1. What Personal Data We Collect

When you access the Site, request a quotation, enroll in a course, or contact us, we may collect personal data such as:

• Identity Information: full name, student or professional credentials, and other identification details;
• Contact Information: email address, telephone number, mailing address;
• Billing and Payment Information: billing address and payment transaction details (processed through secure payment gateways);
• Educational and Employment Information: academic background, current role, and training history;
• Usage Information: logs, device information, IP addresses, and cookies.

Providing your personal data is voluntary, but without it we may be unable to process your request or provide services.

2. How We Use Your Personal Data

We process your personal data for the following purposes:

• To provide services. We use your data to process quotations, enroll you in courses, deliver training materials, administer examinations, and issue certificates.
• To communicate. We may contact you regarding course updates, schedules, account notifications, promotions, or announcements. You can opt out of marketing messages at any time.
• To improve our services. We analyze usage data to enhance the Site’s functionality and user experience.
• To comply with legal obligations. We retain records as required by law and cooperate with lawful requests from authorities.

Our processing activities follow the principles of transparency, legitimate purpose, and proportionality stated in the IRR. We will not process your personal data in ways incompatible with these purposes.

3. Legal Basis for Processing

We collect and process personal data based on any of the following lawful bases:

• Consent: When you voluntarily provide information or tick consent boxes (e.g., for marketing emails), you consent to our processing of your data.
• Contract: Processing is necessary to perform our contractual obligations to you (e.g., to deliver the course for which you enrolled).
• Legal Obligation: We may process personal data to comply with laws, regulations, or lawful orders.
• Legitimate Interests: We may process data to improve our services and protect our operations, provided such interests do not override your rights and freedoms.

4. Data Subject Rights

The Data Privacy Act grants you specific rights as a data subject, including:

• Right to be informed. You have the right to know whether your personal data will be or is being processed, and the purpose and method of processing.
• Right to access. You may request access to and obtain a copy of your personal data that we hold.
• Right to rectification. You may request correction of inaccurate or outdated data.
• Right to erasure or blocking. You may request deletion or suspension of your data if it is inaccurate, outdated, or unlawfully obtained.
• Right to object. You may object to the processing of your data if it is based on consent or legitimate interests.
• Right to data portability. You may receive your personal data in a structured, commonly used format and transmit it to another personal information controller.
• Right to damages and to file a complaint. You may seek damages for violations of your data privacy rights and file complaints with the National Privacy Commission.

To exercise your rights, please contact our Data Protection Officer (DPO) via the contact information listed below. We may require proof of identity and sufficient information to identify your records.

5. Data Sharing and Disclosure

• Within Anaheim. Your data may be shared among our authorized personnel on a need-to-know basis for legitimate purposes.
• Service Providers. We may engage third-party service providers (e.g., payment gateways, learning management systems, IT support) to process data on our behalf. We ensure our providers are bound by confidentiality and data-protection obligations.
• Regulatory and Legal Disclosures. We may disclose personal data when required by law or lawful orders of courts and government agencies.
• No Sale of Personal Data. We do not sell or rent your personal data.

6. Data Retention and Security

Retention. We retain your personal data only for as long as necessary to fulfill the purposes stated above and to comply with legal obligations. We will securely delete or anonymize data that is no longer required.

Security Measures. Anaheim implements organizational, physical, and technical security measures to protect personal data, including designating a Data Protection Officer, maintaining records of processing activities, restricting access to authorized personnel, implementing encryption and secure payment gateways, and conducting regular security reviews and staff training.

7. Cookies and Analytics

Our Site uses cookies and similar technologies to enhance your browsing experience, remember your preferences, and gather statistical data. You can control cookie settings through your browser. Some features may not function properly if you disable cookies.

8. International Transfers

Our servers are located in the Philippines. If we need to transfer personal data outside the Philippines (e.g., to a cloud service provider), we will ensure adequate safeguards and compliance with the Data Privacy Act and applicable regulations.

9. Updates to This Privacy Notice

We may update this Privacy Notice to reflect changes in our practices or the law. Significant changes will be posted on the Site or sent via email. Your continued use of the Site after any update constitutes acceptance of the revised notice.

10. Contact and Data Protection Officer

For any questions, requests, or complaints regarding your personal data, please contact us:

• Name: Sonny San Pedro
• Email: info@anaheimngnclex.com
• Address: Anaheim International Healthcare Training and Consultancy, Metro Manila, Philippines.

You may also lodge complaints with the National Privacy Commission at www.privacy.gov.ph.