Sanggu - Privacy Policy

This Privacy Policy explains how Sanggu, a youth council management platform operated by the Sanggu Team, collects, uses, stores, and protects your personal information. It is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission.

Who decides what happens to your data. Each Sangguniang Kabataan council that subscribes to Sanggu is the Personal Information Controller of the records its officials enter, as that term is defined in RA 10173 §3(h). The Sanggu Team acts as a Personal Information Processor under §3(i), handling that information only on the documented instructions of the council concerned. Where this policy describes a decision about your records, that decision belongs to your SK council unless it concerns the operation of the platform itself.

1. Scope and Coverage

  • Who is covered: Authorized users such as SK officials and approved staff; registered barangay residents who use the resident portal; and youth aged 15 to 30 recorded in the Katipunan ng Kabataan (KK) youth database, whether or not they hold a Sanggu account.
  • Where it applies: Registration, account management, attendance, events, reporting modules, and KK youth profiling.
  • When it applies: From account creation, or from the moment a youth profile is recorded, until archival or approved record disposal.

2. Legal Basis for Processing

  • Your SK council's mandate: Section 8(i) of the Implementing Rules and Regulations of Republic Act No. 10742 (the Sangguniang Kabataan Reform Act of 2015) requires every SK to establish, maintain, and update a database of the Katipunan ng Kabataan, and DILG Memorandum Circular No. 2022-033 (24 March 2022) prescribes how that profiling is conducted. Those obligations belong to your SK council. Sanggu is one of the tools a council may choose in order to meet them; the platform holds no mandate of its own and processes this information solely as the council's processor.
  • Individual informed consent: Annex 2 of the same circular is an Informed Consent form, so participation in KK profiling also rests on your own consent under RA 10173 §12(a), and on your consent to process sensitive personal information under §13(a). Consent is recorded before any sensitive information is collected.
  • Freely given: Taking part in KK profiling is voluntary. No barangay service, announcement, event, or program in this system is withheld from you for declining, and you may withdraw your consent at any time.
  • Platform processing: Account creation, verification, and platform security are processed under RA 10173 §12(b), because they are necessary to provide the service you signed up for, and under §12(f), for the legitimate interests of operating and securing the platform. Where an SK council processes records under its own public-authority basis, that basis belongs to the council and not to Sanggu.

3. Katipunan ng Kabataan Youth Profiling

  • What is collected: The demographic questions prescribed by Annex 3 of DILG MC No. 2022-033 — civil status, youth classification, educational attainment, work status, voter registration, and KK assembly participation. Your name, birthday, sex assigned at birth, address, and contact details are not asked again here: they are taken from the account you already registered. Your SK may add further questions of its own, which are shown to you before you answer.
  • Answering is optional: The youth profile lives in your account settings and is answered only if you choose to. Nothing in the portal is withheld if you leave it blank.
  • Sensitive personal information: Civil status, educational attainment, work status, and status as a person with a disability, an indigenous person, or a child in conflict with the law are sensitive personal information under RA 10173 §3(l). None of it is stored until your consent has been recorded.
  • Respondents aged 15 to 17: A parent or guardian must also consent before any sensitive personal information is collected from a minor.
  • Purpose limitation: Section 6 of DILG MC No. 2022-033 limits profiling data to youth-development use. Sanggu therefore uses these answers only to produce the planning outputs your SK council needs — principally the Comprehensive Barangay Youth Development Plan — and to generate export files for the council. The answers are not reused for unrelated barangay purposes and are never sold, rented, or used for advertising.
  • No transmission to government agencies: Sanggu does not transmit any data to the National Youth Commission or to any other government agency. If an SK council submits an export to the National Youth Commission, that submission is made by the council itself, through its own official channels, and outside this platform.
  • Recipients: Authorized SK officials of the council that recorded your profile, and Sanggu technical personnel strictly for maintenance and support.

4. Information We Collect

  • Identity details: Full name, birthdate, and government ID details.
  • Contact details: Email address, mobile number, and home address.
  • Verification files: Uploaded documents such as IDs, appointment files, and supporting records.
  • System activity: Login history, access logs, role changes, and actions tied to your account.

5. Why We Use the Information

  • Account operations: To create, verify, secure, and maintain your account.
  • Service delivery: To run attendance, events, communications, and reporting features.
  • Records management: To preserve the documentation your SK council keeps in the platform and ensure continuity of its records.
  • Security and abuse prevention: To monitor suspicious activity and protect the platform.
  • No advertising: Your personal information is never sold, rented, or used to serve advertisements.

