The short version
- We only ask for what we need to run a safe children’s home and to show donors where their gifts go.
- A gift you mark anonymous never shows your name or details to our staff, our admins or the public.
- We never sell your data, and we do not show advertising or use tracking cookies.
- You can ask to see, correct or delete your data at any time (see “Your rights”).
1. Who is responsible for your data
Mama's Hope Haven, Quezon City, Metro Manila, Philippines (“the Haven”, “we”) decides why and how your personal data is used. For questions or requests about your data, write to our Data Protection Officer at hello@mamashopehaven.org and put “Privacy” in the subject. We reply as soon as we can, and always within 30 days.
2. What we collect, and why
| When | What we collect | Why |
|---|---|---|
| You create an account | Your name and email (or only a username, for an anonymous account), a password (kept only as a one-way hash, never readable), and your Google name and email if you sign in with Google. Optional: a profile picture, phone and short bio. | To sign you in, show you your own gifts and applications, and contact you about them. |
| You give | The amount, the fund you prefer, the payment method, an optional message or name for our Wall of Gratitude, and for gifts of goods or food: what you bring, photos of it and (if you send it by Grab, Lalamove or another service) the booking or tracking number. | To receive and track your gift, tell you where it was used, and keep honest books. |
| You pay | Our payment provider, PayMongo, collects your card, e-wallet or QR payment details. We never see or store them. We keep the reference, amount, method and status of the payment. | To confirm that your gift was paid. |
| You apply to volunteer | Your dates, interests, attendance, hours served and review reasons. For a group application, we also collect the full name, selfie and ID photo of every person, including the leader. | To let staff and admins manually review each group person before approving their own attendance pass, run your visit and print each person’s volunteer certificate (every group member who attends gets their own, shown under the account holder’s profile). |
| You write to us | Your name, email and message in the contact form. | To answer you. |
| You use the website | A sign-in cookie that keeps you signed in, a small cookie that tells the site you are signed in, and your light or dark mode choice in your browser. No advertising or analytics trackers. | To make the site work. |
3. Anonymous gifts
An anonymous account has only a username and a password, no email. A gift marked anonymous never shows your name, your note, your delivery number or any link to your account to our staff, our admins, the public ledger or the reports. Only you can read your own gift. An anonymous account that nobody has used for 7 days is deleted; its gifts stay in our books, no longer linked to anyone.
4. Who can see your data
- Our staff and admins, only what their job needs: staff see this week’s gifts and messages, admins see everything. Every change they make is written to an audit log.
- The photos you attach to a gift are private. Only the staff who review gifts can open them, through a link that stops working after 10 minutes.
- Group volunteer selfies and ID photos are private. The account owner and authorized staff and admins receive links for individual review that expire after 5 minutes.
- The public sees only totals and what gifts were used for. Your name appears on the Wall of Gratitude only if you ask for it.
- Service providers that run the website for us: our payment provider (PayMongo), our hosting, database and file storage providers, our email provider, and Google if you choose Google sign-in. They may only use your data to provide that service. Some of them keep data on servers outside the Philippines.
- Authorities, only when the law requires it.
5. How long we keep it
- Gifts and spending: kept as part of our financial records, because donors and auditors need them.
- Your account and volunteer history: while your account exists. You can ask us to delete it.
- Volunteer identity photos: kept with the application records for review and coordination. You can contact us to request access, correction or deletion. An expiring viewing link does not delete the stored photo.
- Messages from the contact form: until we have answered you, then archived. You can ask us to delete yours.
- Payment details: not kept by us at all (see section 2).
6. How we protect it
- The site and the API use encrypted connections (HTTPS).
- Passwords are stored only as one-way hashes; sign-in uses short-lived tokens and a protected cookie.
- Every screen for staff and admins checks the person’s role on our server, not only in the page.
- Private photos sit in private storage, are stripped of location data, and are opened only through expiring links.
- If a personal data breach could harm you, we will tell you and the National Privacy Commission as the law requires.
7. Your rights
Under the Data Privacy Act you have the right to:
- be informed about how your data is used (this page);
- access the data we hold about you, and get a copy;
- correct data that is wrong or out of date;
- object to a use of your data, or withdraw your consent;
- ask us to block, remove or delete your data when it is no longer needed or was not lawfully collected;
- receive your data in a common portable format;
- claim compensation for damage from inaccurate, unlawfully obtained or misused data; and
- complain to the National Privacy Commission (privacy.gov.ph).
To use any of these, write to hello@mamashopehaven.org. We may need to confirm who you are before we act, so that nobody else can read or change your data.
8. Children
This website is for adults. We do not collect data from the children in our care through it, and we do not publish photos of them that identify them without the consent the law requires.
9. Changes to this policy
If we change how we use your data, we will update this page and its date. For a change that matters to you, we will ask for your agreement again.