Privacy Policy
Table of Contents
1. Introduction
Sangandaan Cemetery ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
We comply with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and other applicable data protection laws. Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
2. Information We Collect
We collect information that you voluntarily provide to us when you register for an account, request services, or communicate with us. The types of information we collect include:
| Category | Information Collected | Purpose |
|---|---|---|
| Personal Information | Full name, date of birth, government ID numbers | Account verification and service delivery |
| Contact Information | Email address, phone number, physical address | Communication and service updates |
| Account Credentials | Username, hashed password | Account security and authentication |
| Transaction Information | Payment details, service requests, burial records | Processing payments and fulfilling requests |
| Technical Information | IP address, browser type, device information | Website improvement and security |
3. How We Use Your Information
We use the information we collect for the following purposes:
- Account Management: Create and manage your user account, verify your identity, and provide customer support.
- Service Delivery: Process burial service requests, interment arrangements, and memorial maintenance services.
- Payment Processing: Process payments for services and maintain transaction records.
- Communication: Send service confirmations, appointment reminders, and important updates about the cemetery.
- Legal Compliance: Comply with applicable laws, regulations, and government requests.
- Improvement: Analyze usage patterns to improve our website and services.
- Security: Detect, prevent, and address technical issues and unauthorized access.
5. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of sensitive data during transmission using SSL/TLS protocols
- Secure hashing of passwords using industry-standard algorithms
- Regular security assessments and vulnerability scans
- Access controls limiting employee access to personal information
- Secure data centers with physical security measures
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with services. We may also retain and use your information to comply with legal obligations, resolve disputes, and enforce our agreements.
Specifically:
- Active Accounts: Information is retained while your account is active and for a reasonable period thereafter.
- Transaction Records: Payment and service records are retained for a minimum of five (5) years to comply with legal requirements.
- Inactive Accounts: Accounts inactive for three (3) years may be archived or deleted after notification.
7. Your Rights and Choices
Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:
- Right to be Informed: You have the right to be notified of how your personal information is being processed.
- Right to Access: You may request a copy of your personal information held by us.
- Right to Rectification: You may request correction of any inaccurate or incomplete information.
- Right to Erasure: You may request deletion of your personal information under certain circumstances.
- Right to Object: You may object to the processing of your personal information for specific purposes.
- Right to Data Portability: You may request a copy of your data in a structured, commonly used format.
To exercise these rights, please contact us using the information in the Contact section. We will respond to your request within a reasonable timeframe.
9. Children's Privacy
Our Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information.
Users between 13 and 18 years of age must have parental or guardian consent to register and use our Services.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:
- Posting the updated policy on our website with a new "Last Updated" date
- Sending an email notification to registered users (for significant changes)
- Displaying a notice on our website for a reasonable period
Your continued use of our Services after any modifications constitutes acceptance of the updated Privacy Policy.
11. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:
- Data Protection Officer: [Name of DPO]
- Address: Sangandaan, Caloocan City, Metro Manila, Philippines
- Phone: (02) 8XXX-XXXX
- Email: dpo@sangandaancemetery.gov.ph
For complaints regarding our handling of your personal information, you may also contact the National Privacy Commission:
- Website: https://privacy.gov.ph
- Email: complaints@privacy.gov.ph
Your privacy is important to us. We are committed to protecting your personal information and respecting your privacy rights.