on our behalf under written agreements that require appropriate security and confidentiality, including cloud hosting and database providers, email-delivery providers, and proctoring/System technology providers. They may act only on our instructions.
We may disclose data where required by law, court order, or a lawful request by a public authority, or where necessary to establish, exercise, or defend legal claims, or to protect the rights, safety, or property of SPACS, our users, or others.
Because the Portal and some of our service providers operate globally, your Personal Data may be stored or processed in countries outside Jamaica and outside your country of residence. In line with the Jamaica DPA's eighth standard and the GDPR, we transfer data internationally only where there is an adequate level of protection or where an appropriate safeguard applies — for example, contractual protections such as standard/model contractual clauses with our processors, or your explicit consent. You may contact us for more information about the safeguards in place.
The Portal uses automated tools, including System-assisted proctoring and grading assistance. Automated integrity flags and System-assisted scores are not used as the sole basis for decisions that produce significant effects on you: a qualified human reviewer evaluates flagged examination sessions and finalises grades. You have the right to obtain human intervention, to express your point of view, and to request reconsideration of any decision that was based solely on automated processing. To do so, contact info@spacscollege.com.
We retain Personal Data only for as long as necessary for the purposes described in this Policy and to meet legal, academic, and regulatory obligations:
When data is no longer required, we securely delete, destroy, or irreversibly anonymise it.
We implement appropriate technical and organisational measures to protect Personal Data, including encryption of data in transit, access controls and authentication, role-based permissions, restricted access on a need-to-know basis, activity logging, and secure backups. While we work hard to protect your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Subject to the conditions and exemptions in applicable law, you have the following rights over your Personal Data under the Jamaica DPA and, where applicable, the GDPR:
To exercise any of these rights, contact our Data Protection Officer at info@spacscollege.com. We will respond within the timeframe required by applicable law (generally within 30 days). We may need to verify your identity before acting on a request, and a request will not be honoured to the extent it conflicts with our legal obligations.
We use strictly necessary cookies and similar technologies to keep you logged in, remember your preferences, maintain security, and understand how the Portal is used. You can control cookies through your browser settings, but disabling certain cookies may affect Portal functionality (including your ability to sign in or take an examination).
The Portal is intended for users who are at least 18, or at least 16 with verifiable parental or guardian consent where permitted by local law. We do not knowingly collect data from children below the applicable age without the required consent. If you believe a minor has provided data without appropriate consent, contact us and we will take appropriate steps to delete it.
We maintain procedures to detect, report, and investigate Personal Data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority (in Jamaica, the Office of the Information Commissioner) and, where required, affected data subjects, in accordance with applicable law.
We may update this Policy from time to time. We will revise the "Last Updated" date and, for material changes, notify you through the Portal and/or by email. Your continued use of the Portal after changes take effect constitutes acceptance of the updated Policy.
For any privacy question, or to exercise your rights, contact our Data Protection Officer:
SPACS College — Data Protection Officer
5 James Ave., Ocho Rios, St. Ann, Jamaica
Phone: (876) 845-4862 / (876) 620-9505
Email: info@spacscollege.com
Website: www.spacscollege.com
If you are not satisfied with our response, you have the right to lodge a complaint with the supervisory authority in your jurisdiction. In Jamaica, this is the Office of the Information Commissioner (OIC). Users in the EU/UK may complain to their local data-protection authority.