Privacy Policy
This Privacy Policy explains how Republicard PH ("Republicard", "we", "us", or "our"), operated by [Republicard PH operating entity], collects, uses, and protects personal information. We are committed to handling personal information in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules, and the issuances of the National Privacy Commission. For this Policy, [Republicard PH operating entity] acts as the personal information controller.
1. Information We Collect
We collect the following personal information:
- Profile information you add to your card, such as name, email address, phone number, company, role or title, photo, and social or website links;
- Authentication information used to sign in, through Google sign-in or an email address and password;
- Account and transaction information, such as your card status, purchases, and support requests;
- Technical information, such as device and browser data and basic usage information needed to operate and secure the Service.
2. How We Use Information
We process personal information to:
- create your account and your digital card, and authenticate you;
- display your public card page with the information you choose to publish;
- fulfil card purchases, deliveries, replacements, and deactivations;
- provide support and respond to your requests;
- maintain the security, integrity, and reliability of the Service;
- improve the Service; and
- comply with legal obligations.
3. Public Card Pages
A card page is public only when you choose to publish it. When published, it displays the information you have chosen to include, so that people you share it with can view and save your details. You control what is published, and you can unpublish your card at any time from your dashboard. Please do not publish information you do not want to be public.
4. Legal Bases for Processing
We process personal information based on your consent, the performance of our contract with you to provide the Service, our legitimate interests in operating and securing the Service, and compliance with legal obligations, consistent with the Data Privacy Act.
5. Storage, Processing, and Third Parties
The Service runs on cloud infrastructure. We use trusted third-party processors to host and operate it, including Google Firebase for authentication, database, and hosting services. These processors may store and process personal information on servers they operate, which may be located outside the Philippines. When information is transferred or processed abroad, we take steps intended to keep it protected consistent with the Data Privacy Act. We do not sell personal information. We share it only with processors that support the Service, or where required by law or to protect rights and safety.
6. Retention
We keep personal information for as long as your account is active and as needed to provide the Service. We may retain certain information for a further period where required for legal, tax, security, or dispute resolution purposes. When information is no longer needed, we take steps to delete or anonymize it. You may request deletion as described below.
7. Your Rights Under the Data Privacy Act
Subject to the Data Privacy Act, you have the right to:
- be informed about how your personal information is processed;
- access the personal information we hold about you;
- have inaccurate or outdated information corrected;
- have your information erased or blocked in certain circumstances;
- object to certain processing;
- data portability, where applicable;
- be indemnified for damages under the law; and
- lodge a complaint with the National Privacy Commission.
To exercise these rights, contact us using the details below.
8. Cookies and Local Storage
We use a small amount of browser storage that is necessary for the Service to work. This includes an authentication session so you stay signed in, and a flag stored in your browser's local storage that remembers when you dismiss the app install prompt. We do not use advertising cookies. You can clear this storage through your browser settings, though doing so may sign you out.
9. Children
The Service is intended for professionals and is not directed to children. We do not knowingly collect personal information from individuals under 18 years of age. If you believe a minor has provided us personal information, contact us so we can take appropriate action.
10. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you. The date of the current version will be indicated when this Policy takes effect.
11. Contact and Data Protection Officer
For privacy questions or to exercise your rights, contact us at [privacy@republicardph.com].
Data Protection Officer: [Data Protection Officer name and contact details], acting for [Republicard PH operating entity].