Privacy Policy

K4 Edu Solutions · Kalixen Online Store

Last updated: 6 August 2026

This policy explains how Kalixen Online Store, trading as K4 Edu Solutions, handles personal data. We are the Personal Information Controller for the purposes of Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations.

1. What we collect, and why

2. What we deliberately do not collect

Some of this is worth stating plainly, because it is unusual:

• No card or e-wallet details, ever. Payment is handled entirely on PayMongo's hosted page. Card numbers, GCash credentials and one-time PINs never touch this website and are never transmitted to us.
• No IP addresses or user agents in our analytics. Our usage statistics are first-party and are structurally incapable of identifying you: the database table that stores them has no column for an IP address, an email, a device id or an access code.
• No third-party advertising or tracking scripts. There is no Google Analytics, no Meta pixel, and no ad network on this site. Nothing here follows you elsewhere.
• No plaintext access codes tied to your identity. Your order record stores only a cryptographic hash of the code.

Because our analytics collect no personal data, this site does not need — and does not show — a cookie consent banner. The only cookies set are the two strictly necessary portal cookies named above.

3. Who else processes your data

We use a small number of service providers, each for one clearly defined job. They act on our instructions and may not use your data for their own purposes.

We do not sell, rent or trade personal data. We do not share it with anyone else except where the law compels us to.

Transfers outside the Philippines

Our hosting and email providers operate internationally, so your order data may be stored or processed abroad. Where that happens we remain accountable for it under RA 10173 and use providers that offer a comparable level of protection.

4. How long we keep it

• Order records: retained for 10 years, as required for books of account under Philippine tax rules (BIR Revenue Regulations).
• Support emails: retained while the matter is open and for a reasonable period afterwards, then deleted.
• Portal cookies: the session cookie lasts 12 hours; the device cookie lasts up to 365 days. Both are held on your own device and you may clear them at any time.
• Anonymous usage events: retained indefinitely, because they contain nothing that identifies anyone.

5. How it is protected

• The whole site is served over HTTPS with HTTP Strict Transport Security.
• Order data sits in a private database reachable only by the site's own server code. No public route can read it.
• Access codes are stored as SHA-256 hashes; portal sessions use signed, HttpOnly cookies.
• Access to the underlying systems is limited to the author.

No system is perfectly secure, and we will not claim otherwise. If a breach ever affects your personal data, we will notify you and the National Privacy Commission as RA 10173 requires.

6. Your rights under RA 10173

As a data subject you have the right to:

• Be informed that your data is being collected and processed — this page.
• Access the data we hold about you, and to receive a copy of it.
• Object to processing, including withdrawing consent where consent is the basis.
• Rectify anything inaccurate or incomplete.
• Erasure or blocking of data that is unlawfully obtained, outdated, or no longer necessary — subject to the tax-record retention above, which we are legally required to keep.
• Data portability — a copy of your data in a usable electronic format.
• Damages for a violation of your rights under the Act.
• Complain to the National Privacy Commission (privacy.gov.ph).

To exercise any of these, email k4edusolutions@gmail.com. We respond within 15 working days. There is no charge.

7. Children

This site is intended for senior high school, college and professional learners. We do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, write to us and we will delete it.

8. Changes to this policy

We will update this page when our practices change, and revise the “last updated” date above. Material changes affecting existing customers will be sent by email.

9. Contact

Questions, requests and complaints about personal data all go to the same place. As a sole proprietorship below the National Privacy Commission's mandatory registration thresholds, we have not appointed a separate Data Protection Officer; the author handles these personally.