Privacy Notice & Data Protection
SGW Software Development Services is committed to protecting your personal data in full compliance with the Philippine Data Privacy Act of 2012 (RA 10173) and National Privacy Commission (NPC) regulations across our digital review platform (https://sgwreview.sgwebworks.com).
SGW Software Development Services respects your privacy. We process student and subscriber information solely to deliver high-quality exam review courses and track learning milestones. We never sell your personal data.
1Introduction
SGW Software Development Services ("we," "us," or "our") is strictly committed to protecting your privacy and personal data. This Privacy Notice explains how we collect, process, disclose, and safeguard your personal information when you visit and use https://sgwreview.sgwebworks.com (the "Platform"), in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and issuances by the National Privacy Commission (NPC).
2Personal Data We Collect
Depending on your interaction with the Platform, we may collect and process the following categories of information:
Full name, email address (e.g., Gmail for Google Classroom synchronization), contact telephone/SMS number, and optional educational/institutional affiliation (school or university graduated from).
Username, encrypted authentication tokens, course preferences, target board exam date, and communication records.
Payment confirmation references, transaction IDs, GCash/Maya reference numbers, and bank transfer receipts. We use secure external payment gateways; we do not store your complete credit card numbers or financial passwords on our servers.
Lesson reading progress, quiz scores, timed mastery exam attempts, highest recorded grade, time spent per module, and interaction with AI-assisted review drills.
Internet protocol (IP) address, browser type and version, device identifier, operating system, and technical session cookie identifiers.
3Purpose of Data Processing
We process your personal data for legitimate educational and administrative purposes:
- Account & Classroom Management: To verify enrollment, generate Google Classroom invitation codes, and authenticate your review room access.
- Curriculum Delivery: To deliver lesson modules, record quiz responses, evaluate scores, and compute General Weighted Averages (GWA) based on PRC/CSC passing rubrics.
- Subscription Processing: To administer the 7-day free trial, confirm 1-year subscription payments, and issue digital receipts.
- Academic Communication: To send examination schedule advisories, board Table of Specifications (TOS) updates, and respond to student inquiries.
- Platform Optimization: To monitor technical stability, eliminate bugs, and prevent unauthorized account distribution or scraping.
4Legal Basis for Processing
In accordance with Sections 12 and 13 of the Philippine Data Privacy Act of 2012, our processing is grounded upon:
4.1. Consent: When you voluntarily register, request a 7-day free trial, or submit an inquiry via our contact form.
4.2. Contractual Necessity: To fulfill our obligations under our Terms of Reference when you purchase a 1-year review subscription.
4.3. Legitimate Interests: To ensure platform cybersecurity, combat fraud, and continually improve review course effectiveness.
5Data Sharing and Third-Party Disclosures
We maintain a strict policy against selling, renting, or trading student personal data. Data is shared only with trusted operational partners under written data-sharing and confidentiality covenants:
5.1. Google Workspace & Classroom: Used as our 100% online digital classroom environment for lesson distribution and quiz submissions.
5.2. Payment Processors: Certified Philippine financial gateways (e.g., GCash, Maya, banking rails) to facilitate payment verification.
5.3. Infrastructure & AI Partners: Secure cloud hosting and AI computing infrastructure bound by non-disclosure agreements.
5.4. Legal Compliance: When strictly mandated by a valid subpoena, court order, or official request by Philippine government authorities (such as the NPC, PRC, or DOJ).
6Data Security Measures
We enforce robust organizational, physical, and technical measures specified by NPC Circular 16-01:
- Transport Layer Security (TLS/SSL) encryption for all data transmitted between your browser and our servers.
- Role-based access control (RBAC) restricting student database access solely to authorized academic administrators.
- Regular system monitoring, automated backups, and vulnerability patching.
7Data Retention Policy
We retain personal data for the duration of your active 1-year subscription plus any statutory retention periods required by Philippine tax, accounting, or administrative regulations. Upon the lapse of the necessary retention period, personal data is securely deleted, purged, or irreversibly anonymized.
8Your Rights as a Data Subject
Under Section 16 of the Data Privacy Act of 2012, you are entitled to the following statutory rights:
Know how and why your personal data is collected, stored, and processed.
Request a copy of the personal information we maintain in your profile.
Dispute any inaccuracy in your records and have it promptly amended.
Request removal or suspension of your data when no longer needed.
You also retain the right to damages for substantiated privacy breaches and the right to lodge a formal complaint before the National Privacy Commission (NPC) at privacy.gov.ph.
9Cookies and Tracking Technologies
The Platform uses essential technical cookies and anonymous analytics cookies to maintain session states, preserve your syllabus preview preferences, and measure system responsiveness. You can adjust your cookie settings through your browser, though disabling cookies may affect certain login functions.
10Contact Information — Data Protection Officer (DPO)
For any inquiries, requests to exercise your data subject rights, or concerns regarding this Privacy Notice, please contact our designated Data Protection Officer: