RCS Connect Privacy Policy
Effective Date: September 15, 2026
RCS Connect ("the App") is a parent portal operated by Rockwell Christian School ("RCS", "we", "us"). This policy explains how we collect, use, and protect your information.
Compliance Frameworks
HIPAAISO 27001SOC 2
Information We Collect
- Account information: Name, email address, password (hashed)
- Student health information (PHI): Medical conditions, allergies, medications, immunization records, insurance, and emergency contacts — collected only when you voluntarily submit them
- Usage data: Login timestamps, IP addresses, and access logs retained for security and compliance auditing
How We Use Your Information
- To provide access to school announcements, calendar, resources, and communication
- To store and retrieve student health records (PHI) that you submit
- To maintain security audit trails as required by HIPAA and SOC 2
- We do not sell, share, or market your personal information to third parties
Protected Health Information (HIPAA)
Student health records stored in this application are treated as Protected Health Information (PHI) under HIPAA. Access to PHI is:
- Restricted to the authenticated parent who submitted the record
- Accessible to authorized school administrators for legitimate educational and health purposes
- Logged in a tamper-evident audit trail for every access, creation, modification, or deletion
- Transmitted only over encrypted HTTPS connections
Data Security
- All passwords are hashed using bcrypt (minimum cost factor 12)
- All sessions use cryptographically random 384-bit tokens
- Login attempts are rate-limited and accounts are locked after repeated failures
- Security headers (HSTS, CSP, X-Frame-Options) are applied to all responses
- Audit logs are retained for a minimum of 6 years per HIPAA requirements
Your Rights
You have the right to access, correct, or request deletion of your personal information and your child's health records. Contact the school office at admin@rcs.edu.
Contact
For privacy questions or to report a security concern: admin@rcs.edu