1Who this policy covers
Barangay Monte Alegre, acting through the Office of the Punong Barangay, is the personal information controller for everything collected on this website. This policy explains how that information is handled, and it applies to you whether you only read these pages or you file a request on them.
It does not cover the other websites you can reach from our links — GOV.PH, the Municipal Government of Kananga, and any national agency page. Each of those publishes its own privacy notice, and once you leave this site you are covered by theirs.
2What we collect
Only what a barangay certificate actually requires. Nothing on this website asks for more than the request itself needs.
| Information | Where it comes from |
|---|---|
| Full name, suffix, date of birth, civil status | The request form |
| Purok, house number and street or sitio, years of residence | The request form |
| Mobile number, and email address if you give one | The request form |
| The certificate requested, the purpose you state, and how you want it released | The request form |
| The type and number of your valid government-issued ID, and the photograph or scan of it that you attach | The request form |
| Whatever you write when you reply to one of the barangay's emails about your request, and the address you send it from | Your reply |
| Residency records, blotter entries, and the validation of your purok leader or barangay health worker where a certificate calls for one | Records the barangay already keeps |
This website does not ask for your PhilSys number, your bank details, or your card details, and the barangay will never ask for them by text message or email. Anyone who does is not acting for this office.
3Why we collect it
We use what you give us for these purposes and no others:
- to receive, verify and act on your request;
- to reach you about it — this website sends you an email at each stage of your request if you gave an address, and staff may call or text the mobile number you gave if something in your record needs correcting or your document is waiting;
- to answer you — if you reply to one of those emails, your reply is kept with your request so whoever is handling it can read what you wrote and write back;
- to prepare, sign and release the certificate itself;
- to keep the record of issuance that the barangay is required to keep; and
- to count requests by type and by purok for planning and reporting. Those counts carry no names.
We process it on three of the criteria the Act allows: your consent, given when you tick the declaration on the request form; compliance with a legal obligation of the barangay; and the fulfilment of the functions of a public authority, since issuing clearances and certifications is part of the barangay's mandate.
RA 10173, Sec. 12 (a), (c) and (e) · RA 7160 (Local Government Code of 1991), Secs. 152, 389 and 3944Sensitive personal information
Some of what a certificate needs is sensitive personal information as the Act defines it — your civil status, the number on your government-issued ID, and the household circumstances behind a Certificate of Indigency. We ask for it only where the certificate itself requires it, we process it on your consent and on the laws that provide for its processing, and it is seen only by the officers who act on your request.
RA 10173, Secs. 3 (l) and 13 (a) and (b)5Cookies and browser storage
This website sets no advertising cookies, runs no analytics, and does not follow you to other websites.
It does use your own browser's storage. When you file a request, a copy of the reference number and the type of certificate is kept on the device you filed from, so the tracker on the request page can find your request without you retyping anything. Clearing your browsing data removes that copy; the request itself is transmitted to the barangay's records system, where Section 7 governs how long it is kept. One cookie exists on this site: the sign-in cookie of the staff dashboard, which is set only for barangay personnel who sign in and is never set by the public pages.
Two things on these pages are served by others: the typefaces come from Google Fonts and the scrolling script from the jsDelivr network. Both receive your IP address as part of delivering the file, in the same way any website you visit does.
If the barangay has turned on the CAPTCHA check on the request form, Google's reCAPTCHA also sets a cookie on that page, to tell an automated submission apart from a resident's. It runs only on the request form and only while you're filling it out — it is not present anywhere else on the site.
6Who we share it with
We do not sell your personal information and we do not release it for any commercial or political purpose. It is disclosed only:
- to the barangay officials and staff who act on your request — the secretary who verifies it, the treasurer who receives the fee, and the punong barangay who signs it;
- to your purok leader or barangay health worker, where residency or indigency has to be validated;
- to offices of the Municipal Government of Kananga, where the certificate forms part of a city transaction you yourself asked for;
- to a court, the Philippine National Police, or another government body, when a subpoena, court order, or law requires it; and
- to the National Privacy Commission, in connection with a complaint or a breach notification.
Running an online service also means entrusting parts of it to service providers. They act only on the barangay's instructions, under contract, and for no purpose of their own:
| Provider | What it handles |
|---|---|
| Vercel Inc. | Hosts this website and runs the software that receives your request |
| Neon Inc. | Holds the request records in an encrypted database |
| Google LLC | Carries the barangay's email, in both directions. If you give an email address, your name, reference number, and the stage your request has reached pass through the barangay's mailbox on their service — no other detail of your request does, and the ID photograph never does. Anything you write back sits in that mailbox too, and a copy is kept with your request so the hall can answer it. Where the barangay has turned it on, Google also runs the CAPTCHA check on this form (reCAPTCHA), which sees your browser and IP address but nothing you typed, and the sign-in on the staff dashboard, which sees a barangay employee's own Google account — never a resident's |
| Cloudinary Ltd. | Stores the photograph of your ID. It is held as a private file with no public address; it can only be opened through a temporary link that the barangay's system issues to a signed-in staff member, and that link stops working after fifteen minutes. It also holds the two seals printed at the top of the barangay's letters — and because those are fetched when you open a letter, Cloudinary can see that a letter was opened and the internet address it was opened from. Nothing about your request travels with that request. If you would rather it did not happen, turn off automatic image loading in your mail program; the letter still reads without them |
These providers operate servers outside the Philippines, so acting on your request involves a transfer of your data abroad. The barangay remains accountable for it under Section 21 of the Act, and requires each provider to give it protection comparable to what this policy promises.
