PART I — PRIVACY POLICY

We take your privacy seriously. This section explains how we collect, use, and protect your data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines.

1. What Information We Collect

To verify that you are a legitimate student and to operate the OtterMart platform, we collect the following personal information:

• Personal Email Address: (e.g., your personal Gmail account) used for account creation and login.
• Student Information: Your Student Number, Course/Degree Program, and Batch/Year Level.
• Verification Documents: Uploaded photos of your official Student ID card and verification selfies to confirm student status. These files are stored in restricted-access private storage buckets.
• Profile Information: Your chosen username, profile picture (if applicable), and any other information you voluntarily provide on your profile.
• Usage Data: Information about how you interact with OtterMart (e.g., posts, comments, activity logs).
• Cookies & Local Storage: We use session cookies and local storage tokens to manage your authentication state securely, keep you logged in across different pages, and ensure core platform functionality without requiring repeated logins.

2. Purpose of Data Collection

We DO NOT sell your data. We use your personal information strictly for the following purposes:

• Verification: To verify your identity as a legitimate student of the Pamantasan ng Lungsod ng Maynila (PLM) to maintain a safe and exclusive community.
• Account Management: To create, manage, and secure your OtterMart account.
• Communication: To send you important administrative announcements and updates about the platform.
• Improvement: To analyze how the platform is used and improve our services.
• Third-Party Processing: While we do not sell your data, your information may be processed by trusted third-party service providers (such as secure cloud hosting environments or database managers) strictly for platform operations, server maintenance, and infrastructure reliability.

3. Data Security

Protecting your active data is a priority. We utilize standard encryption protocols for data transmission, secure server environments, and restricted backend access to prevent unauthorized viewing, alteration, or disclosure of your personal and student information.

4. Data Retention: How Long We Keep Your Data

Transparency is important to us. Your data will only be kept for as long as necessary:

• Active Accounts: Your data is retained as long as your account is active.
• Graduation / Departure: Upon verification of your graduation or departure from the university, or if your account remains inactive for a period of two (2) years, your account may be deactivated, and your personal data will be securely anonymized or deleted.
• Account Deletion: You may request the deletion of your account at any time. Upon request, your personal data will be permanently deleted from our active databases within thirty (30) days, except for data we are legally required to retain.

5. Your Rights as a Data Subject & Contact Information

Under the Data Privacy Act of 2012, you have the right to:

• Be informed about how your data is used.
• Access the personal data we hold about you.
• Correct or update any inaccurate data.
• Request the erasure or blocking of your personal data.

To exercise any of these rights, request account deletion, or address privacy concerns, please contact our designated representative at otterdigitals@gmail.com.