Placeholder legal text. This document is a template for the Abuloy Direct MVP and MUST be reviewed and finalized by qualified Philippine legal counsel and payments-compliance professionals (Data Privacy Act of 2012 / NPC, BSP regulations, DTI/SEC as applicable) before any production launch.

Privacy Policy

Abuloy Direct collects only the personal data needed to run memorial fundraising campaigns: organizer contact details, beneficiary and funeral home verification details, and optional donor details (display name, email for receipts, mobile for notifications).

What we never collect

We never ask for, store, or process GCash MPINs, OTPs, wallet passwords, or any payment credentials. Payment authentication happens exclusively on the official payment provider's pages.

How data is protected

Payout account numbers are stored encrypted and displayed only in masked form (e.g. “GCash ending in 1234”). Verification documents are stored privately and are accessible only to the organizer and authorized reviewers through short-lived signed links. Log output redacts emails, phone numbers, and identifiers.

Sharing

Donor emails and mobile numbers are never shown publicly and are never sold. Public pages show only the donor's chosen display name (or “Anonymous”) and their optional message.

Your rights

Subject to the Philippine Data Privacy Act of 2012, you may request access, correction, or deletion of your personal data. City Chapels Inc. decides how your data is used and is your point of contact for these requests. [PRODUCTION TODO: publish the registered contact channel for data privacy requests, and — where the operator and the funeral home are separate companies — put the required written outsourcing agreement in place.]