Privacy Policy — Communityline Portal

This policy explains what personal information the Communityline Portal (communitylineportal.com) collects, why we collect it, who we share it with, and what you can ask us to do with it. The Portal is operated by Communityline Development Corporation, which is the personal information controller for the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

1. Information we collect

Information you give us

Account details — first and last name, email address and password. Passwords are stored only as a one-way hash; we never see or store the password itself.
Optional profile details — depending on how registration is configured, this can include phone number, country, organisation, department, position, employee number or student number, plus an address, short bio, profile photo, language and timezone that you can add later.
Coursework — quiz answers and attempt history, assignment submissions and any files attached to them, questions and answers you post in a lesson discussion, private notes and bookmarks, and your lesson progress.
Messages — anything you send us through the contact form or by email.

Information we generate

Enrolment records, grades, completion status and certificates issued to you.
Order and payment records where a course is paid for. Card details are never received or stored by us — see section 3.
Security and operational logs, including IP address, browser user-agent and timestamps, kept so we can keep the service running and investigate abuse. Administrator actions are written to an audit log.

2. Cookies and similar technologies

We keep this deliberately small. The Portal sets:

a session cookie, which is what keeps you signed in and protects forms against cross-site request forgery;
a "remember me" cookie, only if you tick that box when signing in;
small preferences stored in your browser (not sent to us), such as your light or dark theme choice and unsent form drafts.

We do not load third-party analytics, advertising, or social-media tracking tags. We do not sell personal information and we do not use it for behavioural advertising. Lessons that embed video use the provider's no-cookie player where one is available, but the provider may still receive your IP address when a video loads — see section 3.

3. Who we share information with

We share personal information only where it is needed to run the Portal:

Instructors and course staff — see the enrolled learners on their own courses, along with submissions, grades and progress for those courses.
Other learners — see only what you deliberately post in a public place, such as a question in a lesson discussion or a course review, together with the display name on your profile. Your private notes, grades and submissions are never shown to other learners.
Payment providers — where a course is paid online, payment is handled by the provider on their own systems. Card and account numbers are entered on their infrastructure; we receive only a confirmation and a reference, never your card details.
Hosting and email providers — our server host and the service that delivers our transactional email process data on our instructions.
Video providers — where a lesson embeds a video, loading the player shares your IP address and player interactions with that provider under their own privacy policy.
Authorities — where we are legally required to disclose, or where it is necessary to establish, exercise or defend a legal claim.

4. Certificates are publicly verifiable

Please read this one carefully. Every certificate we issue carries a verification ID. Anyone who has that ID can enter it on our public verification page and see that the certificate is genuine, along with the learner's name, the course title and the issue date. This is what makes a certificate worth anything to an employer, and it is the only place your name may appear to someone who is not signed in.

The page cannot be browsed or searched — a certificate can only be looked up by someone you have given the ID to. If you would prefer your certificate not to be verifiable, contact us and we will discuss the options, including revoking it.

5. Why we may lawfully process your information

To perform our agreement with you — creating your account, giving you access to a course, marking your work, issuing certificates and handling payment.
Our legitimate interests — keeping the Portal secure, preventing fraud and abuse, and improving how the service works.
Legal obligation — keeping records we are required to keep, such as records relating to payments.
Your consent — where we ask for it separately, for example before sending you a message that is not about a course you are enrolled in. You may withdraw consent at any time.

6. How long we keep it

We keep your account and learning records for as long as your account is open, because your progress, grades and certificates are the point of holding them. If you close your account we delete or anonymise your personal information, except where we must keep something longer — for example payment records we are required to retain, a record needed to defend a legal claim, or a certificate that has been issued and may be verified by a third party. Security logs are kept for a limited period and then discarded.

7. How we protect it

Traffic to the Portal is encrypted with TLS. Passwords are stored hashed, never in readable form. Access to administrative functions is limited by role and is written to an audit log, two-factor authentication is available on accounts, and uploaded coursework is stored outside the public web root so it can only be reached by the person who submitted it and by the staff responsible for that course. Backups are taken on a routine schedule.

No system is perfectly secure. If a breach ever affects your personal information in a way that is likely to put you at risk, we will notify you and the National Privacy Commission as the Data Privacy Act requires.

8. Your rights

Under the Data Privacy Act you have the right to:

be informed about how your personal information is processed;
access the personal information we hold about you;
have inaccurate or incomplete information corrected;
object to processing, and to withdraw a consent you gave;
have your information erased or blocked where it is incomplete, out of date, unlawfully obtained, or no longer necessary;
receive a copy of your information in a portable electronic format, and have it transferred where that is technically feasible;
be compensated for damage caused by inaccurate or unlawfully used information;
complain to the National Privacy Commission if you believe your rights have been infringed.

You can update most of your details yourself under Profile in your dashboard. For anything else, write to admin@communitylineportal.com and we will respond as promptly as we can. We may need to confirm your identity first so that we do not disclose your information to someone else.

9. Children

The Portal is not directed at children under 13, and we do not knowingly create accounts for them. Where a course is delivered to minors through a school or training programme, that institution is responsible for obtaining parental consent. If you believe a child has registered without consent, contact us and we will remove the account.

10. Where your information is held

The Portal runs on servers operated by our hosting provider. Some of the providers described in section 3 may process data outside the Philippines. Where that happens we take reasonable steps to ensure your information continues to be protected to the standard the Data Privacy Act requires.

11. Changes to this policy

We will update this policy when our practices or the law change, and the "last updated" date above will always show the current version. If a change materially affects how we use your information, we will give you notice by email or on the Portal.

12. How to contact us

For any question about this policy, or to exercise any of the rights in section 8:

Communityline Development Corporation
EPZA Pulung Cacutud, Angeles City, Philippines
Email: admin@communitylineportal.com
Phone: 0993 571 9758

If you are not satisfied with our response you may raise the matter with the National Privacy Commission of the Philippines.