PRIVACY STATEMENT
Please read this privacy notice ("Notice") carefully to understand our policies and practices regarding your Personal Data and how we will treat it. This Notice applies to individuals who interact with Nephila Web Technology Inc Moodlemoot Philippines site. This Notice explains how your Personal Data are collected, used, and disclosed by Nephila Web Technology, Inc ("NWTI", "We", "Us"). It also tells you how you can access and update your Personal Data and make certain choices about how your Personal Data are used.
This Notice covers both our online and offline data collection activities, including Personal Data that We collect through our various channels such as websites, apps, third party social networks, client calls, points of sale and events. Please note that We might aggregate personal data from different sources (website, offline event).
If you do not provide necessary Personal Data to us (We will indicate to you when this is the case, for example, by making this information clear in our registration forms), We may not be able to give access to our LMS site. This Notice can change from time to time.
This Notice provides information on the following areas:
- Collection of Personal Data
- Use of Personal Data
- Disclosure & Sharing
- Storage, Retention and Destruction
- Security
- Rights of Individuals
- DPO Contact Information
Sources of Personal Data
This Notice applies to Personal Data that We collect from or about you, through the methods described below, from the following sources:
The official website of Nephila Web: www.nephilaweb.com.ph
The Learning Management Site of Nephila Web: https://mootph21.nephilaweb.com.ph/ and lms.nephilaweb.com.ph
Interactions with electronic communications between you and Nephila.
Printed or digital registration and similar forms that We collect via, for example, postal mail and learning events, webinars and other promotions or events.
Interactions with our advertisements (e.g. if you interact with on one of our ads on other 3rd party apps we may receive information about that interaction).
In the course of our interactions with you, we may create Personal Data about you.
Third party social networks (e.g. such as Facebook, Google, Twitter), market research (if feedback not provided on an anonymous basis) and other publicly available data.
Collection of Personal Data
Depending on how you interact with Nephila (online, offline, over the phone, etc.), We collect various types of information from you, as described below.
This includes any information you provide to Us that would allow Us to contact you, such as your name, postal address, e-mail address, social network details, or phone number.
Any information that is required to give you access to your specific account profile. Examples include your login ID/email address, screen name, password in unrecoverable form, and/or security question and answer.
Any information that describes your demographic or psychographic characteristics. Examples include your date of birth, age or age range, gender, geographic location (e.g. zip code), favorite products, hobbies and interests, and household or lifestyle information.
This includes information about your computer, mobile or other device that you use to access Nephila. This could include IP address, geolocation information, unique device identifiers, browser type, browser language, and other transactional information.
This includes information about the courses or certifications you've signed up for or completed and any related course data.
This includes information we need to process your payment, if you purchase anything from Nephila such as credit card number or bank account information. This also includes your billing address, company name, and Tax Identification Number (TIN).
This includes information that you voluntarily share with Us about your experience of using our products and services.
This includes any content that you create within Nephila services and then choose to share with Us and other users. Examples include photos that you share, ratings, reviews, or discussion forum posts. Please use caution when sharing this information.
Use of Personal Data
In order to serve you better, communicate announcements and updates on our services.
To issue certificates, to invite in future webinars that will help the education community in improving their processes.
To get your concerns on our products and services. For advertising purposes and to provide general and useful information.
To know your needs in relation to the services we provide.
Disclosure and Sharing of Personal Data
Your personal information such as name, position and company will be shared to your co-participants, sponsors and event organizer on the learning management site.
We will disclose your personal data for legal reasons only.
Storage, Retention and Destruction
Your personal information will be stored with security measures in place (see Security section below).
In accordance with applicable laws, We will use your Personal Data for as long as necessary to satisfy the purposes for which your Personal Data was collected (as described in the Use of Personal Data section above) or to comply with applicable legal requirements.
The data stored on the MootPH21 site will no longer be accessible once the site has shut down. The site will be available only until 30 days after the event. However contact details will be stored for future invites.
You may request to delete your data in the LMS site or on our database.
Security
We implement the following Security measures:
- User Access Control for CRM, Google Drive, LMS, local machine
- SSL
- Vulnerability Assessment / Penetration Testing (VAPT) conducted once a month
- The Moodle LMS Site has SHA1 encryption
- The Suite CRM has MD5 encryption
- Google Drive encrypts data at rest in the Drive, and data in transit to and from the Drive. Google uses 128-bit or 256-bit AES keys (depending on the type of storage device) to encrypt data at rest in Google Drive, which helps in protecting the confidentiality of the data stored in Google Drive.
- Local Machines have Linux OS Ubuntu Core 20 which uses full disk encryption (FDE) whenever the hardware allows, protecting both the confidentiality and integrity of a device's data when there's physical access to a device, or after a device has been lost or stolen.
Rights of Individuals
You have the right to access, review and request a physical or electronic copy of information held about you. You also have the right to request information on the source of your Personal Data.
These rights can be exercised by sending Us an e-mail, attaching a copy of your ID or equivalent details, where requested by Us and permitted by law. If the request is submitted by a person other than you, without providing evidence that the request is legitimately made on your behalf, the request will be rejected. Please note that any identification information provided to Us will only be processed in accordance with, and to the extent permitted by applicable laws.
Where provided by law, you can (i) request deletion, the portability, correction or revision of your Personal Data; (ii) limit the use and disclosure of your Personal Data; (iii) revoke consent to any of our data processing activities; and (iv) object to the processing of your Personal Data, including the right to lodge a complaint with the National Privacy Commission.
Please note that, in certain circumstances, We will not be able to delete your Personal Data without also deleting your user account. We may be required to retain some of your Personal Data after you have requested deletion, to satisfy our legal or contractual rights and/or obligations. We may also be permitted by applicable laws to retain some of your Personal Data to satisfy our business needs.
Where available, our Websites have a dedicated feature through which you can review and edit the Personal Data that you have provided. Please note that We require our registered consumers to verify their identity (e.g. login ID/email address, password) before they can access or make changes to their account information. This helps prevent unauthorised access to your account.
We hope that We can satisfy queries you may have about the way we process your Personal Data. However, if you have unresolved concerns you also have the right to complain to competent data protection authorities.
DPO Contact Information
Jennie May V. Alvarez, CPA
Data Protection Officer
Philippine Social Science Center, Commonwealth Ave.
Diliman, Quezon City, Philippines
T: (+632) 8285-7450
M: +63 9175878851
For complete details, please visit our full privacy policy or contact our Data Protection Officer.