🔒 Data Privacy Act of 2012 (RA 10173) Compliant
🏛️ This Privacy Policy is issued by the Local Government Unit of Bago City for the Smile Bright Bago dental health program, in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
1. Who We Are
The Smile Bright Bago Program is an official dental health program of the Local Government Unit (LGU) of Bago City, Negros Occidental, Philippines, dedicated to providing free dental care and oral health services to all residents. We are committed to protecting the privacy and security of all personal information we collect.
Personal Information Controller: Local Government Unit of Bago City
Address: Bago City Hall, Bago City, Negros Occidental, Philippines
Email: smilebright@bago.gov.ph
2. What Personal Information We Collect
- Contact Information: Full name, email address, phone number, home address, barangay
- Health Information: Dental history, current dental conditions, allergies to dental materials (for beneficiaries only)
- Program Information: Services availed, dates of dental procedures, treatment records
- Website Usage Data: IP address, browser type, pages visited (collected automatically)
- Contact Form Submissions: Name, email, subject, and message content
3. Why We Collect Your Information
- To register and process your application as a program beneficiary
- To deliver free dental check-ups, extractions, cleaning, and oral health education
- To respond to your inquiries and contact form submissions
- To maintain accurate dental health records of beneficiaries
- To comply with government reporting requirements (DOH, City Health Office)
- To generate statistical reports on program impact
- To improve our website and program services
4. Legal Basis for Processing
- Consent: When you voluntarily submit your information
- Performance of a Service: When processing is necessary to deliver dental health services
- Compliance with Legal Obligation: When required by law or government regulations
- Legitimate Interest: For program administration and reporting
5. How We Store and Protect Your Information
- All data is stored in Supabase, a secure cloud database with encryption at rest and in transit
- All website communications are encrypted using HTTPS/TLS
- Access to personal data is restricted to authorized LGU personnel only
- Passwords are hashed using bcrypt — never stored in plain text
- Row-Level Security (RLS) is enabled on all database tables
6. Who We Share Your Information With
We do not sell, rent, or trade your personal information. We may share it only with:
- Other LGU Departments: City Health Office (CHO), Rural Health Units
- National Government Agencies: Department of Health (DOH), PhilHealth
- Service Providers: Supabase, Vercel — under strict data processing agreements
- Legal Requirements: When required by court order or applicable law
7. How Long We Keep Your Information
- Dental health records: 10 years from last service date
- Contact form submissions: 1 year from date of submission
- Website analytics data: 26 months
8. Your Rights Under the Data Privacy Act
- Right to be Informed — Know how your data is collected and processed
- Right to Access — Request a copy of your personal data
- Right to Rectification — Correct inaccurate or incomplete data
- Right to Erasure — Request deletion, subject to legal retention requirements
- Right to Object — Object to the processing of your personal data
- Right to Data Portability — Receive your data in a structured format
- Right to Lodge a Complaint — File a complaint with the National Privacy Commission at www.privacy.gov.ph
9. Cookies and Website Analytics
Our website may use cookies and analytics tools to improve your experience and analyze traffic. You may disable cookies through your browser settings.
10. Children's Privacy
Our program serves all residents including children. When collecting personal information from individuals under 18 years of age, we require the consent of a parent or legal guardian.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised "Last Updated" date.
12. Governing Law
- Republic Act No. 10173 — Data Privacy Act of 2012
- Republic Act No. 11223 — Universal Health Care Act
- Republic Act No. 8792 — Electronic Commerce Act of 2000
- National Privacy Commission Circulars and Advisories