1 Information We Collect

We collect information in different ways depending on how you interact with our platform. Some data you give us directly, other information comes from how you use our services.

2 How We Use Your Information

Your data helps us run a better educational platform. Here's what we actually do with it:

• Deliver our programs: We use your account info to give you access to courses, track your progress, and issue certificates when you complete programs.
• Improve your experience: Learning data helps us understand which modules work well and which need improvement. We might suggest specific lessons based on areas where you're struggling.
• Send relevant updates: We'll email you about new courses, program changes, or important announcements. You can opt out of promotional emails anytime.
• Process payments: Your billing information allows us to charge for paid programs and maintain accurate financial records.
• Provide support: When you contact us with questions, we need your information to respond effectively and resolve issues.
• Meet legal requirements: Sometimes we're required to maintain records for tax purposes or regulatory compliance in the Philippines.

We don't sell your personal information to third parties. Period. And we don't use your data for purposes unrelated to our educational services without getting your explicit permission first.

3 Data Sharing and Disclosure

We keep your information within our organization except in these specific situations:

Service Providers

We work with third-party companies that help us run the platform. This includes email services, payment processors, and hosting providers. These companies can only access your information to perform specific tasks on our behalf and are contractually obligated to protect it.

Legal Requirements

We may disclose your information if required by Philippine law, court orders, or government requests. We'll notify you about such requests unless legally prohibited from doing so.

Business Transfers

If evolveurl merges with another company or gets acquired, your information would transfer to the new entity. We'd notify you before this happens and inform you of any new privacy practices.

With Your Consent

If we want to share your information in ways not covered by this policy, we'll ask for your explicit permission first.

4 Your Privacy Rights

Under Philippine law, you have several rights regarding your personal data. Here's what you can do and how to exercise these rights:

5 Data Security Measures

Protecting your information isn't just a legal obligation—it's fundamental to our business. Here's how we keep your data secure:

• Encryption: All data transmitted between your device and our servers uses TLS encryption. Sensitive information in our databases is encrypted at rest.
• Access controls: Only authorized employees can access personal data, and only when necessary for their job functions. We maintain detailed logs of who accesses what.
• Regular security audits: We conduct quarterly security assessments and penetration testing to identify vulnerabilities.
• Secure hosting: Our servers are located in facilities with physical security measures including surveillance, access controls, and redundant systems.
• Employee training: All staff members complete annual privacy and security training to understand their responsibilities.
• Incident response plan: We have procedures in place to detect, respond to, and recover from security incidents quickly.

Despite these measures, no system is completely secure. If we discover a data breach that affects your information, we'll notify you within 72 hours and explain what happened, what data was involved, and what steps we're taking.

6 Data Retention and Deletion

We don't keep your information forever. Here's how long we retain different types of data and why:

Active Accounts

While your account is active, we maintain all your information to provide our services. You control most of this data and can update or delete it through your account settings.

Closed Accounts

When you close your account, we delete most personal information within 90 days. We may retain certain records for legitimate business purposes like fraud prevention or legal compliance.

Financial Records

Philippine tax law requires us to maintain transaction records for seven years. After that period, we securely delete all financial information.

Learning Progress

Course completion data and certificates are retained for three years after your last activity. This allows us to verify your credentials if needed and helps with program improvement.

Marketing Communications

If you unsubscribe from our emails, we keep your email address on a suppression list to ensure we don't accidentally contact you again. This list is maintained indefinitely.

You can request early deletion of your data by contacting us. We'll comply unless we have a legal obligation to retain specific information.

7 Cookies and Tracking Technologies

Our website uses cookies and similar technologies. Here's what they do and how to control them:

Essential Cookies

These are necessary for the platform to function. They remember your login status, language preferences, and security settings. You can't disable these without breaking core functionality.

Analytics Cookies

We use these to understand how people use our platform—which pages are popular, where users get stuck, how long sessions last. This data is aggregated and doesn't identify you personally.

Marketing Cookies

If you consent, we use these to show relevant ads and measure campaign effectiveness. You can opt out through your browser settings or our cookie banner.

Most browsers let you control cookies through settings. Blocking cookies may affect your experience on our platform—some features might not work properly.

8 Children's Privacy

Our budget literacy programs are designed for adults. We don't knowingly collect information from anyone under 18 without parental consent.

If a parent or guardian discovers that their child has provided us with personal information without their consent, contact us immediately at help@evolveurl.com. We'll delete the information within 48 hours.

For users aged 13-17, we require verified parental consent before creating an account. Parents can review, update, or delete their child's information at any time.

9 International Data Transfers

While evolveurl operates primarily in the Philippines, some of our service providers may be located in other countries. When we transfer your data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by privacy authorities
• Adequacy decisions recognizing equivalent privacy protections
• Explicit consent for transfers when required by law
• Additional security measures for sensitive information

You can request information about specific data transfers by contacting our privacy team.

10 Changes to This Policy

We update this privacy policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you through:

• Email notification to your registered address
• A prominent notice on our website for 30 days
• In-app notifications when you next log in

The "Last Updated" date at the top of this policy shows when changes were made. Continuing to use our services after changes take effect means you accept the updated policy.

For major changes that affect your rights, we'll ask for your renewed consent before the new policy applies to your data.