Privacy Policy

1. Overview

PERMIAS SMC ("we," "us," or "the organization") is a registered student organization at Santa Monica College. This Privacy Policy describes how we collect, use, store, and protect personal information submitted through this website, including event RSVPs and board portfolio management.

2. Information We Collect

When you RSVP to an event, we collect:

• Full name and email address (required)
• Phone number (optional)
• SMC Student ID number (optional) — collected solely to verify enrollment eligibility for SMC-sponsored events and campus room bookings
• Guest count and any notes you provide

3. SMC Student ID Retention

Where provided, your SMC Student ID is retained only for the duration necessary to reconcile campus facility bookings with SMC's Office of Student Life, typically no longer than one academic year following the event. It is never sold, shared with third-party advertisers, or used for any purpose beyond event administration and campus compliance reporting.

4. How We Use Your Information

We use the information you provide to manage event capacity, send confirmation and reminder communications, and understand aggregate attendance trends to plan future programming. We do not use your information for automated decision-making that produces legal or similarly significant effects.

5. Your Rights (CCPA / GDPR)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the right to know what personal information we hold about you, request deletion of that information, and opt out of any sale of personal information (we do not sell personal information). If you are located in the European Economic Area, the General Data Protection Regulation (GDPR) gives you the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing.

To exercise any of these rights, contact us at privacy@permiassmc.org. We will respond within the timeframe required by applicable law.

6. Data Security

Registration data is stored in an access-controlled database. Administrative access to the board portal is protected by password authentication (hashed using industry-standard bcrypt) and HTTP-only session cookies, and is limited to authorized board members.

7. Data Retention

Event registration records are retained for up to 24 months to support historical reporting for SMC Inter-Club Council compliance, after which they are deleted unless you request earlier deletion.

8. Contact

Questions about this policy can be directed to privacy@permiassmc.org.