6. Access Controls and Sharing

  • Restricted access: Data is visible only to authorized users based on role permissions.
  • Internal access: May include Sanggu system administrators and the officials of your own SK council, such as the SK Chairperson, the Secretary, and other assigned officers.
  • Separation between councils: Officials of one SK council cannot view the records of another council.
  • No public disclosure: Personal information is not publicly posted.
  • Limited sharing: We may share data only when required for platform operations, legal compliance, or security response.

7. Storage and Security Measures

  • Infrastructure: Files may be stored in managed cloud services such as Amazon S3.
  • Communication: Notifications may be sent through trusted email services such as Gmail.
  • Protection controls: Role-based permissions, restricted admin access, and basic security practices are enforced.
  • Risk statement: No platform is absolutely risk-free, but we continuously improve safeguards.

8. Data Retention and Archiving

  • Active period: Records are retained while officials are in active service or official term.
  • Archive process: After term completion, records may be archived for audit, continuity, and historical reference.
  • Access after archiving: Archived data remains restricted to authorized personnel only.
  • KK youth profiling: Answers are kept per year rather than overwritten, so the figures a past youth development plan was justified with remain reproducible. Rule II §8(i) of the IRR of RA 10742 requires the SK itself to maintain the youth database and turn it over to the next set of SK officials, so Sanggu retains these records on the council's instruction rather than clearing them at the end of a term. If you delete your account, your answers are detached from your identity rather than erased: the barangay, the year, and the answers remain, and no name can be recovered from them.

9. Your Rights as a Data Subject

Chapter IV of the Data Privacy Act of 2012 (RA 10173) gives you the following rights over your personal information:

  • To be informed: Be told that your personal data is being processed, and why, before it is collected.
  • Access: Request a copy of your personal information stored in Sanggu.
  • Correction: Request updates to inaccurate or incomplete details.
  • Object: Object to processing, including the withdrawal of any consent you gave — for example, your consent to KK youth profiling.
  • Erasure or blocking: Request the removal, blocking, or restriction of your data when it is incomplete, outdated, unlawfully obtained, or no longer necessary, subject to the record-keeping requirements of your SK council.
  • Data portability: Obtain a copy of your data in a commonly used, electronically readable format.
  • Damages: Be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your data.
  • Complaint: Lodge a complaint with the National Privacy Commission.
  • How to exercise them: Because your SK council is the controller of the records it keeps, requests about those records are addressed to that council, and the Sanggu Team assists the council in fulfilling them. Requests that concern your account itself — access credentials, contact details, or account deletion — may be sent to the Sanggu Team directly using the details in Section 12.
  • Effect on services: Withdrawing consent to KK youth profiling does not affect any other service in this system. Withdrawing consent to account processing may affect your ability to use Sanggu.

10. System Logs and Session Data

  • Session management: Essential session data helps keep your login secure and stable.
  • Operational logs: Logs are used to troubleshoot issues and monitor system performance.
  • Security logs: Logs may be reviewed to detect unauthorized access or abnormal activity.

11. Policy Plans

  • Updates: This Privacy Policy may be revised as Sanggu features or legal requirements evolve.
  • Notice: The latest version will always be available on this page with an updated date.

12. Contact Information

For questions, concerns, or requests relating to personal data processing under this Privacy Policy, including the exercise of any right listed in Section 9, please contact:

Sanggu Team — platform operator and Personal Information Processor

Email: [email protected]

Your SK council — Personal Information Controller

Requests about the records your council keeps are addressed to that council. Contact the Sangguniang Kabataan of the barangay where you registered and ask for its designated Data Protection Officer. Each council designates its own, and the Sanggu Team is not that officer.

You may also raise concerns directly with the National Privacy Commission (privacy.gov.ph).

Independent platform notice

Sanggu is an independent software platform developed and operated by the Sanggu Team. It is authorized for use by the Sangguniang Kabataan only. It is not operated by, affiliated with, endorsed by, or authorized by other government agencies, such as the Department of the Interior and Local Government, the National Youth Commission, or other government agencies.

Sanggu does not provide government services, does not issue government documents, and does not transact official business on behalf of any public office. References to Philippine laws and government issuances in this policy describe the obligations of the SK councils that use the platform. They are not claims of government authority by Sanggu.