🔒 Data Privacy Act of 2012 (RA 10173) Compliant
🏛️ This Privacy Policy is issued by the Local Government Unit of Bago City for the Heart Warriors cardiovascular health program, in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
1. Who We Are
The Heart Warriors Program is an official health program of the Local Government Unit (LGU) of Bago City, Negros Occidental, Philippines. We are committed to protecting the privacy and security of all personal information we collect in the course of delivering our cardiovascular health services to the residents of Bago City.
Personal Information Controller: Local Government Unit of Bago City
Address: Bago City Hall, Bago City, Negros Occidental, Philippines
Email: heartwarriors@bago.gov.ph
2. What Personal Information We Collect
We may collect the following types of personal information:
- Contact Information: Full name, email address, phone number, home address
- Identification Information: Government-issued ID details, barangay of residence
- Health Information: Medical history relevant to cardiovascular health, current medications, health conditions (for program beneficiaries only)
- Program Information: Beneficiary status, services availed, dates of consultations
- Website Usage Data: IP address, browser type, pages visited, time spent on site (collected automatically via web analytics)
- Contact Form Submissions: Name, email, subject, and message content when you contact us through our website
3. Why We Collect Your Information
We collect and process your personal information for the following purposes:
- To register and process your application as a program beneficiary
- To deliver cardiovascular health services, check-ups, and medicines
- To respond to your inquiries and contact form submissions
- To send program updates, health advisories, and event notifications
- To maintain accurate records of program beneficiaries and services rendered
- To comply with government reporting requirements and audits
- To improve our website and program services
- To generate statistical reports on program impact (using anonymized data)
4. Legal Basis for Processing
We process your personal information based on the following legal grounds under the Data Privacy Act of 2012:
- Consent: When you voluntarily submit your information through our contact form or program registration
- Performance of a Contract/Service: When processing is necessary to deliver the health services you have requested
- Compliance with Legal Obligation: When required by law, government regulations, or official directives
- Legitimate Interest: For program administration, reporting, and service improvement
5. How We Store and Protect Your Information
Your personal information is stored securely using industry-standard measures:
- All data is stored in Supabase, a secure cloud database with encryption at rest and in transit
- All website communications are encrypted using HTTPS/TLS
- Access to personal data is restricted to authorized LGU personnel only
- Passwords are hashed using bcrypt — never stored in plain text
- Regular security audits are conducted on our systems
- Row-Level Security (RLS) is enabled on all database tables
6. Who We Share Your Information With
We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:
- Other LGU Departments: When necessary to deliver integrated government services (e.g., City Health Office, CSWDO)
- National Government Agencies: When required by law (e.g., Department of Health, PhilHealth)
- Service Providers: Third-party technology providers (Supabase, Vercel) who process data on our behalf under strict data processing agreements
- Legal Requirements: When required by court order, subpoena, or applicable law
7. How Long We Keep Your Information
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, or as required by law:
- Beneficiary records: 10 years from last service date, in accordance with government records retention policies
- Contact form submissions: 1 year from date of submission
- Website analytics data: 26 months (standard retention period)
- Financial and audit records: As required by the Commission on Audit (COA) regulations
8. Your Rights Under the Data Privacy Act
As a data subject, you have the following rights under Republic Act No. 10173:
- Right to be Informed: To know how your personal data is being collected and processed
- Right to Access: To request a copy of your personal data held by us
- Right to Rectification: To correct inaccurate or incomplete personal data
- Right to Erasure: To request deletion of your personal data, subject to legal retention requirements
- Right to Object: To object to the processing of your personal data
- Right to Data Portability: To receive your personal data in a structured, commonly used format
- Right to Lodge a Complaint: To file a complaint with the National Privacy Commission (NPC) at www.privacy.gov.ph
To exercise any of these rights, please contact our Data Protection Officer using the details below.
9. Cookies and Website Analytics
Our website may use cookies and similar tracking technologies to improve your browsing experience and analyze website traffic. These include:
- Essential Cookies: Required for the website to function properly
- Analytics Cookies: Used to understand how visitors interact with our website (e.g., Google Analytics)
You may disable cookies through your browser settings. Note that disabling cookies may affect some website functionality.
10. Children's Privacy
Our program serves all residents of Bago City, including minors. When collecting personal information from individuals under 18 years of age, we require the consent of a parent or legal guardian. We do not knowingly collect personal information from children without parental consent.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on this page with a revised "Last Updated" date. We encourage you to review this policy periodically.
12. Governing Law
This Privacy Policy is governed by the laws of the Republic of the Philippines, including but not limited to:
- Republic Act No. 10173 — Data Privacy Act of 2012
- Republic Act No. 11032 — Ease of Doing Business and Efficient Government Service Delivery Act
- Republic Act No. 8792 — Electronic Commerce Act of 2000
- National Privacy Commission Circulars and Advisories