Privacy Policy

SPACS College – School of Paramedics Studies

Effective Date: 11 September 2026
Last Updated: 11 September 2026

The School of Paramedics Studies, also operating as SPACS College (“SPACS,” “we,” “us,” or “our”), respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how SPACS collects, accesses, uses, stores, shares, and protects personal information when you:

  • Visit https://spacscollege.com/ or https://my.spacscollege.com;
  • Submit an application, enquiry, registration, or other website form;
  • Use an SPACS-provided student, faculty, or administrative account;
  • Participate in online classes or staff meetings;
  • Authorise SPACS to connect with your Google Account; or
  • Otherwise interact with SPACS College’s websites, educational systems, and online services.

This Privacy Policy applies to prospective students, enrolled students, parents or guardians, faculty members, staff members, website visitors, and other authorised users of SPACS College’s services.

1. Who We Are

SPACS College is an educational institution providing allied-health education, training, student administration, live online classes, staff collaboration, and related academic services.

For the purposes of applicable data-protection laws, SPACS College is responsible for determining how and why personal information is processed through its website and educational systems.

SPACS College – School of Paramedics Studies
5 James Avenue
Ocho Rios, St. Ann
Jamaica

Email: spacsparamedicals@yahoo.com
Telephone: (876) 845-4862 or (876) 620-9505
Website: https://spacscollege.com/

2. Information We Collect

The information we collect depends on how you interact with SPACS College and the services you use.

2.1 Identity and Contact Information

We may collect:

  • Full name;
  • Email address;
  • Telephone number;
  • Mailing address;
  • Country of residence;
  • Date of birth;
  • Gender;
  • Profile photograph;
  • Student, faculty, staff, or registration number; and
  • Your assigned institutional role.

2.2 Application, Enrolment, and Academic Information

We may collect:

  • Programme and course selections;
  • Application and enrolment information;
  • Student status;
  • Attendance information;
  • Class assignments and schedules;
  • Grades and academic-performance information;
  • Certificates, transcripts, and academic records;
  • Communications with SPACS faculty and administrators; and
  • Documents or files submitted to SPACS.

2.3 Website and Communication Information

When you visit our website or contact SPACS, we may collect:

  • Information submitted through website forms;
  • The contents of enquiries or support requests;
  • Email correspondence;
  • Telephone or other contact information;
  • Newsletter or communication preferences; and
  • Any documents or attachments you voluntarily provide.

2.4 Technical and Usage Information

We may automatically collect:

  • Internet Protocol address;
  • Browser type and version;
  • Device type;
  • Operating system;
  • Login dates and times;
  • Session duration;
  • Pages or features accessed;
  • Error and security logs;
  • Referring website; and
  • Cookies or similar technical identifiers.

2.5 Google Account and Calendar Information

SPACS uses Google services to allow authorised faculty members, administrators, and staff members to schedule and manage live classes and meetings conducted through Google Meet.

When an authorised user connects a Google Account, SPACS may request access to certain Google Account and Google Calendar information.

Depending on the permissions displayed on Google’s OAuth consent screen, this information may include:

  • The user’s name;
  • Google Account email address;
  • Google profile photograph, if available;
  • A unique Google Account identifier;
  • Calendar identifiers;
  • Calendar names and settings;
  • Existing calendar-event information necessary to identify or manage an SPACS-created class or meeting;
  • Event titles and descriptions;
  • Event dates, start times, end times, and time zones;
  • Attendee names and email addresses;
  • Invitation and response information;
  • Google Meet conference links and related conference details; and
  • OAuth authorisation tokens required to maintain the authorised Google connection.

Google’s authorisation permissions may allow the connected service to view, create, modify, or delete Google Calendar events. SPACS limits its actual use of these permissions to the calendar operations reasonably necessary to create and manage SPACS-related live classes and meetings.

SPACS does not intentionally access unrelated personal calendar events except where access is technically necessary to locate, prevent conflicts with, update, or remove an SPACS-created event.

Unless separately disclosed and expressly authorised, SPACS does not access:

  • The content of Gmail messages;
  • Google Drive files;
  • Google Photos;
  • Google Contacts unrelated to class or meeting invitations;
  • Search history;
  • Location history; or
  • Other private Google services that are not required for scheduling live classes or meetings.

3. How We Collect Information

We may collect information:

  • Directly from you when you submit a form, create an account, contact SPACS, or provide academic information;
  • From authorised SPACS personnel who administer student, faculty, staff, or class records;
  • Automatically through website cookies, server logs, security tools, and system activity;
  • Through Google OAuth when an authorised user connects a Google Account;
  • Through Google Calendar when an authorised user schedules or manages a live class or meeting; and
  • From contracted service providers acting on behalf of SPACS.

