Privacy Policy

Effective date: April 16, 2026

1. Introduction

SafeTagPH ("we," "us," or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and disclose information when you access our QR-powered health and safety platform.

This policy is governed by the Data Privacy Act of 2012 (Republic Act No. 10173), the Philippine HIV and AIDS Policy Act of 2018 (Republic Act No. 11166), and all applicable issuances of the National Privacy Commission (NPC), the Department of Health (DOH), and the Philippine National AIDS Council (PNAC).

2. Information We Collect

We may collect the following types of information:

  • Contact information — name, email address, phone number, and organization when you submit our contact or early-access form.
  • Usage data — pages visited, QR scans, referral source, device type, browser, and approximate location (city-level) collected through analytics tools.
  • Technical data — IP address, operating system, and access timestamps for security and rate-limiting purposes.

We do not collect sensitive personal information such as health records, medical history, or government-issued IDs through this platform. In compliance with RA 11166 (Philippine HIV and AIDS Policy Act), we do not collect, store, or disclose any HIV/AIDS-related status, test results, or medical information of any user.

3. HIV/AIDS Confidentiality and Non-Discrimination

SafeTagPH provides HIV awareness and health education content. In strict compliance with RA 11166 (Sections 30–33) and the policies of the Philippine National AIDS Council (PNAC), we affirm the following:

  • No HIV-related data collection— We do not request, collect, infer, or store any information about a user's HIV/AIDS status, testing history, or treatment records.
  • No compulsory testing or disclosure — Use of the platform does not require or imply any form of HIV testing or status disclosure, in accordance with Section 31 of RA 11166.
  • Non-discrimination — Access to SafeTagPH content and services is provided without discrimination based on actual or perceived HIV status, gender identity, sexual orientation, or any other protected characteristic, consistent with Section 2 of RA 11166 and PNAC guidelines.
  • Stigma-free content — All health education materials are developed and reviewed to ensure they are non-stigmatizing, medically accurate, and aligned with DOH and PNAC standards for public health communication.
  • Anonymity of access — Users may access HIV/AIDS educational content on the platform without creating an account, providing personal information, or being individually identified.

4. Health Content Disclaimer

Health and safety information provided on the SafeTagPH platform is for educational purposes only and is aligned with publicly available guidance from the Department of Health (DOH) and the Philippine National AIDS Council (PNAC). This content does not constitute medical advice, diagnosis, or treatment. Users are encouraged to consult qualified healthcare professionals and DOH-accredited facilities for medical concerns.

5. Legal Basis for Processing

Under Section 12 of RA 10173 and NPC Circular 2016-01, we process personal data based on one or more of the following criteria:

  • Consent — you voluntarily provide information through our forms.
  • Legitimate interest — we use analytics and security logs to improve the platform and protect against abuse.
  • Contractual necessity — processing required to respond to your inquiry or provide requested services.

6. How We Use Your Information

  • Respond to inquiries and early-access requests.
  • Improve the platform experience and content.
  • Detect and prevent security threats, abuse, or fraudulent activity.
  • Comply with legal obligations under Philippine law.
  • Communicate product updates (only with your consent).

7. Data Sharing and Disclosure

We do not sell or rent your personal data. We may share information only in the following circumstances:

  • Service providers — trusted third-party services (hosting, email, analytics) that process data on our behalf under strict data processing agreements as required by NPC Circular 2016-03.
  • Legal compliance — when required by law, court order, or lawful request from a government authority.
  • Safety — to protect the rights, safety, or property of SafeTagPH or our users.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Contact form submissions are retained for up to two (2) years. Analytics and security logs are retained for up to one (1) year.

Upon expiration of the retention period, data is securely deleted or anonymized in accordance with Section 11(e) of RA 10173.

9. Data Security

We implement reasonable organizational, physical, and technical security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, in accordance with Section 20 of RA 10173 and NPC Circular 2016-01.

These measures include:

  • HTTPS encryption for all data in transit.
  • Rate limiting and bot detection on server endpoints.
  • Strict Content Security Policy and security headers.
  • Access controls limiting data access to authorized personnel only.

10. Your Rights

Under Chapter IV of RA 10173, you have the following rights as a data subject:

  • Right to be informed — to know how your data is being collected and processed.
  • Right to access — to obtain a copy of the personal data we hold about you.
  • Right to rectification — to correct inaccurate or incomplete data.
  • Right to erasure or blocking — to request deletion or suspension of processing of your data.
  • Right to object — to object to processing based on legitimate interest or for direct marketing.
  • Right to data portability — to receive your data in a structured, commonly used format.
  • Right to file a complaint — to lodge a complaint with the National Privacy Commission if you believe your rights have been violated.

To exercise any of these rights, contact us at [email protected].

11. Cookies and Tracking

Our platform may use essential cookies for functionality and analytics cookies to understand usage patterns. We do not use cookies for advertising or profiling. You can disable cookies through your browser settings at any time.

12. Children's Privacy

SafeTagPH does not knowingly collect personal data from children under 18 without parental or guardian consent. If you believe a child has provided us with personal data, please contact us so we can promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the platform after changes constitutes acceptance of the revised policy.

14. Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal data, contact our Data Protection Officer:

You may also file a complaint with the National Privacy Commission at privacy.gov.ph.

15. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of the Philippines, including but not limited to:

  • Republic Act No. 10173 — Data Privacy Act of 2012
  • Republic Act No. 11166 — Philippine HIV and AIDS Policy Act of 2018
  • Republic Act No. 10175 — Cybercrime Prevention Act of 2012
  • Republic Act No. 8792 — Electronic Commerce Act of 2000

SafeTagPH also adheres to the applicable Administrative Orders and guidelines issued by the Department of Health (DOH) and the Philippine National AIDS Council (PNAC) on public health information dissemination, HIV/AIDS confidentiality, and non-discrimination.