Privacy Notice

Who we are

Benguet State University Community Multi-Purpose Cooperative (BSUCMPC), La Trinidad, Benguet, is the personal information controller for the information described here.

What we collect

When you register for, and use, the member portal we collect:

• Your name, member / Client ID number, email address and mobile or landline number.
• Your username and a one-way scrambled (hashed) version of your password. We cannot read your password.
• Photos of payment receipts you upload, together with the loan or account number, amount and date you enter.
• Security records: sign-in attempts, the device type and network address they came from, and actions staff take on your account.

Why we collect it

• To confirm you are a member and to approve and run your portal account.
• To record and verify the loan payments you report.
• To contact you about your account, your payments and security.
• To protect members' accounts and the cooperative from fraud and misuse.

Who can see it

Authorised BSUCMPC staff can see your account details and the receipts you upload, as their work requires. Staff actions on your account are logged.

We use service providers to run the portal: cloud hosting and file storage (Vercel), a database provider (Neon), and an email service to send you messages. They process information only to provide those services to us. We do not sell your personal information.

How long we keep it

We keep your information for as long as you are a member and for as long afterwards as cooperative record-keeping and the law require. Receipt photos are stored privately and are visible only to you and authorised staff.

How we protect it

• Passwords are stored hashed; two-step sign-in is available.
• Sessions end automatically after a period of inactivity.
• Receipt photos are kept in private storage, and location data embedded in photos is removed on upload.
• Access to staff tools is limited by role and recorded.

Your rights

Under the Data Privacy Act you have the right to be informed about, and to access, the personal information we hold about you; to ask us to correct it; to object to its processing; to ask us to suspend, remove or block it in the cases the law provides; to receive a copy in a commonly used format; and to be indemnified for damages caused by inaccurate, incomplete, outdated, false or unlawfully obtained information.

To use any of these rights, contact us using the details below. You may also complain to the National Privacy Commission (privacy.gov.ph).