1. Introduction
The Philippine Red Cross is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Blood Donation Drive Management System.
2. Information We Collect
2.1 Organization Information
We collect the following information about your organization:
- Organization name and type
- Contact details (address, phone, email)
- Contact person information
- Number of employees/members
- Blood donation drive history
2.2 Account Information
For system access, we collect:
- Account email address
- Encrypted password
- Communication preferences
2.3 Donor Information (if applicable)
During blood drives, we may collect:
- Donor personal information
- Health screening data
- Donation history
- Contact details
3. How We Use Your Information
| Purpose | Information Used | Legal Basis |
|---|---|---|
| Blood Drive Management | Organization details, contact information | Contractual necessity |
| Communication | Email, phone number | Legitimate interest |
| System Security | Account credentials, access logs | Legal obligation |
| Analytics & Improvement | Usage data, drive statistics | Legitimate interest |
4. Data Sharing and Disclosure
We do not sell or rent your personal information. We may share information with:
- Medical Personnel: For blood collection and screening purposes
- Government Agencies: As required by law or regulation
- Service Providers: Who assist in system operation (under strict confidentiality)
- Emergency Situations: When necessary to protect vital interests
5. Data Security
We implement appropriate security measures including:
- Encryption of sensitive data
- Secure access controls
- Regular security assessments
- Staff training on data protection
- Physical security measures
6. Data Retention
We retain your information only as long as necessary:
- Organization Data: 5 years after last activity
- Donor Records: As required by medical regulations
- Account Information: Until account deletion request
- System Logs: 2 years for security purposes
7. Your Rights
Under the Data Privacy Act of 2012, you have the right to:
- Access your personal information
- Correct inaccurate data
- Request data deletion
- Object to data processing
- Data portability
- Withdraw consent
8. Cookies and Tracking
Our system uses essential cookies for functionality and security. We do not use tracking cookies for advertising purposes.
9. Changes to This Policy
We may update this Privacy Policy periodically. Significant changes will be communicated through the System or via email.
10. Contact Information
For privacy-related concerns or to exercise your rights, contact our Data Protection Officer:
- Email: privacy@redcross.org.ph
- Phone: (02) 8790-2300
- Address: Philippine Red Cross National Headquarters, Manila
Data Protection Commitment
The Philippine Red Cross is committed to complying with the Data Privacy Act of 2012 and implementing appropriate technical and organizational measures to protect your personal data.