Privacy Policy
Draft for legal review, October 7, 2026. Not yet in force.
Effective [date]. Issued under the Data Privacy Act of 2012 (RA 10173).
1. Controller. VHC Website Hosting Services, operating MyCalendar.ph, is the personal information controller. Our Data Protection Officer can be reached at hello@mycalendar.ph (attention: Data Protection Officer).
2. What we collect.
| Data | When | Why |
|---|---|---|
| Name, email address, mobile number, password (stored only as a hash) | Sign-up | To run your account and your bookings |
| Name, email address and mobile number of a guest | Guest checkout | To confirm who is booking, send booking emails, and let the professional reach you about the booking |
| One-time email codes (stored only as a keyed hash) | When you sign up, log in by code or book as a guest | To confirm you control the email address |
| Your agreement to our terms, with its version, time and IP address | Sign-up, guest checkout, going live | To show what you agreed to |
| Bookings: professional, time, amounts, discount, queue number, status, PayMongo references | When you book and pay | To deliver bookings, keep records, and handle cancellations and refunds |
| Bank or e-wallet account for a refund | If you are owed a refund and give it | To send you the refund |
| TIN and address for receipts | Only if you add them | To show them on your service-fee receipts |
| Return-consult recommendations, and your choice to stop them | When a professional recommends one, or you stop them | To send, or stop sending, those reminders |
| Professionals: display name, username, photo, profession, city, description | When you set up a calendar page | Your public page, and search (see section 5) |
| Professionals: Roll of Attorneys and MCLE numbers | If you declare them | The lawyer service-fee rate; moderators can view them |
| Professionals: meeting link, office address, arrival instructions | When you set them | Sent to your clients before each booking |
| Professionals: payout account, TIN, payouts | Before your page goes live | To pay you and keep tax records |
| Sign-in session and security data | When you use the site | Signing in, security, and limiting repeated attempts |
| Records of moderator actions | When our team acts on an account, page, booking, refund or payout | Accountability |
We do not receive card numbers or e-wallet credentials; PayMongo processes payments under its own privacy policy.
3. Legal bases. Performance of our contract with you (accounts, bookings, payments, refunds, payouts); legal obligations (tax records, lawful orders); and legitimate interests (security, preventing fraud and abuse, reporting a suspected illegal act committed on or through the site to the proper authorities, and return-consult reminders, which you can stop at any time), balanced against your rights.
4. Who sees your data.
- The professional you book sees your name, email address and mobile number, your booking, what you paid, and for an arrival window your queue number, so they can deliver the service and reach you about it. The professional is responsible for using your details only for that.
- Clients who book a professional receive the professional's meeting link, or office address and arrival instructions.
- Service providers needed to run the site, bound to protect your data: PayMongo (payments), DigitalOcean (servers, file storage and backups, in Singapore) and Brevo (email).
- Authorities, when the law requires it, or when we report a suspected illegal act committed on or through the site, limited to what is needed for the report.
We do not sell personal data.
5. Professionals' pages are public and searchable. A live professional's display name, photo, profession, city and description appear on their public page, and their name, photo, profession and city in the site's search and in search engines. There is no opt-out while the page is live; a professional can pause their page, which takes it off the site and out of search.
6. Transfers outside the Philippines. Our servers and storage are in Singapore, and our email provider may process data abroad. We use providers with appropriate safeguards.
7. Retention.
| Data | Kept for |
|---|---|
| Account and profile | While your account is open. Within 90 days after you close it, we remove your name, email address, mobile number, password, photo, payout details, TIN and lawyer numbers. |
| Bookings, payments, receipts, refunds and payouts | As long as tax law requires books and records to be kept, counted from the transaction. A closed professional's display name, profession, city and username stay on these records, because clients' booking histories name them. |
| One-time email codes | Deleted within a day |
| Records of moderator actions | [Draft note: no deletion period is set or implemented yet. StudyCenter.ph keeps moderation records 3 years after they are closed.] |
| Backups | Up to 30 days |
8. Cookies and email tracking. We use only the cookies needed for signing in and security. Our emails may contain a small tracking image used by our email provider to measure delivery.
9. Your rights. Under RA 10173 you may be informed, access, correct, object, ask for erasure or blocking, ask for data portability, and claim damages. You can correct your name, mobile number and receipt details in Account settings, stop return-consult reminders from any reminder email, and close your account. For anything else, email hello@mycalendar.ph. You may also complain to the National Privacy Commission.
10. Security. Passwords and email codes are stored only as hashes, connections are encrypted (HTTPS), Manage booking links are signed and stop working 90 days after the appointment, and access to personal data is limited to authorized staff. We will notify you and the National Privacy Commission of a breach as the law requires.
11. Changes. We will post updates here and announce material changes.