Privacy Notice

Xepto Computing Incorporated, the provider of Xepto Education services (collectively “Xepto”), is committed to providing you and all our users with excellent learning services while implementing safeguards to protect your privacy and keep your personal data safe and secure.  These Xepto Education services are: Xepto Academy, Xepto LMS, Xepto Biblio, Xepto Pro, and Xepto Mobile App.  This notice outlines what data Xepto may collect, how Xepto uses and safeguards that data, and with whom we may share it.

Processing of Personal Data

In the course of your transactions with us, Xepto may ask you to provide them with certain Personal Data that can be used to contact or identify you and/or your family members or relatives (hereinafter referred to collectively as “Personal Data”). These personal data may include, but are not limited to:

  • Information which may be used for identification purposes (e.g., full name, office address, email address, telephone number and photo)
  • Other personal circumstances (e.g., age, civil status)
  • Contact information
  • Educational background
  • Work background

Xepto collects and uses your personal information only as necessary for the purposes for which it was obtained. We shall use personal data to process transactions with you for the following purposes, such as:

  • Assessments
  • Enrollment to courses
  • Management of user roles and permissions
  • Generation of metrics
  • Tracking of progress
  • Securing of authentication and mass registration
  • Course backup

We may also use your personal data for secondary purposes closely related to the primary purpose like maintaining a business relationship with you, in circumstances where you would reasonably expect such use or disclosure. You may withdraw your consent to the processing of your personal data at any time by contacting us in writing at the address provided at the end of this Privacy Notice.

How Long Do We Retain Your Personal Information?

We will generally retain your personal information for so long as the purposes for which we collected and processed them remain and until such purposes have been served.  In general, we will retain your personal information for a period of five (5) years, unless a shorter or longer period is prescribed by applicable laws, rules, regulations, and/or policies/protocols.

With respect to visitors of our website, we will retain relevant personal information for at least five (5) years from the date of our last interaction with you, or for a longer period if we are so required by our professional and/or legal/regulatory obligations or professional indemnity obligations (if applicable).

Disclosure to Authorized Partners and Third Parties

Your personal data may be disclosed in a number of circumstances including the following:

  • Third parties where you consent to the use or disclosure; and
  • Where required or authorized by law.

In these cases, we ensure that your personal information is disclosed on a confidential basis, and always subject to the applicable rules and regulations of the Data Privacy Act.

In some instances, we may disclose your personal data to affiliates, related entities, and partners, including third parties, as part of our regular business operations and for the provision of our services. However, we will never share, rent or sell your personal information to third parties outside of our affiliates, related entities, and partners, except in special circumstances where you may have given your specific consent for, and as noted in this policy.  You can reach out to us through the contact details set out at the end of this Privacy Notice in case you require further information on this matter.

Data Protection

We shall implement reasonable and appropriate organizational, physical and technical security measures for the protection of personal data which we have collected. The security measures shall aim to maintain the availability, integrity, and confidentiality of personal data and are intended for the protection of personal data against any accidental or unlawful access, use, alteration, and disclosure, as well as against any other unlawful processing.

When your personal data is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify or anonymize your Personal Information.

Confidentiality

Our employees as well as our authorized partners/third parties shall operate and hold personal data under strict confidentiality. They are required to sign non-disclosure agreements (and relevant agreements with respect to our authorized partners/third parties) and receive training on the company’s privacy and security policies to ensure confidentiality and security of personal data.

Accessing Your Personal Information and Your Rights as a Data Subject

You, as the data subject, have rights under the Data Privacy Act, which include the following:

(1) The right to access; 

(2) The right to rectification or to make corrections;

(3) The right to object to the processing of your personal information;

(4) The right to erasure or blocking of your personal information;

(5) The right to be informed of the existence of processing of your personal information;

(6) The right to data portability;

(7) The right to damages; and

(8) The right to file a complaint before the National Privacy Commission.

In case you have any questions or concerns regarding your personal information which we are processing or we may have, you may reach us:

Via e-mail:
dpo@xeptodeucation.com

Via telephone:
+632-85521175

Via post:
The Data Protection Officer
Unit 2202, 22nd Fl, Asian Star Bldg.
Asean Rd cor Jakarta Lane, Filinvest Corporate City
Alabang, Muntinlupa City, 1781
Metro Manila, Philippines

Changes to this Privacy Policy

From time to time, we may change or update our privacy policy and practices to comply with government and regulatory requirements, to adapt to new technologies and protocols, to align with industry practices, or for other legitimate purposes.  This Privacy Notice was last updated on September 28, 2022.

You will always be provided notice if these changes are significant and, if we are required by law, we will ensure to obtain your updated consent.