Privacy Policy

1. Data We Collect

• Identity: full name, email address, phone number
• Government identifiers: Tax Identification Number (TIN), used for one-account-per-person enforcement and tax withholding
• Payment information: transaction records and payout details processed through accredited payment providers
• Activity logs: orders, referrals, commissions, course progress, and event registrations

2. How We Use Your Data

We process your personal data to:

• Create and manage your membership account
• Process payments, commissions, and payouts (including withholding tax compliance)
• Manage event registration and attendance
• Communicate updates, announcements, and service information

3. Legal Basis

We process personal data on the basis of your consent (Section 12, Article 12, RA 10173), the performance of our membership contract with you, and our legitimate interest in operating a secure and lawful platform. You may withdraw consent at any time, subject to legal and contractual retention obligations.

4. Data Sharing

We share personal data only as necessary with: accredited payment processors (including PaySwitch) to complete transactions; and government agencies as required by law (including the Bureau of Internal Revenue for creditable withholding tax / EWT reporting).

We do not sell your personal data to any third party.

5. Data Retention

Membership and transaction records are retained for the lifetime of your account plus five (5) years, in line with Philippine tax record-keeping requirements. After this period, data is securely deleted or anonymized.

6. Your Rights

Under RA 10173, you have the right to access, rectify, erase, and obtain a portable copy of your personal data. To exercise these rights, contact privacy@salam.ph. You may also lodge a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated.

7. Security

We protect your data using industry-standard measures, including encryption at rest, bcrypt password hashing, and HMAC signature verification for webhook integrations. Access to personal data is restricted to authorized personnel.

8. Cookies

We use strictly necessary session cookies only (HttpOnly, SameSite=Strict, Secure in production) to keep you signed in. We do not use third-party tracking or advertising cookies.

9. Contact

Data Protection concerns: privacy@salam.ph. You may also reach the National Privacy Commission at www.privacy.gov.ph.