Draft for review. This policy is a starting template prepared for AFF-MPC and has not yet been reviewed by a lawyer or filed with the National Privacy Commission (NPC). Please have it reviewed before relying on it, and complete the bracketed placeholders below with confirmed details.
Last updated: [Insert date] · Effective date: [Insert date]
1. Who we are
Abadaya Fisherfolks and Farmers Multipurpose Cooperative (AFF-MPC), formerly registered as Darapidap Abadaya Fisherfolks Savings and Credit Cooperative (DAFSCC), is a cooperative registered with the Cooperative Development Authority (CDA) under Registration No. 9520-10-10000000035971, with TIN 493-801-291-000, located at Brgy. Darapidap, Candon City, Ilocos Sur, Philippines. In this policy, "AFF-MPC," "we," "us," and "the Cooperative" refer to AFF-MPC; "you" refers to any visitor, applicant, or member using this website ("CoopTrack") or our services.
This policy is written to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
2. Information we collect
Depending on how you interact with us — as a website visitor, membership applicant, member, or borrower — we may collect:
- Identity information: full name, sex, civil status, nationality, birthdate, Tax Identification Number (TIN), and a valid government-issued ID.
- Contact information: address, mobile number, and email address.
- Family and beneficiary information: names of parents, spouse, children, emergency contact, and designated beneficiaries.
- Financial and membership information: savings balance and transaction history, share capital contributions, loan applications, loan terms, comaker and collateral details, payment history, and credit investigation results.
- Sensitive personal information (as defined under the Data Privacy Act), such as civil status and information appearing on your government ID.
- Documents you upload: government ID images, signatures, and collateral or supporting documents.
- Account information: your login email and password (stored as a secure hash, not in plain text).
We collect this information directly from you — through our registration, loan application, and profile forms — and, where relevant, from credit bureaus, the CDA, and other government authorities for verification purposes.
3. How we use your information
- To process your membership application, including credit investigation and orientation seminar tracking;
- To open, maintain, and service your savings, share capital, and loan accounts;
- To evaluate and process loan applications, including verifying comakers and collateral;
- To communicate with you about your account, transactions, and cooperative announcements;
- To comply with our legal, regulatory, and reporting obligations to the CDA, the Bureau of Internal Revenue (BIR), and other government authorities; and
- To maintain internal records, audit trails, and activity logs for security and accountability.
4. Who we share information with
We do not sell your personal information. We may share it, only as needed for the purposes above, with:
- Authorized AFF-MPC staff and officers (administrators, credit investigators, and collectors) whose roles require access to specific information to do their jobs;
- The Cooperative Development Authority (CDA), the Bureau of Internal Revenue (BIR), and other government agencies, where required by law;
- Credit bureaus and financial institutions, for credit investigation and risk assessment purposes; and
- Service providers who help us operate the Cooperative's systems, bound by confidentiality obligations.
5. How we store and protect your information
We apply reasonable organizational, physical, and technical safeguards appropriate to the sensitivity of the information we hold, including restricting access by staff role (member, admin, credit investigator, collector) and keeping a log of significant account actions.
Note for AFF-MPC management: the current version of this website is a frontend prototype that stores data locally in the browser rather than on a secured server or database. This section must be rewritten to accurately describe the real production storage, hosting, and security setup (server location, encryption, access controls, backups) once the system goes live — do not publish this policy as-is if the description no longer matches reality.
6. How long we keep your information
We keep your personal information for as long as you remain a member, and afterward for the period required by applicable cooperative, tax, and audit regulations, after which it is disposed of securely. You may request earlier deletion or blocking of your information as described in Section 7, subject to our legal retention obligations.
7. Your rights under the Data Privacy Act
As a data subject, you have the right to:
- Be informed that your personal information will be, is being, or was processed;
- Access your personal information that we hold;
- Correct inaccurate or outdated information;
- Object to certain processing of your information;
- Erasure or blocking of your information under certain conditions;
- Data portability, where technically feasible; and
- File a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated.
To exercise any of these rights, contact us using the details in Section 12.
8. Photos and cooperative events
AFF-MPC may take photos or videos at cooperative activities, seminars, and events (such as general assemblies, feeding programs, and trainings) and use them on this website or in cooperative publications for informational and promotional purposes. If you would prefer that your image not be used, please notify the cooperative office in writing.
Note for AFF-MPC management: photos already published on this website (event photos, and named board member photos on the Board page) should have each person's confirmation on file that they consent to their name and likeness being published. This general policy clause does not retroactively confirm that consent for images already on the site — please verify separately.
9. Cookies and similar technology
Please see our Cookie Policy for details on the cookies and local storage this website uses.
10. Children's privacy
Cooperative membership is limited to individuals who are at least 18 years old. We do not knowingly collect personal information from children through this website.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated "Last updated" date. Continued use of our services after changes take effect constitutes acceptance of the revised policy.
If you have questions about this policy or wish to exercise your data privacy rights, please contact:
Abadaya Fisherfolks and Farmers Multipurpose Cooperative (AFF-MPC)
Brgy. Darapidap, Candon City, Ilocos Sur, Philippines
Email: info@abadayacoop.com
Phone: [Confirm official contact number]
Office Hours: Monday–Friday, 7:30 AM–5:00 PM (this website is available 24/7)
Data Protection Officer: [Insert name/designation once appointed]