Privacy notice

The SK ng Gumaca decides what is published here and is responsible for the personal data in it (in the words of the law, it is the personal information controller).

Privacy questions and requests: The council has not yet named its privacy officer. Until it does, contact the SK directly, or write to the people who run this site at pdyntechnology@gmail.com, who will pass it to the council.

The site is built and kept running by PDYN Technologies (about them). It is hosted by Vercel and its database is kept by Neon, on servers outside the Philippines. They process the data only to run the site.

Republic Act 10742, the SK Reform Act, asks every SK to adopt a policy of full public disclosure of its transactions and documents (Section 8(i)). This site is one way of doing that. It publishes:

• About each elected official: name, position, committee, photo, a short bio, term, the credentials and contributions they choose to list, and a record of what they did here (projects led, minutes and reports published, ledger entries recorded).
• The council’s records: projects and their budgets, schedules and progress; approved minutes; approved financial reports; the ledger of money in and out; and receipt photos the treasurer has not hidden.

Officials are shown this the first time they log in, and they agree to it. Information about a public official acting in office is not private in the way a citizen’s is, but officials still choose what goes on their profile beyond their name and position.

• Officials’ email addresses, phone numbers and passwords (passwords are stored only as a one-way scramble that nobody can read back).
• Receipts the treasurer marks hidden, for example ones that show a private person’s name or signature.
• Photos of handwritten meeting notes, which only the secretary and the Chairperson can see.
• Drafts that have not been approved.

• No account, no tracking, no advertising, and no analytics cookies.
• One small cookie remembers whether you chose English or Filipino. Officials who log in get one more, which keeps them logged in for up to seven days.
• Like every website, the hosting service records basic request details, such as internet addresses, for security and to keep the site working.

• Getting an account: there is no sign-up. The site admin creates the Chairperson's account, and the Chairperson adds the rest of the council, with your name, email, position and a temporary password. You replace the password with your own the first time you log in.
• Failed log-ins: to stop password guessing, the email address tried and the internet address it came from are kept for up to one day, and cleared as soon as you log in correctly.
• When your term ends: you can no longer log in, and you are listed as a former official. What you published in office stays, as part of the public record.
• Leaving: the site admin can erase your account. Your email, password, phone, photo and profile are deleted. Your name stays only on records you published while in office.

SK meetings sometimes discuss residents, for example someone who asked for help. The council’s rule for anything published here is that private individuals are described by role, not by name (“a resident of Purok 3 asked for assistance”), and that health, family or money matters about a private person stay out of the public version entirely.

If you find yourself named and do not want to be, contact us (Section 1). The council will correct it.

Under the Data Privacy Act (Sections 16 to 18) and its implementing rules (Sections 34 to 36), you have the right to be informed, to see the data held about you, to object, to have mistakes corrected, to have data erased or blocked, to take your data with you, and to be compensated for damage caused by misuse.

To use any of these, write to the contact in Section 1. If you are not satisfied with the answer, you can complain to the National Privacy Commission.

• The site only works over an encrypted connection (HTTPS).
• Each official only reaches the desk for their position, and every important action is written to an audit log.
• Ledger entries cannot be deleted; mistakes are voided in public, with the reason.
• If personal data is ever exposed, the council will notify the National Privacy Commission and the people affected within 72 hours of learning of it, as the implementing rules require (Section 38).

This site is not registered with the National Privacy Commission. Under NPC Circular 2022-04, registration is required for those employing 250 or more people, processing sensitive personal information of 1,000 or more individuals, or processing that is likely to put people’s rights at risk. This site holds account details for a council of about ten officials and collects nothing from visitors, so it does not appear to meet those thresholds.

For local governments, the same circular has the municipality designate and register a Data Protection Officer, who may designate a compliance officer at the barangay level. The council will confirm this assessment with the municipal Data Protection Officer, and register if they advise it.

Many kabataan who read this site are under 18. The site collects nothing from them: there is no sign-up, no form and no tracking for visitors. We follow the National Privacy Commission’s guidance on child-oriented transparency by keeping this notice in plain language, with the short version at the top.