Privacy Policy

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, we process personal information only when there is a lawful basis for doing so. The lawful bases we rely upon include:

• Consent: Where you have given us clear, informed, and freely given consent to process your personal information for a specific purpose, such as when you submit a contact form or accept our cookie policy.
• Contractual necessity: Where processing is necessary to fulfill a request you have made or to take steps prior to entering into an arrangement with you.
• Legitimate interests: Where processing is necessary for our legitimate interests in operating, improving, and securing our website and educational services, provided those interests are not overridden by your rights and freedoms.
• Legal obligation: Where we are required by Philippine law or regulation to process certain information.

We will always identify the specific lawful basis when collecting your information.

We collect only the minimum personal information necessary for the purposes described in this policy. The categories of information we may collect include:

Information you provide directly:

• Name (optional, if you choose to provide it via the contact form)
• Email address (when you contact us)
• Message content (the text of your inquiry)

Information collected automatically:

• IP address and approximate geographic location
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring URLs
• Cookie identifiers (where you have consented to cookies)

We do not collect sensitive personal information as defined under RA 10173, such as health information, financial account details, government identification numbers, or biometric data.

We use the personal information we collect for the following purposes:

• To respond to inquiries submitted through our contact form
• To provide information about our educational courses and services
• To operate, maintain, and improve our website
• To analyze website usage patterns to improve the user experience
• To ensure the security and integrity of our website
• To comply with applicable laws and regulations
• To address technical issues and prevent abuse of our services

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

We do not use your personal information to send unsolicited marketing communications unless you have explicitly requested such communications and provided consent.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

We may share your personal information with third parties only in the following limited circumstances:

• Service providers: We may share information with trusted third-party service providers who assist us in operating our website, such as web hosting providers and analytics services. These providers are contractually required to protect your information and use it only for the purposes we specify.
• Legal compliance: We may disclose information when required to do so by Philippine law, regulation, court order, or lawful government request.
• Protection of rights: We may disclose information when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Grand Arc, our users, or others.

Any third parties with whom we share personal information are required to handle it in accordance with applicable data protection laws.

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law.

Contact form submissions are retained for a period sufficient to handle your inquiry and any reasonable follow-up, typically no longer than 12 months, unless a longer retention period is required by law or you have an ongoing relationship with us.

Website analytics data collected through cookies is retained in accordance with the retention periods set by the analytics service provider, as described in our Cookie Policy.

When personal information is no longer required, we will securely delete or anonymize it in a manner that prevents reconstruction or identification.

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights regarding your personal information:

• Right to be informed: The right to know whether we hold personal information about you and how it is used.
• Right to access: The right to request a copy of the personal information we hold about you.
• Right to object: The right to object to the processing of your personal information, including for direct marketing purposes.
• Right to erasure or blocking: The right to request the deletion or blocking of your personal information when it is no longer necessary for the purpose for which it was collected, or when you withdraw consent.
• Right to rectification: The right to request correction of inaccurate or incomplete personal information.
• Right to data portability: The right to obtain a copy of your personal information in a structured, commonly used, and machine-readable format.
• Right to damages: The right to seek compensation for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal information.
• Right to file a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your rights have been violated.

To exercise any of these rights, please contact us at info@grandarc.digital. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Secure HTTPS encryption for all data transmitted between your browser and our website
• Access controls limiting who within our organization can access personal information
• Regular review of our security practices and procedures
• Use of reputable hosting and service providers with established security practices

While we take reasonable steps to protect your personal information, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining appropriate safeguards.

In the event of a personal data breach that is likely to result in harm to the data subjects, we will notify the National Privacy Commission and affected individuals in accordance with the requirements of RA 10173 and NPC Circular 16-03.

Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device when you visit our website. For detailed information about the cookies we use, the purposes for which we use them, and how to control your cookie preferences, please refer to our Cookie Policy.

We obtain your consent before placing non-essential cookies on your device through our cookie consent mechanism. You can withdraw your consent or modify your preferences at any time using the cookie settings tool on our website.

Our website and services are intended for adults and are not directed at children under the age of 18. We do not knowingly collect personal information from children under 18 years of age.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at info@grandarc.digital and we will take steps to delete such information from our systems.

We may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable legal requirements. When we make changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our website after any changes to this policy constitutes your acknowledgment of the updated terms.

For material changes that significantly affect your rights or how we handle your information, we will make reasonable efforts to notify you through a prominent notice on our website.