1. About this notice
This notice covers the Barangay COTS website at barangaycots.com. The system supports account access, identity verification, business applications, renewals, and review by participating barangay personnel. Privacy inquiries and requests can be directed to the Barangay COTS support team at barangaycots@gmail.com. Requests involving official business permit records may also need to be coordinated with the barangay office responsible for those records.
2. Information collected
- Account information: your name, email address or mobile number, sign-in provider, account identifiers, assigned role, and barangay association. Password-based accounts use a stored password hash.
- Social sign-in information: when you choose Facebook Login, we request your Facebook account identifier, name, and email address when provided. When you choose Google sign-in, we use the corresponding account identifier, name, and email information. These details create or link your Barangay COTS account. We do not ask for your Facebook or Google password, private messages, friends list, or posts.
- Identity verification: your selected ID type, the ID image and face photo you submit, and the result and time of the live-face check. An ID photo can contain identification numbers and other personal details printed on the document. The camera flow uses ID-text checks and a blink check; it does not establish that a document has been authenticated by its issuing government agency.
- Business and application information: business and owner names, address, contact number, business type, registration and ownership details, schedule, financial information you enter, barangay, zone, location coordinates you pin, and uploaded business photos.
- Processing records: application and payment statuses, review remarks, renewals and their history, requests for corrections, notifications, and visit reports and supporting photos where applicable. Staff profile photos may also be uploaded.
- Technical information: session cookies, verification challenges, sign-in attempt information, and technical logs generated when providing or troubleshooting the service.
3. How information is used
Information is used to create and authenticate accounts, check submitted identity information, process and review business registrations, route applications to the selected barangay and zone, manage renewals and visit reports, and respond to support and correction requests.
Contact details are used for account verification, password recovery, application notices, renewal reminders, and replies to your requests. Location pins and business photos support the business-location and review features. Session and sign-in records support account access and protection against unauthorized activity.
The registration form asks for consent to collect, use, and store submitted information. You may contact us about withdrawing consent; this may affect features that require that information and does not automatically remove records that must be retained for an applicable lawful purpose.
5. Cookies, browser storage, and camera access
Session cookies keep track of your signed-in session. Browser storage is also used for selected business details, registration-form prefill, barangay preferences, and interface settings. Signing out is different from requesting deletion of your account or submitted records.
The verification page requests camera permission to capture your ID and live face. The captured images are submitted to the server when you select Save and Continue. Retaking a face image replaces that capture before submission. You can manage camera permissions and clear stored website data in your browser settings.
6. Retention and protection
Data is kept for account services, application processing, necessary recordkeeping, security, and applicable legal or administrative requirements. Retention depends on the type of record and the requirements of the responsible barangay office. Contact us to ask which retention requirements apply to your records.
The system uses measures including password hashing, session checks, role and ownership checks in its workflows, and HTTPS on the live website. These measures do not eliminate every risk. Database backups may contain copies of account and application information; deletion requests should address relevant retained and backup copies as well as active records.
7. Access, correction, and deletion requests
You may contact us to request access to or correction of your personal information, ask about its use and retention, or request deletion, blocking, or withdrawal of consent as applicable. Some changes can be made through your profile or application features; approved application changes follow the DPO request process.
For deletion requests, follow the Data Deletion Instructions. The team will need to verify that the request relates to your account and explain any records that cannot be deleted and the reason they must be retained. Removing Facebook access alone does not delete information already held by Barangay COTS.
Information about data-subject rights is available from the Philippine National Privacy Commission, including its guidance on the right to erasure or blocking.
8. Updates and contact
Changes to this notice will be posted on this page with an updated date. For questions about this notice, the responsible office for your records, or a privacy request, email barangaycots@gmail.com.