RA 10173, Secs. 14 and 217How long we keep it
Requests and the documents filed with them form part of the barangay's records, and the periods below are enforced by the site itself — a scheduled job runs every night and disposes of what has fallen due. Nothing here waits for someone to remember.
- The photograph of your ID: thirty (30) days after your request is released or declined. It is only there so the hall can confirm the request is yours, and that purpose ends when you collect the document. It is deleted from storage entirely, not merely detached from your record.
- The request itself: five (5) years from the day it was released or declined, after which the record and everything filed with it is deleted. The emails we sent you about it, and any reply you sent back, are kept with the request and go when it goes.
- A request that is still open is never disposed of automatically, however old it is. Records still needed for an ongoing case, audit, or investigation are kept until that matter is closed.
Five years is the period the barangay currently applies. The sangguniang barangay may adopt a different one under a records disposition schedule approved by the National Archives of the Philippines, and this notice is amended when it does. You may also ask us to erase your record sooner — see section 9.
RA 10173, Sec. 11(e) · RA 9470 (National Archives of the Philippines Act of 2007)8How we protect it
The Act requires reasonable and appropriate organizational, physical and technical measures. Ours are these:
- Organizational. Only officials and staff whose work requires it may see a request. Everyone handling personal data is briefed on this policy and on the Act, and is bound to confidentiality even after leaving office.
- Physical. Paper files and printed attachments are kept in locked cabinets at the barangay hall, and the office is closed and secured outside working hours.
- Technical. The website is served over an encrypted connection (HTTPS), and so is the upload of your ID photograph, which travels straight from your phone to the storage provider without passing through any other server. That photograph is stored as a private file: it has no public address, and it opens only through a link that expires. Access to the request records is limited to staff who sign in, and devices used for barangay work are password-protected.
No safeguard is absolute, and we do not claim otherwise. What we do undertake is to act on any incident promptly and to tell you when the law says you must be told.
RA 10173, Secs. 20 and 219Your rights
As a data subject under the Act, you have the right:
- To be informed that your personal data is being or has been collected and processed, and why.
- To object to the processing, including processing for a purpose you were not told about.
- To access the personal data we hold about you, and to be told where we got it, who we gave it to, and how it was used.
- To rectification — to have anything inaccurate or incomplete corrected, and to have the correction passed on to anyone we already gave the data to.
- To erasure or blocking of data that is incomplete, outdated, false, unlawfully obtained, or no longer necessary.
- To damages for any inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of your personal data.
- To data portability — to obtain a copy of the data you gave us, in an electronic format that is structured and commonly used.
- To lodge a complaint with the National Privacy Commission.
These rights are transmissible to your lawful heirs and assigns. They are also not absolute: where a record must be kept because a law, an audit, or a pending case requires it, we will tell you why we cannot erase it and what we can do instead.
RA 10173, Secs. 16, 17 and 1810How to exercise them
Write to the barangay's Data Protection Officer, or come to the hall during office hours and ask for them by name. Bring or attach a valid ID so we can be sure we are answering the right person.
Data Protection Officer
[Name of the designated Data Protection Officer]
Barangay Hall, Barangay Monte Alegre, Municipality of Kananga, Leyte 6541
barangay.montealegre@kananga-leyte.gov.ph
[DPO telephone number]
We answer within fifteen (15) calendar days of receiving a request. If the records have to be retrieved from the archive and that will take longer, we will tell you so, and tell you how much longer, within the same fifteen days.
11Requests filed for another person
If you file on behalf of someone else, you must have their written authority, and you must bring a copy of their valid ID along with your own. By filing, you confirm that you have told them what this policy says.
A request for a person below eighteen (18) years of age is filed by a parent or guardian, who gives consent on their behalf.
12Personal data breaches
If a breach occurs that is likely to give rise to a real risk of serious harm, we will notify the National Privacy Commission and every affected data subject within seventy-two (72) hours of knowing about it, and we will say plainly what happened, what data was involved, and what you should do.
RA 10173, Sec. 20 (f) · NPC Circular No. 16-0313Where to complain
Bring it to our Data Protection Officer first — most matters are settled fastest at the hall. If you are not satisfied with how we handled it, you may complain to the National Privacy Commission.
National Privacy Commission
5th Floor, Delegation Building, PICC Complex,
Vicente Sotto Street, Pasay City, Metro Manila 1307
complaints@privacy.gov.ph ·
info@privacy.gov.ph
www.privacy.gov.ph
14Changes to this policy
When this policy changes, the new version is posted here with a new effective date. If the change affects how we use information we already hold, it is also posted on the bulletin board at the barangay hall and announced in the bulletin on this website.
Effective 12 August 2026 · Barangay Monte Alegre, Municipality of Kananga · Questions: barangay.montealegre@kananga-leyte.gov.ph