Privacy Policy
Don Bosco Tarlac Past Pupils Association
At Don Bosco Tarlac Past Pupils Association ("DBTPPA," "we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Services"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Services.
1. Information We Collect
We collect information that you provide directly to us when you:
1.1 Personal Information
| Category | Examples | Purpose |
|---|---|---|
| Identity Information | Full name, birth date, gender, student number | Account creation and alumni verification |
| Contact Information | Email address, phone number, physical address | Communication and directory listing |
| Educational Information | Batch year, batch type, section, awards | Batch classification and networking |
| Professional Information | Occupation, company, industry, work address | Alumni directory and job board |
| Account Credentials | Email, encrypted password, PIN (business staff) | Authentication and security |
| Profile Media | Profile picture, cover photo, gallery uploads | Personalization and event memories |
1.2 Automatically Collected Information
- Log Data: IP address, browser type, operating system, pages visited, time and date of visit
- Device Information: Device type, unique device identifiers, mobile network information
- Usage Data: Features used, interactions, clicks, and time spent on the platform
- Cookies & Similar Technologies: Session cookies, persistent cookies, and local storage
- Location Data: Approximate location based on IP address (with consent for precise location)
- QR Code Interactions: Transaction timestamps, business locations, points earned/redeemed
2. How We Use Your Information
We use the collected information for the following purposes:
- Account Management: Create, maintain, and secure your account
- Alumni Networking: Enable connections between fellow Bosconians
- Directory Services: Maintain searchable alumni directory (with privacy controls)
- Event Management: Organize and manage alumni events, reunions, and activities
- Rewards Program: Track points, process redemptions, and manage loyalty tiers
- Communication: Send important updates, newsletters, and event invitations
- Business Services: Facilitate transactions with partner establishments
- Security: Detect and prevent fraud, abuse, and unauthorized access
- Improvement: Analyze usage patterns to improve our Services
- Legal Compliance: Comply with applicable laws and regulations
3. How We Share Your Information
We may share your information in the following circumstances:
Public Alumni Directory
Your name, batch year, and general location may appear in the alumni directory. You can control your directory visibility in your privacy settings.
- With Other Alumni: Basic profile information based on your privacy settings
- With Business Partners: Loyalty card information for points processing
- Service Providers: Third-party vendors who assist in operating our Services
- Legal Requirements: When required by law or to protect rights and safety
- Business Transfers: In connection with merger, sale, or transfer of assets
- With Your Consent: Any other sharing with your explicit permission
We DO NOT Sell Your Data
DBTPPA does not sell, rent, or trade your personal information to third parties for their marketing purposes. Your trust is important to us.
4. Cookies & Tracking Technologies
We use cookies and similar tracking technologies to:
- Essential Cookies: Required for basic site functionality and security
- Preference Cookies: Remember your settings and preferences
- Analytics Cookies: Understand how you interact with our platform
- Session Cookies: Keep you logged in during your visit
- Security Cookies: Prevent CSRF attacks and verify user identity
You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Services.
5. Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encryption: Data encrypted in transit (SSL/TLS) and at rest
- Password Hashing: Passwords stored using bcrypt with salt
- Access Controls: Role-based access to sensitive data
- Session Security: Secure session management with regeneration
- CSRF Protection: Protection against cross-site request forgery
- Input Validation: Prevention of SQL injection and XSS attacks
- Rate Limiting: Protection against brute force attacks
- Regular Audits: Security monitoring and vulnerability assessments
- Secure Cookies: HttpOnly, Secure, and SameSite attributes
Important Notice
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as:
- Your account remains active
- Necessary to provide you with our Services
- Required to comply with legal obligations
- Needed to resolve disputes and enforce agreements
After account termination or extended inactivity, we may:
- Anonymize personal data for statistical purposes
- Delete or archive data based on our retention schedule
- Retain certain information as required by law
7. Your Rights Under Philippine Law
Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights:
Right to be Informed
You have the right to know how your personal data is being processed.
Right to Access
You may request access to your personal data in our possession.
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Right to Erasure
You may request deletion of your personal data under certain conditions.
Right to Object
You can object to the processing of your personal data in specific circumstances.
Right to Data Portability
You may request a copy of your data in a structured, commonly used format.
Right to Damages
You have the right to compensation for damages due to data privacy violations.
To exercise any of these rights, please contact us using the information provided below. We will respond to your request within 30 days.
8. Children's Privacy
Our Services are not intended for individuals under the age of 15. We do not knowingly collect personal information from children. If we become aware that a child under 15 has provided us with personal information, we will take steps to delete such information immediately.
9. International Data Transfers
Your information may be stored and processed in the Philippines or other countries where our service providers operate. We ensure that appropriate safeguards are in place to protect your data in accordance with Philippine data protection laws.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date at the top of this policy
- Sending an email notification for material changes
- Displaying a notice on our platform
We encourage you to review this Privacy Policy periodically. Your continued use of our Services after changes constitutes acceptance of the updated policy.
11. Third-Party Links
Our Services may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you visit.
12. QR Code & Rewards System Privacy
When you use the DBTPPA rewards system and QR codes:
- Transaction data is collected at the point of sale
- QR scans record timestamp, location, and business partner information
- Points earned and redeemed are tracked for loyalty program management
- Business partners only access information necessary for transaction processing
- Transaction history is available in your account dashboard
- You can opt-out of data sharing with specific business partners
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:
Data Protection Officer
Don Bosco Tarlac Past Pupils Association
Don Bosco Tarlac, Sto. Cristo, Tarlac City, 2300 Philippines
privacy@donboscotarlacalumni.ph
+63 (045) XXX-XXXX
Monday - Friday, 8:00 AM - 5:00 PM (Philippine Standard Time)
National Privacy Commission (NPC)
If you believe your data privacy rights have been violated, you may file a
complaint with the National Privacy Commission:
Website: www.privacy.gov.ph
Email: complaints@privacy.gov.ph
Phone: +63 (02) 8234-2228
14. Consent
By using our Services, you consent to our Privacy Policy and agree to its terms. If you register for an account, you explicitly consent to the collection, use, and processing of your personal information as described herein.