Privacy Policy

AFEVA PRIVACY POLICY

 

Effective Date: October 13, 2025

 

1. INTRODUCTION AND SCOPE

 

AFEVA (referred to as "we," "us," or "our") is committed to protecting the privacy and security of your Personal Data. This Privacy Policy outlines how we collect, use, disclose, and protect your Personal Data in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and all issuances of the National Privacy Commission (NPC).

This Policy applies to all individuals (Data Subjects) whose Personal Data we process, including customers, website visitors, employees, and third-party partners.

 

2. DEFINITIONS UNDER THE DPA

 

• Data Subject: An individual whose Personal Data is processed.

• Personal Information: Any information that can identify an individual directly or indirectly (e.g., name, address, email).

• Sensitive Personal Information: Personal Information that requires stricter protection due to its potential impact on an individual's privacy (e.g., age, marital status, health information).

• Processing: Any operation performed upon Personal Data (e.g., collection, storage, use, disclosure).

• Personal Information Controller (PIC): The person or organization that controls the processing of Personal Information. AFEVA acts as a PIC.

 

3. THE PERSONAL DATA WE COLLECT

 

We collect various types of Personal Data depending on your interaction with us:

• Inquiry/Contact Data: Name, email address, organization name, and the details of your inquiry or message. (Collected when you use our public contact forms or send general inquiries).

• Identity Data: Name, contact number, physical address, date of birth, and government-issued IDs (collected for specific purposes like membership or employment, where necessary).

• Technical & Usage Data (Analytics): Internet Protocol (IP) address, operating system, browser type, device identifier, location data, and information about how you use our services (e.g., pages visited, features used).

• Marketing and Communications Data: Your preferences in receiving marketing from us and your communication choices.

• Sensitive Personal Information: May be collected only with your explicit consent and when necessary for a legitimate purpose (e.g., health information for specific programs).

 

4. PURPOSE AND BASIS FOR PROCESSING PERSONAL DATA

 

We process your Personal Data based on the principles of Transparency, Legitimate Purpose, and Proportionality as required by the DPA.

• Handling Inquiries: Necessary for the purposes of the legitimate interests pursued by AFEVA (i.e., responding to your queries and providing requested information).

• Marketing and Communication: With the consent of the Data Subject (e.g., sending promotional offers or newsletters).

• Analytics and Improvement: Necessary for the legitimate interests pursued by AFEVA (e.g., analyzing data to improve website functionality and user experience).

 

5. COLLECTION METHOD AND ANALYTICS

 

A. Direct Collection

We collect Personal Data when you provide it directly to us through:

• Filling out forms on our website or mobile application (e.g., Contact Form, Membership Application).

• Communicating with us via email, phone, or physical correspondence.

• Registering for an account or subscribing to our services.

• Participating in surveys or promotions.

B. Automated Collection (Analytics)

When you access our website or services, we automatically collect Technical and Usage Data through cookies and other tracking technologies ("Analytics").

• Type of Analytics Data: IP address, device type, browsing history, and clickstream data.

• Purpose: To monitor and analyze the use of our services, measure the effectiveness of our content, and understand user behavior to continuously improve our offerings.

• Compliance: Where required, we obtain your consent for the use of non-essential cookies and provide mechanisms for you to manage your cookie preferences. The data collected is primarily anonymized or pseudonymized for analytical purposes.

 

6. DATA SHARING AND DISCLOSURE

 

We will not share your Personal Data with third parties unless:

1. Consent is given: You have given your specific, informed, and written consent (or electronic equivalent).

2. Required by Law: We are required to disclose it under a court order, subpoena, or other legal process as mandated by the DPA or other applicable laws.

3. To Personal Information Processors (PIP): We share data with third-party service providers (e.g., cloud hosting, payment processors, marketing agencies) who process the data solely on our behalf and under strict contract requiring them to maintain the same level of data protection as AFEVA.

4. Data Sharing Agreements (DSA): Any non-outsourcing disclosure of Personal Data to other Personal Information Controllers will be governed by a proper DSA that ensures adequate safeguards and NPC compliance.

 

7. RETENTION AND DISPOSAL

 

We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law, regulation, or contract. Once the retention period expires, your data will be securely and permanently disposed of or anonymized to prevent further processing, in compliance with the NPC's regulations.

 

8. YOUR RIGHTS AS A DATA SUBJECT (DPA)

 

As a Data Subject under the DPA, you have the following rights:

1. Right to be Informed: The right to know whether your Personal Data is being processed, why it is being processed, and who is processing it.

2. Right to Object: The right to withhold or withdraw consent and object to the processing of your Personal Data, including processing for direct marketing or automated processing.

3. Right to Access: The right to reasonable access to your Personal Data being processed.

4. Right to Rectification: The right to dispute any inaccuracy or error in your Personal Data and demand its immediate correction.

5. Right to Erasure or Blocking (Right to be Forgotten): The right to suspend, withdraw, or order the blocking, removal, or destruction of your Personal Data when certain conditions are met.

6. Right to Data Portability: The right to obtain a copy of your electronic Personal Data in an electronic or structured format, allowing you to move or transfer it to another PIC.

7. Right to File a Complaint: The right to lodge a complaint with the NPC for any violation of your rights.

8. Right to Damages: The right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your Personal Data.

 

9. CONTACT INFORMATION

 

If you have any questions or concerns about this Privacy Policy, our data processing activities, or if you wish to exercise any of your rights as a Data Subject, you may contact our Data Protection Officer (DPO):

• DPO Name/Office: Data Protection Office

• Email Address: afeva2025@gmail.com

We commit to responding to your requests within a reasonable time and in accordance with the DPA and NPC issuances.

 

10. POLICY UPDATES

 

AFEVA reserves the right to modify or amend this Privacy Policy at any time to comply with changes in laws, regulations, or our business practices. The updated Policy will be posted on this page with a revised "Effective Date." We encourage you to review this page periodically.