1. Who we are
YesHire Academy (“we”, “us”) runs yeshireacademy.com, an online learning platform for Filipinos preparing for remote work. The Service is operated by YesHire Online Tutorial Services, a business name registered with the Department of Trade and Industry (DTI Business Name No. 8592630) and owned by Aldee Ajero Sanchez, of Barangay 62 – Homapon, Legazpi City, Albay 4500. It is the personal information controller for the data described here.
This policy explains what personal data we collect, why, who we share it with, how long we keep it, and your rights under the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC).
2. What we collect
When you create an account
- Your name and email address.
- Your password, which is stored only in scrambled (hashed) form by our authentication provider. We can’t see it.
- If you continue with Google: your name, email address and profile picture from your Google account. We never get your Google password.
- The date and time you agreed to our Terms and this Privacy Policy.
Your choices and answers
- Whether you want marketing emails, and when you gave or withdrew that consent.
- Your answer to “Where did you hear about YesHire Academy?”, if you choose to answer (or that you skipped it), and when.
- Your answers to the optional welcome questions when you first sign in: what you’re doing right now (for example student, fresh graduate or OFW), your main goal, the kinds of remote work that interest you, and when you finished or skipped them.
Promos
- If you claim a promo that has a limited number of places, your place number, when you claimed it and when you used it.
- A one-way code (a “hash”) made from a simplified version of your email address, used only to stop one person claiming a promo twice. Your email address itself isn’t stored in the promo record.
Technical data
- Your IP address, browser and device type, and the date and time of requests, which our hosting and authentication providers log automatically for security, rate limiting and troubleshooting.
- Cookies that keep you signed in (see Cookies below).
- How the website is used: which pages are visited, how visitors arrived (the referring website), and a few steps such as opening a program, adding it to the cart, starting checkout, paying or starting a free course, with the device, browser and approximate location (country or city). This is collected without cookies and without your name, email or account, so it tells us what visitors do in total, not who you are (see PostHog under “Who we share it with”).
When you use programs and pay
- Your profile, if you fill it in: a profile picture, a headline, your city, a short “about you” and the cover design you pick. Your profile page is visible only to you for now. A picture you upload is stored at an address that’s hard to guess, but anyone given that exact address could open it. If you signed up with Google, we may show your Google profile picture until you upload your own.
- The programs and courses you have, your orders (what was in them) and payment status (amount, method, date and a payment reference). Card and e-wallet details are handled by our payment provider, PayMongo. We don’t see or store them.
- Your learning activity: which parts of each video you’ve watched, lessons completed, progress and certificates.
When you contact us
The messages you send us and our replies.
We don’t collect sensitive personal information (such as government ID numbers, health or religion) and ask that you don’t send it to us.
3. How we use it, and why we’re allowed to
We use your personal data only for these purposes:
- To provide the Service: create and secure your account, give you access to your programs, track your progress, issue certificates, process payments, and send account emails (verification, password resets, receipts, program updates). Basis: our contract with you.
- To run promos fairly: assign places and prevent duplicate claims. Basis: our contract with you and our legitimate interest in preventing abuse.
- To keep the Service safe: prevent fraud, cheating, account sharing and attacks, and fix problems. Basis: our legitimate interests, and our legal obligations.
- To improve and promote YesHire Academy: understand, in totals, how people find us (from the survey), who our learners are and what they want to achieve (from the welcome questions), which programs are useful, and how visitors use the website (from analytics, in totals). Basis: our legitimate interests.
- To send marketing emails about new programs and promos. Basis: your consent, which is optional and can be withdrawn anytime.
- To comply with the law: for example, keeping payment records for tax purposes and responding to lawful requests from authorities. Basis: legal obligation.
We don’t sell your personal data, and we don’t use it for automated decisions that have legal or similarly significant effects on you.
6. How long we keep it
- Account and learning data: for as long as your account exists, because your programs come with lifetime access.
- After you delete your account: we delete your account data within 30 days, except what we must keep by law (such as payment records, which we keep for the period required by tax rules), and short-lived security logs, which expire on their own.
- Promo records: a claimed place stays counted even if the account is deleted, so the promo total stays correct and the same email can’t claim it twice. The record is unlinked from the deleted account and keeps only the place number, dates and the email hash described above, until the promo’s records are no longer needed.
- Marketing consent records: for as long as we send you marketing emails, plus a reasonable period afterwards to show we had your consent.
7. How we protect it
- All connections to our site are encrypted (HTTPS).
- Database rules make sure each learner can only ever read their own data. Staff access is limited to people who need it and protected with two-factor authentication.
- Passwords are hashed, and payment details stay with the payment provider.
- Sign-in and other public features are rate-limited to block automated attacks.
No system is perfectly secure. If a personal data breach is likely to put you at real risk, we’ll notify you and the National Privacy Commission as required by law, within 72 hours of learning about it.
8. Your rights
Under the Data Privacy Act, you have the right to:
- be informed about how your data is processed (this policy);
- access the personal data we hold about you;
- correct inaccurate or incomplete data. You can edit your name in your dashboard;
- object to processing, including withdrawing consent to marketing emails at any time (from your dashboard or the unsubscribe link);
- erasure or blocking of your data, such as deleting your account;
- data portability: to get a copy of your data in a commonly used format;
- damages for harm caused by inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of your data;
- file a complaint with the National Privacy Commission (privacy.gov.ph).
To use any of these rights, email info@yeshireacademy.com. We may need to confirm your identity first, and we’ll reply within 15 days. Withdrawing consent doesn’t affect processing we did before, and deleting your account removes access to your programs.
9. Age requirement
The Service is meant for people aged 18 and over (see our Terms of Service). We don’t knowingly collect data from anyone younger. If you believe a minor has created an account, please contact us and we’ll delete it.
10. Changes to this policy
We’ll update this policy when we add features or services that change how we handle your data. The date at the top shows the latest version. For important changes, we’ll notify you by email or in your dashboard, and ask for your consent again where the law requires it.
11. Contact our Data Protection Officer
For any question or request about your personal data, contact our Data Protection Officer:
- Name: Aldee A. Sanchez
- Email: info@yeshireacademy.com
- Address: Barangay 62 – Homapon, Legazpi City, Albay 4500