Privacy Policy
How we collect, use, and protect your personal data in compliance with the Philippine Data Privacy Act.
Last updated: June 4, 2026
Contents
1. Overview
HOACentralPH ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform at hoacentralph.com (the "Service"). By using the Service, you agree to the terms described in this policy.
This policy is designed to comply with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.
2. Information We Collect
We collect several types of information to provide and improve our Service:
2.1 Personal Identification Information
- Full name, email address, and contact number
- Home address and property details within your homeowners association
- Government-issued ID details (when required for DHSUD compliance)
- Profile photograph (optional)
2.2 Association Data
- Association name, address, and registration details
- Board member and officer information
- Resident directory and household composition data
- Association bylaws, financial reports, and meeting minutes
2.3 Financial Information
- Association dues payment history and records
- Payment method details (processed securely through third-party gateways)
- Billing and invoicing data
2.4 Technical Data
- IP address, browser type, and device information
- Usage patterns, feature interactions, and log data
- Cookies and similar tracking technologies (see Section 7)
3. How We Use Your Data
We use the collected information for the following purposes:
- Service Delivery: To provide, maintain, and improve our HOA management platform.
- Communication: To send announcements, dues reminders, community notices, and respond to inquiries.
- Billing & Payments: To process association dues, generate invoices, and manage subscriptions.
- Compliance: To meet DHSUD reporting requirements and maintain legally required records.
- Security: To detect and prevent fraud, abuse, and unauthorized access.
- Analytics: To understand platform usage patterns and improve user experience.
- Legal Obligations: To respond to lawful requests from government authorities.
4. Data Sharing & Disclosure
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your data only in the following circumstances:
- With Your HOA: Association board members and authorized officers have access to resident data necessary for HOA operations, as permitted by your HOA's own data privacy policies.
- Service Providers: Trusted third-party vendors who assist us in operating the platform (cloud hosting, payment processing, email delivery, SMS notifications) — bound by strict data processing agreements.
- Legal Compliance: When required by Philippine law, court order, or government regulation, including DHSUD and the National Privacy Commission.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction with appropriate safeguards.
5. Data Ownership & Your Role
Under the Data Privacy Act framework, the roles are defined as follows:
- Your HOA is the Data Controller: The homeowners association determines the purposes and means of processing resident personal data. Your HOA is primarily responsible for ensuring lawful collection and use of your information.
- HOACentralPH is the Data Processor: We process data strictly on behalf of and under the instructions of your HOA. We implement technical and organizational measures to protect your data from unauthorized access, alteration, or disclosure.
For questions about how your specific HOA handles your data, please contact your association's Board of Directors or designated Data Protection Officer.
6. Your Rights Under the Data Privacy Act
Under RA 10173, you have the following rights regarding your personal data:
- Right to be Informed: You have the right to know when and how your personal data is being collected and processed.
- Right to Access: You may request a copy of your personal data that we hold, subject to reasonable fees and identification requirements.
- Right to Rectification: You may request correction of inaccurate or outdated personal data.
- Right to Erasure or Blocking: You may request deletion or suspension of processing of your personal data under certain conditions.
- Right to Object: You may object to the processing of your personal data, including for direct marketing purposes.
- Right to Data Portability: You may request your data in a structured, commonly used electronic format.
- Right to Damages: You may seek compensation for damages sustained due to inaccurate, incomplete, or unlawfully processed personal data.
To exercise any of these rights, please contact us at admin@hoacentralph.com. We will respond within the timeframe required by law.
8. Data Security
We implement industry-standard security measures to protect your personal data, including:
- Encryption: All data transmitted between your browser and our servers is encrypted using TLS 1.3.
- Access Controls: Role-based access ensures that only authorized personnel can view sensitive data.
- Data Minimization: We collect only the data necessary to provide the Service.
- Regular Audits: We conduct periodic security assessments and vulnerability testing.
- Incident Response: In the event of a data breach, we will notify affected users and the National Privacy Commission within 72 hours, as required by law.
- Infrastructure Security: Our platform is hosted on infrastructure with SOC 2 and ISO 27001 certifications.
9. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Active Accounts: Data is retained while your account is active and your HOA maintains its subscription.
- Inactive Accounts: After account termination, data is retained for a period consistent with legal obligations (typically 5 years for financial records under Philippine law).
- Legal Holds: Data may be retained longer if subject to a legal hold, litigation, or regulatory investigation.
When data is no longer needed, we securely delete or anonymize it in accordance with industry best practices.
10. Third-Party Services
Our Service integrates with third-party services to provide certain functionalities. These may include:
- Payment gateways (GCash, Maya, bank transfers)
- Email delivery services
- SMS notification providers
- Cloud hosting and storage
- Analytics and monitoring tools
- Customer support chat (Messenger)
Each third-party service has its own privacy policy. We encourage you to review those policies. We are not responsible for the privacy practices of these third parties, though we select providers who maintain adequate data protection standards.
11. Children's Privacy
Our Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data without parental consent, please contact us immediately and we will take steps to delete such information.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Service features. Material changes will be communicated via:
- Email notification to account holders
- A prominent notice on our platform
- Updated "Last Updated" date at the top of this page
Your continued use of the Service after any changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
HOACentralPH Data Protection Office
You may also file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.