4. How We Use Personal Information

SPACS may use personal information to:

  • Operate and maintain the SPACS College website;
  • Process applications and enrolments;
  • Manage student, faculty, and staff accounts;
  • Administer programmes, courses, class schedules, and institutional activities;
  • Communicate with applicants, students, faculty members, staff members, and other users;
  • Respond to enquiries and support requests;
  • Schedule and manage live online classes;
  • Schedule and manage staff meetings;
  • Create Google Calendar events;
  • Generate Google Meet links for authorised classes and meetings;
  • Invite appropriate students, faculty members, or staff members;
  • Send or facilitate class and meeting notifications;
  • Update or cancel SPACS-created calendar events;
  • Maintain attendance and participation records where applicable;
  • Prevent unauthorised access, fraud, or misuse;
  • Maintain and improve the security and operation of our services;
  • Meet educational, accreditation, contractual, legal, and regulatory obligations; and
  • Establish, exercise, or defend legal claims.

Google user data is used only to provide and support the Google Calendar and Google Meet functionality requested by the authorised user.

5. How SPACS Uses Google User Data

SPACS uses information received from Google APIs only for the following user-facing purposes:

  • Connecting an authorised Google Account to SPACS’s educational management system;
  • Authenticating the connected Google Account;
  • Creating calendar events for live classes and staff meetings;
  • Adding authorised attendees to those events;
  • Creating or associating Google Meet conferencing information with events;
  • Displaying class or meeting dates, times, attendees, and joining links;
  • Updating an SPACS-created event when a class or meeting is rescheduled;
  • Cancelling or deleting an SPACS-created event when the related class or meeting is cancelled; and
  • Troubleshooting or securing the Google integration.

SPACS does not use Google user data for:

  • Advertising;
  • Personalised or targeted marketing;
  • Retargeting;
  • Building advertising profiles;
  • Determining creditworthiness;
  • Lending purposes;
  • Selling information;
  • Providing information to data brokers or information resellers;
  • Creating unrelated databases; or
  • Developing, improving, or training generalised or non-personalised artificial-intelligence or machine-learning models.

SPACS will not use Google user data for a materially different purpose without providing appropriate notice and obtaining any consent required by applicable law and Google’s policies.

6. Google API Services User Data Policy

SPACS College’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Information received from Google APIs will be used only to provide or improve user-facing features related to scheduling and managing SPACS live classes and meetings.

Google user data will not be accessed by a person except where:

  • The user has provided affirmative consent;
  • Access is necessary to provide technical or account support requested by the user;
  • Access is necessary to investigate a security incident, fraud, abuse, or system malfunction;
  • Access is required to comply with applicable law; or
  • The information has been aggregated and anonymised for legitimate internal operational purposes.

For additional information, please review the Google API Services User Data Policy.

7. Legal Bases for Processing

Where applicable law requires a legal basis, SPACS may process personal information based on:

  • Your consent;
  • The performance of an educational or other agreement with you;
  • Compliance with a legal or regulatory obligation;
  • SPACS’s legitimate interest in providing, administering, securing, and improving its educational services;
  • Protection of the rights, safety, and property of SPACS and its users; or
  • The establishment, exercise, or defence of legal claims.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing lawfully completed before consent was withdrawn.

8. How We Share Information

SPACS does not sell personal information or Google user data.

We may share information only as described below.

8.1 Authorised SPACS Personnel

Information may be accessed by authorised administrators, faculty members, staff members, and technical-support personnel on a need-to-know basis.

Calendar-event details and Google Meet links may be made available to students, faculty members, or staff members who have been invited to the relevant class or meeting.

8.2 Google

Information is exchanged with Google when an authorised user:

  • Connects a Google Account;
  • Creates or updates a Google Calendar event;
  • Generates or uses a Google Meet link;
  • Invites attendees; or
  • Revokes the Google connection.

Google processes information according to its own applicable terms and privacy policies.

8.3 Technology Service Providers

SPACS may use trusted service providers for:

  • Website and application hosting;
  • Database storage;
  • Email delivery;
  • Account authentication;
  • Educational-system maintenance;
  • Data backup;
  • Cybersecurity; and
  • Technical support.

These providers may process information only as necessary to deliver their contracted services and are expected to maintain appropriate confidentiality, privacy, and security safeguards.

8.4 Legal and Protective Disclosures

We may disclose information where reasonably necessary to:

  • Comply with applicable law, a court order, or a lawful request from a public authority;
  • Investigate fraud, misuse, or a security incident;
  • Protect the rights, safety, and property of SPACS, its students, staff, or other persons; or
  • Establish, exercise, or defend a legal claim.

9. Storage and International Transfers

SPACS and its service providers may store or process information in Jamaica and in other countries where technology, hosting, authentication, email, or Google services operate.

Where information is transferred internationally, SPACS will take reasonable steps to ensure that appropriate legal, contractual, and technical safeguards are applied.

