Privacy policy

This policy explains how LDG Detailing Academy collects, uses, shares, protects and keeps your personal information when you use this website and its courses, and the rights you have under the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

1. Who is responsible for your information

LDG Detailing Academy is the personal information controller for the personal information processed through this website. That means the academy decides why and how your information is used and is responsible for protecting it.

The academy has a Data Protection Officer (DPO) who oversees compliance with the Data Privacy Act. To reach the DPO, sign in and use the contact details shown in your account, or write to the academy from the email address registered to your account and ask for your message to be passed to the Data Protection Officer.

2. What we collect

We collect only what we need to run your account and courses. Most of it you give us; some is created as you use the site.

Account details: your full name, email address, password (stored only as a one-way hash, never in readable form), and, if you give it, your phone number. If you turn on two-step verification, we store the secret for your authenticator app and your recovery codes in encrypted form.
Subscription and payment records: the plan you chose, its price, start and end dates, your payment reference, the amount, the method you used (for example, bank transfer or e-wallet) and when the payment was confirmed. Payments are made outside this website; we do not receive or store card numbers, bank log-ins or e-wallet PINs.
Learning records: the courses you are enrolled in, lessons you opened and completed, where you stopped in a video, your exam attempts and answers, scores, the feedback instructors give you, and any certificate of completion issued to you.
Your submissions: the text, links and files you hand in for assignments, each version you hand in, and the grades and comments on them.
Sign-in and device records: when you sign in, sign out or fail to sign in, the IP address, browser and device type, and the sessions open on your account.
Content access records: which protected videos and files your account opened, when, from which IP address, and a short code for the browser session. These records help protect the course material from copying and account sharing.
Watermark identifiers: when watermarking is on, videos and documents show your name, a partly hidden version of your email address, your account number and a short session code. The watermark is drawn in your browser while you watch; it is not stored as a separate record.
Messages to you: the account notifications we show you, such as a confirmed payment or a graded assignment.

We do not ask for sensitive personal information (such as government ID numbers, health or religious information) and ask you not to include it in submissions.

3. Why we use it, and on what basis

The Data Privacy Act allows personal information to be processed only for declared and legitimate purposes and on a lawful basis (Sections 12 and 13). We use your information for these purposes:

To create and run your account and give you the courses your plan includes. Basis: necessary to perform our contract with you.
To grade your work, record your progress and show you results. Basis: necessary to perform our contract with you.
To confirm payments and keep accounting and tax records. Basis: our contract with you, and compliance with legal obligations under Philippine tax and accounting law.
To keep accounts and course material secure: detecting unusual sign-ins, enforcing the limit on devices signed in at once, and spotting copying or account sharing. Basis: the legitimate interests of the academy and its instructors in protecting their accounts and copyrighted material, balanced against your rights. A warning sign is reviewed by a person; it never blocks your account automatically.
To send you messages about your account, such as password resets, payment confirmations, renewals and grades. Basis: necessary to perform our contract with you.
To meet legal requests from authorities with the power to make them. Basis: legal obligation.

We do not sell your personal information, use it for advertising, or make decisions about you by automated means alone. We send marketing messages only if you have agreed to receive them, and you can withdraw that consent at any time.

Academy staff: instructors see the learning records and submissions of students in the courses they teach. Administrators see account, subscription and payment records. Staff access is limited by role.
Service providers (personal information processors): we use providers for website hosting and databases, file and video storage, and sending email. They process information only on our instructions, under written agreements that require them to keep it confidential and secure, as the Data Privacy Act requires.
Payments: you pay through your own bank or e-wallet. Your bank or e-wallet provider handles that transaction under its own privacy policy. Academy staff check and confirm payments by hand against the reference you quote.
Authorities: we disclose information when the law requires it, for example to a court, the Bureau of Internal Revenue or the National Privacy Commission.

5. Transfers outside the Philippines

Some of our hosting, storage and email providers may store or process information on servers outside the Philippines. When they do, the academy remains responsible for your information and requires those providers, by contract, to protect it to a standard comparable to the Data Privacy Act.

6. How long we keep it

We keep personal information only as long as it is needed for the purposes above or as the law requires, and then delete or anonymise it.

Account, learning records and submissions: while your account is open. If you delete your account, we remove your identifying details straight away (see section 9).
Payment and subscription records: for as long as Philippine tax and accounting law requires, even after you delete your account. They are then kept only under the anonymised account.
Sign-in records: deleted automatically after one year.
Content access records: deleted automatically after 180 days.
Signed-in sessions: end after a period of inactivity and are then removed. Password reset links expire after one hour.
Audit log of account and staff actions: kept so that changes to accounts, payments and grades can be traced and disputes resolved. It records what was done and when, not your course work. Entries about a deleted account stay linked only to the anonymised account.

7. How we protect it

We use organisational, physical and technical measures to protect personal information, including:

encrypted connections (HTTPS) between your browser and the website;
passwords stored only as one-way hashes, and optional two-step verification with an authenticator app;
a limit on how many devices can be signed in at once, and a list of your signed-in devices that you can sign out of;
course videos encrypted and delivered through short-lived signed links, and private file storage for submissions;
role-based access, so staff see only what their role needs;
logs of sign-ins, protected-content access and administrative changes, so misuse can be found and investigated.

No system is perfectly secure. Please use a strong password that you do not use elsewhere, turn on two-step verification, and sign out on shared devices.

8. If a breach happens

If a personal data breach is likely to give rise to a real risk of serious harm to you, we will notify the National Privacy Commission and you within 72 hours of becoming aware of it, as NPC Circular No. 16-03 requires. The notice will say what happened, what information was involved, what we are doing about it and what you can do to protect yourself.

9. Your rights

Under the Data Privacy Act you have the right:

to be informed that your personal information is being processed, and how (this policy);
to access your personal information and get a copy of it;
to object to processing, including processing based on legitimate interest or for marketing;
to erasure or blocking of information that is incomplete, outdated, false, unlawfully obtained or no longer needed;
to rectification of inaccurate or incomplete information;
to data portability: to get your information in an electronic, commonly used format;
to damages for harm caused by inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorised use of your information; and
to file a complaint with the National Privacy Commission (privacy.gov.ph).

In your account. You can correct your name and email on your profile page. On the same page, under "Your data", you can download a copy of your data as a JSON file, and you can delete your account. Deleting your account removes your name, email, phone number, password, two-step verification, sessions, sign-in and content access records, notifications, and the text, links and files you handed in. Records the academy must keep, such as payments and the audit log, stay under an anonymised account that can no longer be linked to your name or email. Grades and exam results stay only as anonymous records for course statistics.

Other requests. For anything else, or if you cannot sign in, write to the academy from the email address registered to your account. We may ask you to confirm your identity first. We aim to answer within 15 working days. If we cannot do what you ask, for example because the law requires us to keep a record, we will tell you why.

10. Cookies

This website uses only strictly necessary cookies, to sign you in and keep your account secure. It does not use advertising or analytics cookies. The cookie policy lists each one.

11. Children

Our courses are professional training meant for adults. You must be at least 18 to create an account, or have the consent of a parent or guardian who agrees to these terms for you. If you believe a child has given us personal information without that consent, contact us and we will delete it.

12. Changes to this policy

We may update this policy when the law or our service changes. If a change materially affects how we use your information, we will tell you by email or in your account before it takes effect. The date below shows when it was last changed.

Last updated 10 November 2026. See also the terms of service and the cookie policy.