Campus Security Portal
Data Protection
This notice summarizes information used for registration, campus verification and incident response.
This portal service notice is not an official university-wide policy or a claim of legal certification.
Student information
Student registration collects a student number, name, school email, contact number, password hash, consent time and numerical face templates. Temporary registration face captures create templates; they are not saved as student profile photos.
Students may separately upload an optional display photo in Profile and remove or replace it there. The photo is stored with the account and shown only in that student's authenticated portal. It does not replace or retrain the registered face templates. The uploaded file is resized and re-encoded without its original metadata.
School email is used for verification and recovery codes, duplicate checks and separately requested report-update emails, not as a student login identifier. Incident reports may contain descriptions, evidence and security updates. Newly opted-in reports include the status, updating staff display name and update date/time in email; earlier opt-ins retain reference-only notifications.
Visitor and alumni information
Visitor registration collects visit details, a contact number, a pass photo and face templates; no email is required. Unfinished drafts expire after 30 minutes. Completed pending passes expire after 24 hours; checked-in visits permit recognition for up to 24 hours.
Reusable alumni profiles require separate consent. Pending profiles expire after seven days; approved profiles are retained for one year after approval. Uploaded alumni ID images are removed on approval, rejection or profile expiry. Recognition still requires a current checked-in visit.
Expired passes and profiles stop working immediately. Scheduled cleanup removes expired records when services are running; an offline service can delay physical deletion. CCTV evidence is separate from a visitor pass.
Access, retention and your choices
Authorized staff review information according to their assigned role. Archiving a student account restricts access but does not delete the account or its templates. This notice does not promise automatic deletion of student accounts or CCTV recordings after a fixed period.
An authorized administrator may permanently delete a student login account, its optional profile photo and registered database face templates after explicit confirmation. Incident reports, evidence and administrative audit history are retained separately. Offline device caches and backups are not erased by that action; recognition devices must successfully synchronize before using the updated gallery.
Ask campus security or the project administrator about access, correction, withdrawal of consent, deletion or non-biometric verification. Alumni can delete their profile and linked passes from their account. Report email updates can be stopped in My Reports.
The notice and consent shown during registration provide the details for that registration. Opening these policy pages does not register an account or accept consent on your behalf.