Platform Data Privacy Policy

Outlining our rigorous standards for data protection, multi-tenant row-level partition security, and the rights of learners under Philippine privacy law.

Policy Version: 1.6-2026•NPC Registration Reference: PH-NPC-2026

1Statement of Data Privacy Commitment

LearnByCraft LMS respects and upholds your rights as a data subject under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). We are dedicated to maintaining the confidentiality, integrity, and availability of all personal information entrusted to our platform by client institutions, educators, and learners.

2Scope of Data Collected

To deliver accredited corporate training and educational courses, the platform processes the following data categories under the direction of your institution:

Identity Information: Full name, institutional email address, student or employee identification number, and cohort affiliation.
Learning Telemetry: Course launch timestamps, lesson completion status, SCORM 2004 session data, interactive quiz attempt scores, and earned XP points.
Learning Preferences (Intake Wizard): Participant role classification, preferred learning modalities, and weekly study hour commitments to personalize instructional support.
Technical Metadata: Browser type, operating system, and IP address solely for security auditing and active session validation.

3Personal Information Controller (PIC) vs. Processor (PIP)

The Subscribing Organization (Your Employer or School) is the Personal Information Controller (PIC). They determine what training is assigned, how grades are evaluated, and who has access to student records.

LearnByCraft LMS acts strictly as the Personal Information Processor (PIP), handling your data in accordance with strict institutional contracts and technical security safeguards.

4Rights of the Data Subject

Under RA 10173, enrolled learners are entitled to exercise the following rights:

1. Right to Be InformedUnderstanding how your data is collected and processed through our mandatory intake gate.

2. Right to AccessReviewing your scores, video completion history, and digital certificates in your Learner Portal.

3. Right to RectificationRequesting corrections to outdated names, emails, or student IDs through your Tenant Administrator.

4. Right to Data PortabilityDownloading verified completion certificates and requesting CSV transcripts from your admin.

5Security Safeguards & Zero Third-Party Advertising

LearnByCraft LMS enforces multi-tenant row-level security (RLS) isolation to ensure no cross-institutional data exposure. We do not sell, rent, or monetize learner information or display commercial advertisements.

Data Protection Officer (DPO)

Contact: dpo@learnbycraft.com • Manila, Philippines

NPC RA 10173 Certified Architecture