Data Privacy Policy

WYNIMPH DATA PRIVACY POLICY By submitting the registration form on this website, you agree to the collection, use, and processing of your personal data as described below. This Policy applies to individuals in the Philippines, Canada, and the European Union/European Economic Area, and we aim for it to comply with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (Philippines), PIPEDA and applicable Canadian provincial privacy laws (Canada), and the General Data Protection Regulation "GDPR" (European Union). If a specific law requires a higher standard, we will follow that higher standard. 1. DATA CONTROLLER AND CONTACT Wynim Educational Consulting Philippines ("Wynimph", "we", "us", "our") is the data controller for the personal information collected through this website. For privacy questions, requests, or complaints you may contact us through the contact information listed on this website. 2. WHAT WE COLLECT We collect information you voluntarily provide through the registration form, which may include: full name, email address, phone or mobile number, messaging application handle, preferred contact methods, school name, programs of interest, how you heard about us, and the content of your message to us. We may also collect technical data such as your IP address, browser type, and pages visited for security and website analytics. 3. LEGAL BASIS AND PURPOSES We may rely on any of the following legal bases for processing, depending on the situation: - Consent (which you give by submitting this form and agreeing to this Policy and our Terms of Use); - The performance of a contract or steps taken before entering into a contract with you; - Our legitimate interests, such as responding to enquiries, providing educational consultancy services, and improving our website; - Compliance with a legal obligation. We use your data to: respond to your registration and enquiries, contact you about our programs and services, manage your application and pre-departure steps (including interviews, contracts, and deployment documentation), comply with legal and regulatory requirements (including laws of the Philippines and Canada), and prevent fraud or abuse of our services. 4. CONSENT FOR MINORS If you are below the age of majority in your country (18 years old in the Philippines under Republic Act No. 6809; 18 or 19 in most Canadian provinces; 16 under the GDPR unless national law sets a lower age), you must review this Policy together with your parent or legal guardian. By submitting this form, you confirm that your parent or legal guardian has read and agreed to this Policy, our Terms of Use, the Informed Consent notice, and consents to the collection and processing of your personal information. We may ask for proof of consent where required by law. We encourage parents and guardians to supervise children's use of our website. 5. HOW WE PROTECT YOUR DATA We implement reasonable and appropriate organizational, physical, and technical security measures to protect your personal information against loss, unauthorized access, alteration, disclosure, or misuse. These include encryption of sensitive fields, secure storage, restricted access on a need-to-know basis, and regular review of our security practices. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. 6. SHARING AND CROSS-BORDER TRANSFERS We do not sell your personal information. We may share your information only where necessary to provide our services, such as with service providers who help us operate our website, send emails, schedule interviews, prepare contracts, or process documents (for example, educational institutions or regulatory bodies in the Philippines or Canada). When we transfer data across borders, we rely on appropriate safeguards and apply standards consistent with the Data Privacy Act of 2012, PIPEDA, and the GDPR, including relevant contractual safeguards. Where a transfer requires it (for example, to a destination outside the Philippines for nationals covered by the DPA, or outside the EU/EEA for EU data subjects), we take steps to ensure an adequate level of protection. 7. RETENTION We keep personal information only as long as necessary for the purposes described in this Policy, for our legitimate business and record-keeping needs, and to comply with legal obligations (for example, regulatory or tax record retention requirements of the Philippines or Canada). When the data is no longer needed, we securely delete or anonymize it. 8. YOUR RIGHTS Subject to applicable law, you may have the following rights: - The right to be informed about how your data is processed; - The right to access a copy of your personal information; - The right to request correction or update of inaccurate or incomplete data; - The right to request deletion or erasure of your data ("right to be forgotten" under the GDPR); - The right to restrict or object to processing in certain circumstances; - The right to data portability (GDPR); - The right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal; - The right not to be subjected to decisions based solely on automated processing that produce legal effects. To exercise any of these rights, contact us using the contact details on this website. We will respond within the time limits required by applicable law (for example, the GDPR requires a response within one month, which may be extended under certain conditions). Under the Data Privacy Act of 2012 you may also file a complaint with the Philippine National Privacy Commission. 9. COOKIES AND AUTOMATED DATA We may use cookies and similar technologies for security and analytics. You can control cookies through your browser settings. 10. MARKETING COMMUNICATIONS With your consent and subject to applicable anti-spam laws (such as Canada's CASL), we may send you information about our services. You may opt out of marketing messages at any time using the unsubscribe instructions included in each message. 11. CHANGES TO THIS POLICY We may update this Policy from time to time. The current version and its effective date will always be published on this page, and material changes will be highlighted where appropriate. 12. CONTACT AND COMPLAINTS For questions, requests, or complaints about your personal information, contact us at the address or contact details listed on this website. You may also lodge a complaint with your local supervisory authority, such as the National Privacy Commission of the Philippines, the Office of the Privacy Commissioner of Canada, or the data protection authority of your EU/EEA country.