Privacy Policy

1. Introduction

[Your Organization Name] ("we", "us", or "our") respects your right to privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).

By accessing or using our website, systems, applications, or services (collectively, the "Services"), you agree to the collection and use of information in accordance with this Privacy Policy.

2. Personal Data We Collect

We may collect the following types of personal data, depending on the nature of your interaction with our Services:

a. Personal Information

Full name
Date of birth
Gender
Address
Contact details (email address, phone number)
Government-issued identifiers (when required and legally allowed)

b. Sensitive Personal Information (if applicable)

Biometric data (e.g., facial image, fingerprint, iris scan)
Health-related information
Other information classified as sensitive under RA 10173

Sensitive personal information is collected only when necessary, with appropriate consent and security safeguards.

c. Technical and Usage Information

IP address
Browser type and device information
Access logs and timestamps
System usage and activity logs

3. Purpose of Data Collection and Processing

We collect and process personal data for the following legitimate purposes:

User registration and identity verification
System access control and authentication
Service delivery, monitoring, and improvement
Compliance with legal, regulatory, and contractual obligations
Security, audit, and fraud prevention
Communication regarding system updates, notices, or support requests

Personal data shall be processed only for declared, specified, and legitimate purposes and retained only for as long as necessary.

4. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds under the Data Privacy Act:

Consent of the data subject
Fulfillment of a contract or legal obligation
Compliance with regulatory requirements
Legitimate interests of the organization, provided such interests do not override fundamental rights and freedoms

5. Data Sharing and Disclosure

We do not sell or trade personal data.

Personal data may be shared only with:

Authorized personnel within the organization
Third-party service providers acting as data processors (under strict confidentiality and data protection agreements)
Government agencies or authorities, when required by law

All third parties are required to implement appropriate organizational, physical, and technical security measures.

6. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws, rules, or regulations. Once no longer needed, data is securely disposed of in accordance with NPC guidelines.

7. Data Protection and Security Measures

We implement reasonable and appropriate security measures to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction, including:

Access control and authentication mechanisms

Encryption and secure storage

Audit logs and monitoring

Organizational policies and staff training

8. Rights of Data Subjects

In accordance with the Data Privacy Act, you have the following rights:

Right to be informed
Right to access your personal data
Right to object to processing
Right to erasure or blocking
Right to data portability
Right to rectify inaccurate or incomplete data
Right to file a complaint with the National Privacy Commission

Requests may be subject to verification and applicable legal limitations.

9. Cookies and Similar Technologies (if applicable)

Our website or system may use cookies or similar technologies to enhance user experience, improve performance, and analyze usage patterns. You may control cookie settings through your browser preferences.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect system changes, legal updates, or improvements in our data protection practices. Any changes will be posted on this page with an updated effective date.

11. Contact Information / Data Protection Officer

For questions, concerns, or requests regarding your personal data, you may contact:

Data Protection Officer (DPO)

[Organization Name]

Email: [dpo@email.com]

Address: [Office Address]

Contact Number: [Phone Number]