Privacy Policy for Scoliosis Philippines

Welcome to our safe space.

Scoliosis Philippines Support Group Inc.
Website: https://scoliosisphilippines.org/
Address: Matina Aplaya, Davao City, Davao del Sur, Philippines
SEC:
CN201966096
TIN:
739-251-532-000
Effective Date: January 18, 2019
Last Updated: September 30, 2026

Scoliosis Philippines Support Group Inc. (“Scoliosis Philippines,” “we,” “us,” or “our”) respects your privacy. This policy explains how we collect, use, share, retain, and protect personal information through our website and related activities.

1. Who We Are

This website is operated by Scoliosis Philippines Support Group Inc., a nonprofit organization based in the Philippines.

For privacy-related questions, requests, complaints, or withdrawal of consent, contact us at:

Email: [email protected]

Privacy inquiries received through this address will be directed to the person responsible for handling them.

2. Scope

This policy covers personal information we handle when you:
– Visit scoliosisphilippines.org;
– Contact us or request community information or support;
– Volunteer, collaborate, or propose a partnership;
– Participate in events, campaigns, or surveys;
– Submit stories, photographs, videos, or testimonials; or
– Make a donation through our designated channels.

Specific activities may have additional privacy notices explaining their information requirements and purposes. New services, including online purchases and digital health tools, will have appropriate notices when introduced.

External platforms have their own privacy policies. This policy applies to information we collect or use through those platforms.

3. Information We Collect

We collect information relevant and necessary to the stated purpose.

Information you provide may include your name, email address, contact number, general location, organizational affiliation, messages, volunteer or partnership details, and submitted materials.

Health information may include scoliosis diagnosis, treatment experiences, or other details you choose to share. Please avoid submitting medical records or health information that is unnecessary for your inquiry.

Technical information may include your IP address, browser, device, pages visited, and visit times, depending on the website tools and services in use.

Donation information may include transaction details needed for acknowledgment, accounting, and recordkeeping. Payment information entered directly on an external provider’s platform is handled under that provider’s privacy policy.

4. How We Use Information

We use personal information to:
– Respond to inquiries and privacy requests;
– Provide community information and connections to relevant resources;
– Coordinate volunteers, partnerships, events, and activities;
– Understand community needs and improve programs;
– Manage donation records and communications;
– Maintain and protect the website; and
– Meet legal, tax, and regulatory obligations.

Submitting an inquiry or joining an activity does not automatically authorize publication of your information or promotional communications.

Research involving identifiable information will have an appropriate privacy notice and lawful basis. If we intend to use information for a new purpose, we will provide notice and obtain consent where required.

5. Lawful Basis for Processing

We process personal information only when an applicable lawful basis exists under the Data Privacy Act. Depending on the activity, this may include:
– Consent: For optional communications, publication, and other uses requiring permission;
– Contractual necessity: To carry out an agreement or take steps you request before entering one;
– Legal obligations: To maintain required records or respond to lawful requests; or
– Legitimate interests: For purposes such as managing ordinary inquiries and website security, where these interests do not override your rights.

Health information is sensitive personal information. Its processing requires consent specific to the purpose or another applicable condition under Section 13 of the Data Privacy Act. Legitimate interests alone are not sufficient.

Where processing relies on consent, you may withdraw it through the contact email in Section 1. Withdrawal does not affect processing lawfully carried out beforehand. We will explain any continued processing based on another lawful ground.

6. Health Information and Children’s Privacy

We limit the use of health information to its stated purpose and access to authorized people who need it.

Sharing health information with us does not automatically authorize publication or disclosure to healthcare providers, partners, or researchers.

For activities involving children, we explain the intended use in suitable language and obtain appropriate parent or lawful guardian permission where required. Publication of a child’s identifiable story, image, or health information requires specific permission.

Please avoid submitting unnecessary information about a child.

7. Stories, Photographs, Videos, and Testimonials

Before publishing identifiable material submitted to us, we explain its intended use and obtain appropriate permission.

Permission identifies the material and authorized publication channels, such as our website, social media, or campaign materials. It does not automatically authorize unrelated uses.

Submit another person’s information or image only if you are authorized to do so.

To withdraw permission or request removal, use the contact email in Section 1. We will review your request and explain any applicable limitation. We may be unable to retrieve printed materials already distributed or remove copies independently shared by others.

Event notices will explain photography and recording arrangements, with permission obtained where required.

8. Sharing Information

We do not sell personal information.

Information may be accessed by:
– Authorized officers, staff, volunteers, or representatives who need it for their responsibilities;
– Providers supporting hosting, communications, security, donations, or other organizational services;
– Professional advisers where necessary; and
– Authorities or other recipients where disclosure is required or permitted by law.

We remain accountable for information processed on our behalf. Provider arrangements must include appropriate safeguards and restrictions on its use.

Before sharing identifiable information for a referral or collaboration, we explain the recipient, purpose, and information involved and obtain consent where required.

Some providers may process information outside the Philippines. Our responsibility to protect personal information continues when it is outsourced or transferred.

9. Cookies and External Services

Our website uses Google Tag Manager to manage website tags. Tag Manager is not itself a description of every tracking service: information collection depends on the tags enabled through it.

Cookies and similar technologies may support website functions, preferences, security, and analytics. Embedded services may also collect information under their own privacy policies.

Where consent is required for optional tracking, we obtain it before enabling that tracking. You may contact us for information about the website’s active tracking services and available choices.

You can manage cookies through your browser settings. Disabling some cookies may affect website functionality.

External websites have their own privacy practices. Please review their notices before providing information.

10. Data Retention and Security

We retain personal information only for as long as necessary for its stated purpose, applicable legal requirements, or another documented lawful purpose.

Retention is determined by the record and its purpose:
– Inquiries: Resolution, justified follow-up, and necessary recordkeeping;
– Volunteer, partnership, and event records: The activity or relationship and applicable reporting requirements;
– Donation records: Applicable accounting, tax, and legal requirements;
– Published materials and permissions: The authorized use and necessary evidence of permission; and
– Technical records: Security needs and relevant provider settings.

An ongoing relationship does not justify keeping every record indefinitely. We review whether information is still needed and securely delete, destroy, or anonymize it when retention is no longer justified.

You may request information about the retention period or criteria applying to your records.

We use reasonable and appropriate organizational, physical, and technical safeguards. No online system is completely secure.

If a breach requires notification, we will notify affected individuals and the National Privacy Commission in accordance with applicable requirements.

11. Your Rights, Requests, and Complaints

Subject to applicable legal conditions, you have the right to:
– Be informed about how your information is processed;
– Access your information;
– Correct inaccurate or incomplete information;
– Object to certain processing;
– Request erasure or blocking;
– Obtain data portability where applicable;
– File a complaint; and
– Seek damages where provided by law.

Send requests or concerns to the contact email in Section 1. Include a contact detail, a description of your request, and enough information to identify the records involved.

We may request proportionate identity verification where necessary. Please do not send identification documents unless requested.

We will respond within applicable legal periods and explain any lawful restriction on fulfilling your request.

You may also lodge a complaint with the National Privacy Commission, subject to its procedures. Visit https://privacy.gov.ph/ for information.

12. Policy Updates

We will revise this policy when our activities or privacy practices change and update the “Last Updated” date.

Where changes require additional notice or fresh consent, we will provide it.

Scroll to Top