Effective date: August 1, 2025
Company: Olern Inc. (“Olern”, “we”, “us”, “our”)
Website: aiconsultants.ph
Olern Inc. is the Personal Information Controller (PIC) responsible for your personal data under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations (IRR). This policy explains what we collect, why we collect it, how we use and share it, and the rights available to you as a data subject in the Philippines.
1) What data we collect and where it comes from
We collect personal data that you provide directly to us through inquiry forms and training registrations on aiconsultants.ph:
- Inquiry forms: name, email, mobile number, company name, position/title.
- Training registrations: the same details plus the training/event chosen and schedule.
- Communications: content of emails or messages you send us and our replies (retained as needed to operate our services).
- Cookies, server logs & traffic data: we use cookies and server logs that may capture visit date/time, pages viewed, referring sites, time on page, and IP address for delivery, analytics, and security. Manage cookies in your browser settings.
2) Why we process your data (purpose & legal bases)
We process your personal data for the purposes below, relying on the lawful criteria recognized by Philippine law:
- Respond to your inquiries and provide requested information. (Contract / steps at your request; legitimate interests to operate our services.)
- Weekly email tips on business and technology. (Consent or legitimate interests, with a clear and easy opt-out at any time.) NPC’s 2023 Consent Guidelines note that direct marketing may require consent in certain instances; where appropriate, we rely on consent and always honor opt-out choices.
- Training communications (e.g., SMS reminders so you don’t miss registered events). (Contract / steps at your request; legitimate interests to ensure attendance and support.)
- Security, fraud prevention, compliance with laws, and exercise/defense of legal claims. (Legal obligations; legitimate interests; specific DPA allowances.)
No dark patterns. We do not use deceptive or manipulative interfaces to obtain consent (e.g., making it hard to say no or withdraw). The NPC has issued Guidelines on Deceptive Design Patterns and we align our notices and choices accordingly.
3) Marketing emails and opting out
- We send weekly emails with helpful tips about business and technology.
- You can unsubscribe anytime via the link in each email or by contacting us (see Contact us).
- Opting out of marketing emails does not affect essential service messages (e.g., training confirmations and reminders). NPC’s Consent Guidelines require clear, user-friendly withdrawal mechanisms.
4) SMS reminders for training participants
If you register for a training, we’ll send SMS reminders about schedules, updates, and logistics to help you attend successfully. You can reply “STOP” (or follow the opt-out instructions provided) to stop receiving non-essential SMS from us for that event.
5) Cookies & analytics
We may use cookies and similar tools to keep the site secure, remember preferences, measure traffic, and improve content. You can manage cookies via your browser settings. Where cookies are used for marketing, we will obtain consent if required and provide opt-out choices consistent with NPC guidance.
6) Sharing and outsourcing (processors & third parties)
We may share personal data with trusted Personal Information Processors (PIPs) that provide services such as website hosting, email delivery, SMS gateways, analytics, and customer support. They process data only under our instructions and under contracts that implement security and confidentiality obligations consistent with the DPA and IRR.
We do not sell your personal data.
7) Cross-border transfers
Some service providers may be located outside the Philippines. When personal data is transferred internationally, we implement appropriate safeguards (e.g., Model Contractual Clauses recognized by the NPC and/or ASEAN Model Contractual Clauses) to help ensure an adequate level of protection.
8) How long we keep your data
We retain personal data only as long as necessary for the purposes described above, to comply with legal, accounting, or reporting requirements, and to establish or defend legal claims. When data is no longer needed, we securely delete or anonymize it.
9) Security
We use organizational, physical, and technical measures to protect personal data. Do not email sensitive information to us unless necessary; while we use SSL and other controls, email may not always be a secure medium. If a personal data breach is likely to pose risks, we will assess promptly and, where required, notify the NPC and affected data subjects within 72 hours of knowledge or reasonable belief, with a full report per NPC rules.
10) Your rights as a data subject
Under Philippine law, you have the following rights (subject to limitations under the DPA and IRR):
- Right to be informed
- Right to access
- Right to object (including to direct marketing)
- Right to erasure or blocking
- Right to rectification (correction)
- Right to data portability
- Right to damages
- Right to file a complaint with the National Privacy Commission (NPC)
To exercise any of these rights, contact us using the details below. If we decline a request as permitted by law, we’ll explain why.
11) Children’s data
Our services are intended for professionals. We do not knowingly collect personal data from children without appropriate parental or guardian consent as required by law. If you believe a child provided personal data to us without consent, please contact us so we can take appropriate action.
12) Testimonials
If we publish testimonials, we may edit for length/clarity without changing meaning; results vary by individual. We obtain consent for publication where required.
13) Third-party links
Our website may contain links to third-party sites. Their privacy practices are governed by their own policies; please review those policies.
14) Updates to this policy
We may update this policy from time to time to reflect changes in our practices or in applicable law. We’ll post the updated version with a new Effective date above, and where appropriate, we’ll provide a more prominent notice or request fresh consent in line with NPC consent guidelines.
15) Contact us
Data Protection Officer (DPO)
Address: Unit 810 Citystate Centre Bldg., Shaw Blvd. Pasig
Email: dpo@olern.com
If you have concerns about our data practices, you may also contact the National Privacy Commission (privacy.gov.ph) or file a complaint with the NPC.