Privacy Notice — Review Masters CERT

Version 1.1.0 · Interim · Effective 11 September 2026

This is an interim notice pending legal review. It describes accurately

what the CERT platform does with your information today. It has not yet been

reviewed by a lawyer against the Philippine Data Privacy Act of 2012

(RA 10173). It will be replaced once that review is complete.

Review Masters operates the College Entrance Readiness Test (CERT) at

cert.upcatreview.com. This notice covers CERT specifically. The main Review

Masters website has its own separate policy.

Who we are

Review Masters

2F LMC Bldg., P. Zulueta St., San Pablo City, Laguna, Philippines

reviewmasters@upcatreview.com

What we collect

To create your account

• First name, last name, email address
• Whether you are 18 or older. We do not ask for your date of birth.
• If you are under 18: a parent or guardian's email address

When you take the assessment

• Your answers, and when each was recorded
• When each section started, and when it was submitted
• Your scores, by subject and by topic

After the assessment, if you choose to give it

• School, province, city, mobile number, grade level
• Your answers to our survey questions about how you are preparing

Automatically

• How you reached us (the campaign or website that referred you)
• Basic usage events, such as starting and finishing the assessment

What we do with it

• To give you your results. This is the main purpose.
• To email you your report, and a link to view it online.
• To improve the assessment, using combined statistics across many students.
• To contact you about Review Masters programmes — only if you have

agreed, and only in the ways described below.

If you are under 18

Most CERT takers are Grade 11 students, so this applies to most people reading

this.

• You can take the assessment and see your own score whether or not your

parent responds. Your result is yours.

• We email the parent or guardian address you give us, once, to ask permission

before contacting you about our programmes.

• **Once you tell us you are under 18, we run no advertising trackers on your

account.** Facebook's tracking pixel is switched off for under-18 accounts

regardless of any other setting. Before you sign in and tell us your age, the

public pages of the site are measured like any public web page — see

Cookies below.

• We do not add you to any marketing list unless both you and your parent or

guardian have agreed.

Your parent's email address is used only for that permission request. It is

never added to a mailing list.

Consent

There are two separate decisions, and they are always presented separately:

1. Data processing — needed to run the assessment and give you results.

2. Marketing — optional. Never required to see your results.

You can change your marketing decision at any time by replying to any email we

send, or by writing to reviewmasters@upcatreview.com. We record which version

of this notice you agreed to, and when.

Who else sees your information

• Supabase hosts our database, in Singapore.
• Vercel hosts the application.
• Resend delivers our emails.
• Google Analytics measures general site usage. Advertising features are

switched on only for users aged 18 or over who have agreed to marketing.

• Meta (Facebook) measures advertising on the public pages you see before

you sign in, and after sign-in **only for users aged 18 or over who have

agreed to marketing**. It is never used for anyone who tells us they are

under 18. Neither tool receives your name, email address, answers or score.

We do not sell your information. We do not rent or lease it.

How long we keep it

Assessment results are kept so you can return to them and so we can improve the

test. We have not yet set a fixed retention period; that is one of the things

the legal review will settle. You may ask us to delete your account and results

at any time.

Your rights

Under the Philippine Data Privacy Act you may ask us to show you what we hold

about you, correct anything wrong, delete it, or stop using it for marketing.

Write to reviewmasters@upcatreview.com.

Cookies

We use a small number of first-party cookies: one to keep you signed in, and

one to remember which campaign brought you to us. Neither is used to build a

profile of you.

Two third-party tools also set cookies of their own: Google Analytics, to tell

visits apart; and Meta's pixel, on public pages before you sign in and, for

adults who agreed to marketing, after sign-in. No analytics script runs at all

while you are inside a timed section of the test.

Changes

We will post any new version here with a new version number. Your recorded

consent always names the version you actually agreed to.

• 1.1.0 (11 September 2026) — describes Meta's pixel on public pages before

sign-in, and the analytics cookies. Nothing else changed.

• 1.0.0 (10 September 2026) — first interim notice.