Privacy Policy of One Pampanga

This Privacy Policy explains how we collect, use, disclose, retain, and protect your information when you use the One Pampanga platform. We process personal data in accordance with the Philippines Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and relevant issuances of the National Privacy Commission (NPC).

1. Scope and Definitions

This Policy applies to users of our website and services, including community members, businesses, event participants, and job seekers. “Personal Data” means any information from which your identity is apparent or can be reasonably and directly ascertained (e.g., name, contact details), or when put together with other information would directly and certainly identify you.

2. Personal Data We Collect

Account & Profile: name, email, phone, location/address, profile details, avatar/photo.
Business & Directory: business name, logo, category, address, contact details, descriptions.
Events: registration details (name, email, contact), attendance, QR codes where applicable.
Resume & Work Profile: resume/CV file metadata and content, skills, prior roles, interests.
Usage & Device: pages visited, timestamps, IP address, browser/device type, referral source, cookies.
Communications: messages you send to us, support requests, and feedback.

3. Lawful Bases for Processing

We process Personal Data only when allowed by law. Our legal bases include:

Consent: e.g., participation in job pooling (Find a Job) and certain marketing communications.
Contract: to provide requested services such as account management, directory listings, events.
Legal Obligation: to comply with laws, court orders, or regulatory requirements.
Legitimate Interests: to improve our platform, ensure security, prevent fraud/abuse, and personalize experience—balanced against your fundamental rights and freedoms.

4. How We Use Personal Data

To operate, maintain, and improve platform features (directory, events, community stories, profiles).
To provide province‑specific experiences (e.g., pricing, categories, local events).
To analyze resumes and generate user work profiles if you request AI analysis.
To communicate service updates, security notices, and support responses.
To enforce platform policies, detect/prevent fraud and misuse, and ensure safety.

5. Job Pooling (Find a Job)

Activating Find a Job is optional. If you opt in, your profile and resume may be included:

In job listings surfaced on our platform; and/or
With trusted third‑party pooling partners for matching opportunities.

You can opt in or out anytime in My Account → Find a Job. When you opt out, we stop new sharing for pooling. Previously shared data may be retained by partners according to their policies; you can contact us to help facilitate requests.

6. Data Sharing and Recipients

We do not sell Personal Data. We may share limited data with service providers that support our operations (e.g., secure storage, email delivery, analytics), bound by confidentiality and data protection obligations. For job pooling, data is shared only if you opt in.

7. International/Cross‑Border Transfers

Our providers may operate globally. When Personal Data is transferred or accessed outside the Philippines, we implement appropriate safeguards (e.g., contractual clauses, access controls) consistent with RA 10173.

8. Data Retention

We retain Personal Data only for as long as necessary to fulfill the purposes above or to comply with legal, accounting, or reporting requirements. You may request deletion; we will honor it unless we have a lawful basis or legal obligation to retain certain data.

9. Your Rights under the Data Privacy Act

Right to be Informed about our data processing activities.
Right to Access your Personal Data that we hold.
Right to Object to processing (including direct marketing) where applicable.
Right to Erasure/Blocking of Personal Data that is inaccurate, outdated, or unlawfully obtained.
Right to Rectification of inaccurate or incomplete data.
Right to Data Portability to obtain a copy of your Personal Data in a structured format where feasible.
Right to Damages and to file a complaint with the NPC.

To exercise your rights, please contact us via the Contact page. We may verify your identity and ask for additional information to process your request.

10. Cookies and Similar Technologies

We use cookies and similar technologies to remember preferences, analyze usage, and improve features. You can control cookies through browser settings. Disabling cookies may limit certain functionalities.

11. Children’s Privacy

Our services are not directed to children below 18 years old without parental consent. If you believe a child provided Personal Data without consent, please contact us and we will take appropriate action.

12. Security Measures

We implement organizational, physical, and technical measures appropriate to the nature of the data we process (e.g., access controls, encryption at rest/in transit where supported by providers, least‑privilege policies, monitoring). No method is 100% secure; we continuously improve our safeguards.

13. Contact Our Data Protection Officer (DPO)

For privacy inquiries or rights requests, contact us through the Contact page and indicate “Attention: Data Protection Officer”. We will respond within a reasonable time in accordance with RA 10173.

14. Complaints with the National Privacy Commission (NPC)

You may lodge a complaint with the NPC if you believe your data privacy rights have been violated. Visit https://privacy.gov.ph for guidance and contact details.

15. Changes to this Policy

We may update this Policy to reflect changes in our practices or for legal, technical, or regulatory reasons. Material changes will be announced on this page with a new effective date.

Effective date: October 31, 2025