Privacy Policy

Last updated: August 27, 2026

Phronx Learning Hub ("Phronx", "we", "us") respects your privacy. This Privacy Policy explains what personal data we collect through the Phronx website and course platform (the "Service"), why we collect it, and your rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, the "DPA"). Phronx is based in Pampanga, Philippines.

1. Data we collect

Account data: name, email address, and password (stored hashed, never in plain text).
Professional data (for PRC-accredited CPD programs and SDL claims only): PRC license number, profession, and license dates needed to verify your profession, award CPD units, and support any SDL claims you submit.
Payment data: your payment is handled directly by our payment gateway, HitPay — we never see or store your full card number, e-wallet credentials, or bank details.
Course activity: enrollment, lesson progress, quiz results, and certificates issued.
Technical data: IP address, browser type, and device information, collected automatically when you use the Service (for security, fraud prevention, and keeping you logged in).

We collect the minimum data needed to operate the Service and to award and verify CPD units — we do not collect professional data (license numbers, profession) from learners taking general, non-CPD courses.

2. How we collect data

Directly from you, when you create an account, enroll in a course, submit an SDL claim, or contact support.
Automatically, through the cookies described in Section 7.
From the PRC's public accreditation and license records, where necessary to verify a profession or license number before crediting CPD units.

3. Legal basis for processing

We process your personal data on the following bases under the DPA:

Consent, for optional data uses such as marketing communications.
Contract performance, to create your account, deliver courses you've enrolled in, and process payments.
Legal obligation, where PRC accreditation rules or BIR recordkeeping requirements require certain records to be kept.

4. How we use your data

To create and manage your account.
To deliver course content and track your progress.
To verify your PRC license, award CPD units for accredited programs, and record SDL claims you submit.
To issue certificates and respond to verification lookups of a certificate we issued (see Section 4 of our Terms of Service).
To process payments through HitPay and prevent fraud.
To send you service-related communications (enrollment confirmations, certificate issuance, password resets).
To send marketing communications, only if you've opted in — you can opt out at any time.

We do not sell your personal data. We share it only with:

Service providers who process data on our behalf under contract — currently our payment gateway (HitPay), for processing your payment, and our infrastructure providers, for hosting the Service.
PRC, your employer, or a regulator, only where necessary to verify a CPD certificate we issued, or where required by law.
Legal authorities, if required by a valid legal process.

6. Data retention

We retain your account data for as long as your account is active. CPD-related records — license numbers, credited units, SDL claims, and certificates — are retained for as long as required to support PRC accreditation and our BIR recordkeeping obligations, even if you later close your account, since these records may be relied on in a future license audit.

7. Cookies

We use a session cookie to keep you logged in while you use the Service. We do not currently use third-party analytics or advertising cookies; if that changes, we'll update this section and this page's "Last updated" date before we do.

8. Your rights under the Data Privacy Act

You have the right to:

Be informed about how your data is processed.
Access the personal data we hold about you.
Correct inaccurate or outdated data.
Object to processing, and withdraw consent where processing is based on consent.
Request erasure or blocking of your data, subject to the retention requirements described in Section 6 (e.g. CPD records we must keep).
Data portability, and to file a complaint with the National Privacy Commission.

To exercise any of these rights, contact us at info@phronx.com.

9. Data security

We apply technical and organizational measures to protect your data, including encryption in transit, access controls limited to your own enrollments and records, and secure storage of uploaded files outside the public web root. No system is perfectly secure, and we cannot guarantee absolute security.

10. Children's privacy

The Service is not directed at children under 18. Learners under 18 may use the Service only with a parent or legal guardian's consent, as described in our Terms of Service. If you believe a child has provided us personal data without appropriate consent, contact us at info@phronx.com and we will take steps to remove it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new "Last updated" date.

12. Contact us

For privacy questions or to exercise your rights under the DPA, contact us at info@phronx.com.