Data Privacy Act Notice (Philippines)

This Notice describes how BarangAI processes personal information in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC). It supplements our general Privacy Policy.

1. Our role

For personal information processed through the BarangAI website and inquiries, BaioVet Tech Corp (through its Philippine operations at Bonifacio Global City) acts as personal information controller. Individual applications may define their own controllers and processors.

2. Lawful basis for processing

We process personal information based on your consent, the performance of a contract or service you request, our legitimate interests (balanced against your rights), and compliance with legal obligations, consistent with Sections 12 and 13 of the Act.

3. Your rights as a data subject

Under the Act you have the right to be informed, to object, to access, to rectification, to erasure or blocking, to damages, to data portability, and to lodge a complaint with the NPC. To exercise these rights, contact our Data Protection Officer below.

4. Data sharing and transfers

Where personal information is shared with service providers or transferred outside the Philippines, we require contractual safeguards consistent with the Act and NPC guidance, and we remain accountable for its protection.

5. Security measures

We implement organizational, physical, and technical security measures aligned with the Act and the NIST Cybersecurity Framework, including access controls, encryption where applicable, and breach-response procedures. In the event of a personal data breach that meets notification thresholds, we will notify the NPC and affected data subjects as required.

6. Data Protection Officer

Contact our DPO at contask@barangai.ai or at our BGC address below. You may also contact the National Privacy Commission at privacy.gov.ph.