Legal
Privacy Policy
1. Who we are
AC 1996 is the alumni batch organization of Assumption College San Lorenzo Class of 1996. This website (ac1996.com) is operated to organize our Pearl Anniversary fundraising, the Velada homecoming in October 2026, and our continued support of the Assumption Mission Schools.
For the purposes of the Philippines Data Privacy Act of 2012 (Republic Act No. 10173), AC 1996 is the Data Controller for personal data collected through this site.
2. What personal data we collect
We only collect what you give us directly.
| Data | Why we collect it | Legal basis |
|---|---|---|
| Name | To address you in receipts and (with your consent) credit your pledge or bid publicly | Consent |
| Email address | To send receipts, sign-in links, and outbid notifications | Consent · legitimate interest |
| Pledge or bid amount | To process your contribution and rank auction bids | Consent · contract performance |
| Payment screenshot (if uploaded) | To reconcile your payment against your pledge | Consent |
| Dedication note (optional) | To honor your intent in the public tally, if you allow it | Consent |
We do not collect your phone number, location, or government ID. We never see your payment card or bank credentials — payments happen on GCash or your bank's own channels, not on this site.
3. Cookies and local storage
This site does not use tracking cookies, advertising pixels, or analytics. We use your browser's local storage for two purposes:
- To keep you signed in after you click your magic-link, so you don't have to authenticate on every page
- To remember your in-progress pledge or bid link so we can return you to the right page after sign-in
This data stays on your device. It is never transmitted to us as a tracking signal. You can clear it at any time from your browser settings.
4. How we use your data
We use the data above only to:
- Process your pledge or bid and send you the corresponding receipt
- Send you sign-in links when you request them
- Notify you if you've been outbid in the auction
- Reconcile your payment screenshot against your pledge
- Display anonymized totals (e.g. "We've raised ₱X") on the site
We will not use your data to send unrelated marketing, and we will not sell or rent your information to anyone.
5. Who we share data with
We use third-party infrastructure providers to operate this site. These providers process your data only on our instructions and are bound by their own privacy commitments:
- A managed Postgres database provider — stores your pledge, bid, and account records
- A transactional email provider — delivers your receipts, sign-in links, and notifications
- A web hosting provider — serves the website and runs its serverless functions
- A content-delivery and DNS provider — routes traffic to the site and caches static files
We do not share your data with advertisers, data brokers, or social platforms.
6. How we protect your data
The site is served exclusively over HTTPS. Sign-in uses magic links rather than passwords, so there is no password file for us to lose. Payment data — card numbers, bank credentials — is never collected by this site; you transact directly with GCash or your bank. Access to the database is limited to designated batch organizers acting in an admin capacity.
7. How long we keep your data
We retain personal data for the active duration of the Pearl Anniversary project (October 2026 through October 2027). After the year concludes, we keep transactional records for one additional year to satisfy any tax or audit obligations, then delete them. You can request earlier deletion at any time using the form below.
8. Your rights under RA 10173
Under the Data Privacy Act of 2012, you have the following rights:
- Right to be informed — know what personal data we collect, how we use it, and with whom we share it.
- Right to access — request a copy of the personal data we hold about you.
- Right to correction — ask us to correct inaccurate or incomplete data.
- Right to erasure or blocking — ask us to delete your personal data from our records.
- Right to object — object to the processing of your personal data.
- Right to data portability — receive your data in a structured, commonly used format.
- Right to damages — seek compensation if your rights under RA 10173 have been violated.
9. Submit a data request
To exercise any of the rights above, fill in the form below. We will respond within 15 business days.
10. How to file a complaint with the NPC
If you believe your data privacy rights have been violated, you may file a complaint with the National Privacy Commission (NPC):
- Website: privacy.gov.ph
- Email: complaints@privacy.gov.ph
- Address: 5th Floor, Delegation Building, PICC Complex, Pasay City
11. Changes to this policy
We may update this policy as the project develops. Material changes will be noted with a new effective date at the top of this page.