10. Data Retention and Deletion

SPACS retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by educational, accreditation, contractual, regulatory, or legal obligations.

The following retention practices apply to Google user data:

  • Google Account identifiers and connection details may be retained while the Google integration remains active.
  • OAuth access and refresh tokens may be securely retained for as long as necessary to maintain the authorised connection.
  • Calendar-event identifiers and event details may be retained while the associated class, meeting, attendance record, or institutional record remains necessary.
  • Google Meet links may be retained with the related class or meeting record.
  • When Google information is no longer required, it will be securely deleted, de-identified, anonymised, or disconnected.
  • Revoked or expired OAuth tokens will no longer be used and will be deleted or invalidated in accordance with applicable technical and retention procedures.

Other institutional information may be retained for the period required by SPACS’s academic, administrative, accreditation, financial, or legal obligations.

11. Disconnecting Google Access

An authorised user may revoke SPACS College’s access to their Google Account at any time by visiting:

Google Account – Third-party connections

Revoking access prevents SPACS from making future Google API requests using that authorisation. Features that depend on Google Calendar or Google Meet may stop working after access is revoked.

Revoking Google access does not automatically delete information previously and lawfully stored by SPACS. A separate deletion request can be submitted using the contact information in Section 18.

12. Requesting Deletion of Google User Data

You may request deletion of Google user data associated with your SPACS account by emailing spacsparamedicals@yahoo.com.

Please include:

  • Your full name;
  • The Google Account email address connected to the service;
  • Your student, faculty, or staff identification number, if applicable; and
  • A clear request to disconnect your Google Account and delete the related Google user data.

SPACS may need to verify your identity before completing the request.

We will delete or anonymise eligible information within a reasonable period, subject to any academic, security, contractual, regulatory, or legal obligation that requires specific records to be retained.

If certain information cannot be deleted immediately, we will restrict its use to the purpose for which retention is legally or institutionally required.

13. Information Security

SPACS uses reasonable technical and organisational safeguards designed to protect personal information and Google user data, including:

  • Encryption of information in transit;
  • Secure HTTPS connections;
  • Account authentication;
  • Role-based permissions;
  • Restricted administrative access;
  • Secure storage of authentication credentials and tokens;
  • Security and activity logging;
  • System monitoring;
  • Secure backups;
  • Software and security updates; and
  • Confidentiality requirements for authorised personnel and service providers.

OAuth Client Secrets and access tokens are not intended to be publicly disclosed or made available to unauthorised users.

Although we take reasonable precautions, no electronic transmission or storage method is completely secure. SPACS cannot guarantee absolute security.

If you believe your account or information has been compromised, contact spacsparamedicals@yahoo.com immediately.

14. Cookies and Similar Technologies

The SPACS website and related systems may use cookies and similar technologies to:

  • Maintain secure user sessions;
  • Keep authorised users signed in;
  • Remember preferences;
  • Prevent fraud or unauthorised access;
  • Support website functionality; and
  • Understand general website performance and usage.

Disabling necessary cookies may prevent certain website or account features from functioning correctly.

Where required by applicable law, SPACS will obtain consent before placing non-essential analytics, advertising, or similar cookies.

15. Your Privacy Rights

Subject to applicable law and relevant exemptions, you may have the right to:

  • Be informed about how your information is processed;
  • Request access to your personal information;
  • Request correction of inaccurate or incomplete information;
  • Request deletion, blocking, or destruction of eligible information;
  • Restrict or object to certain processing;
  • Withdraw consent;
  • Object to direct marketing;
  • Request a portable copy of certain information; and
  • Complain to an applicable data-protection authority.

To exercise a privacy right, email spacsparamedicals@yahoo.com. We may request information necessary to verify your identity and locate the relevant records.

16. Third-Party Websites and Services

The SPACS website may contain links to third-party websites or services, including Google Meet and Google Calendar.

SPACS is not responsible for the privacy practices, security, or content of independently operated third-party services. Users should review the relevant third party’s privacy policy before providing personal information.

17. Changes to This Privacy Policy

SPACS may update this Privacy Policy to reflect changes in our services, Google API permissions, technology, legal obligations, or data-handling practices.

When changes are made, we will update the “Last Updated” date at the top of this page.

If a change materially affects how we use Google user data or other personal information, SPACS may provide additional notice through its website, educational system, or email.

18. Contact Us

For privacy questions, complaints, Google-account disconnection requests, data-deletion requests, or requests to exercise your privacy rights, contact:

SPACS College – School of Paramedics Studies
Attention: Data Protection Officer
5 James Avenue
Ocho Rios, St. Ann
Jamaica

Email: spacsparamedicals@yahoo.com
Telephone: (876) 845-4862 or (876) 620-9505
Website: https://spacscollege.com/

If you are dissatisfied with our response, you may contact the Office of the Information Commissioner of Jamaica or another data-protection authority having jurisdiction over your complaint.