Data Protection Policy

Philippine Data Privacy Act of 2012 (RA 10173)

MyBloodDonorPH is committed to complying with the Philippine Data Privacy Act of 2012 and its implementing rules and regulations. We ensure that all personal data is processed fairly, lawfully, and transparently.

Data Processing Principles

Transparency: We inform you about how your data is collected and used
Legitimate Purpose: Data is collected only for specified, legitimate purposes
Proportionality: We collect only what is necessary for our services

Data Subject Rights

Under the Data Privacy Act, you have the following rights:

Right to be Informed: Know how your data is being processed
Right to Access: Obtain a copy of your personal data
Right to Rectification: Correct inaccurate data
Right to Erasure: Request deletion of your data
Right to Object: Object to certain types of processing
Right to Data Portability: Receive your data in a structured format
Right to Damages: Claim compensation for violations

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Inactive accounts may be deleted after 2 years of inactivity.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected individuals within 72 hours of becoming aware of the breach.

Filing a Complaint

If you believe your data privacy rights have been violated, you may file a complaint with the National Privacy Commission (NPC) at complaints@privacy.gov.ph or contact our Data Protection Officer at dpo@myblooddonorph.com.