Entity: Sangguniang Bayan of Itogon
Official Domains: https://sbinet.itogon.gov.ph | https://sbo.itogon.gov.ph
Last Updated: September 2, 2026
This Privacy Policy governs the website services and the integrated Meta (Facebook) Application operated by the Sangguniang Bayan of Itogon (“we,” “our,” or “us”).
We are committed to protecting your personal data in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), while upholding the right to information under Executive Order No. 2, s. 2016 (Freedom of Information).
1. Data Collected via Third-Party Authentication (Meta & Google)
To make accessing our services convenient, you may choose to log in using either your Facebook or Google account. When you use these services, we minimize the data collected to what is necessary for authentication and account management.
- Log in with Meta (Facebook): We request and collect only your Facebook User Name to verify your identity and personalize your profile.
- Log in with Google: We request and collect your Google Email Address and Full Name associated with your Google profile to securely authenticate your access.
Authentication is performed through the applicable third-party authentication provider, subject to that provider’s own privacy policies and terms.
2. Data Collected via Form Submissions & Transaction Logs
Regardless of the login method chosen, when you request public documents, we process the following information:
Form Submissions — Required Fields
- Client Classification (Agency / Office / Association / School / Private Citizen)
- Purpose of your request
- Email Address
Form Submissions — Optional Fields
- Address
- Contact Number
Transaction & Request Logs
- List of public documents requested and viewed, including timestamps
- Public documents and number of pages provided, including timestamps
This information is processed to facilitate document requests, maintain appropriate transaction records, communicate with requesting parties, and support the administration and security of the service.
3. Google Website Services
Apart from user authentication, our digital platforms may utilize standard Google services for security, analytics, and website performance, in accordance with Google’s applicable privacy policies.
Google reCAPTCHA
Google reCAPTCHA may be used on form submission and other applicable pages to analyze interactions and technical characteristics of the visitor’s device or browser in order to distinguish legitimate users from automated spam, bots, and potentially malicious activity.
Google Analytics
Google Analytics may be used to collect website usage information, such as page views, browser information, and other aggregated or statistical information, to help us understand website usage and improve our services.
Where configured to do so, we do not intentionally use Google Analytics to identify individual users.
4. Cloudflare Security and Spam Prevention
Our websites may use Cloudflare security services, including Cloudflare’s security and bot-management technologies, to protect our websites and online services from automated spam, malicious bots, abuse, and other security threats.
When you access or interact with pages protected by Cloudflare, Cloudflare may process certain technical and security-related information necessary to evaluate whether a request is legitimate. This may include information such as:
- IP address;
- Browser and device characteristics;
- HTTP request and connection information;
- Information concerning interactions with protected website pages; and
- Security and bot-detection signals generated from the request.
This information may be processed by Cloudflare for purposes including security, abuse prevention, bot detection, traffic filtering, and protection of our websites and services.
Cloudflare operates as a third-party service provider, and its processing of information is subject to its own applicable privacy policies and terms.
We do not use Cloudflare’s security services for the purpose of selling personal information or for behavioral advertising.
5. Alignment with the Freedom of Information (FOI)
As a government institution, our collection of the “Purpose of your request” and “Client Classification” supports the administration and processing of requests for public records under applicable Freedom of Information policies and procedures.
To balance transparency and the protection of personal information, personal details such as contact numbers and specific residential addresses will be protected or redacted where required by applicable laws, regulations, and government policies.
Records relating to requests for public documents may be retained as part of the institution’s official administrative records, subject to applicable records-management and retention requirements.
6. Data Collected via Website Interactions (Cookies, Comments & Media)
If you interact directly with our website and subdomains, certain information may be collected automatically or provided by you.
Comments & Media
If visitors leave comments, we may collect the information shown in the comments form, the visitor’s IP address, and browser user-agent string for purposes including spam detection, security, and moderation.
If you upload images, you should avoid uploading photographs containing embedded location information (EXIF GPS metadata), as such metadata may potentially be accessible to persons who download the image.
Cookies
If you leave a comment, you may opt in to saving your name, email address, and website in cookies for your convenience.
Temporary cookies may also be used to determine browser compatibility, maintain login sessions, preserve display preferences, and provide essential website functionality. The duration of such cookies may vary depending on their purpose and configuration.
Embedded Content
Articles on our websites may include embedded content such as videos, images, documents, or other material from external websites.
Embedded content from third-party websites may behave in the same manner as if you had visited the external website directly. Such third parties may collect information about you, use cookies, or monitor your interaction with their embedded content in accordance with their own privacy policies.
7. How We Use and Share Your Data
We process personal information only for legitimate and authorized purposes related to the operation and administration of our services, including:
- Processing and fulfilling public-document requests;
- Verifying client classification and account information;
- Communicating with requesting parties;
- Maintaining transaction and administrative records;
- Maintaining account and authentication services;
- Detecting and preventing automated spam, bots, abuse, and malicious activity;
- Protecting the security and availability of our websites and online services; and
- Complying with applicable laws, regulations, government policies, and lawful government requirements.
Sharing with Third-Party Service Providers
We do not sell or trade your personal information.
However, certain third-party service providers may process technical or other information on our behalf or in connection with services integrated into our websites. These may include:
- Meta — for Facebook authentication;
- Google — for Google authentication, reCAPTCHA, and analytics where enabled; and
- Cloudflare — for website security, traffic filtering, bot detection, spam prevention, and abuse protection.
These services may process information in accordance with their respective privacy policies and terms.
Password-reset emails may include the IP address associated with the password-reset request as part of the security process. Visitor comments may also be checked through automated spam-detection services.
8. Data Retention Periods
Form Submissions & Accounts
Personal information associated with user accounts and submitted requests may be retained for as long as necessary to provide the service, maintain administrative and transaction records, comply with legal and government records-retention requirements, and protect the security of our systems.
Where applicable, users may view, edit, or request deletion of their personal information, subject to information that we are legally required or authorized to retain.
Comments
Website comments and associated metadata may be retained for as long as necessary for moderation, administrative, security, and records-management purposes, subject to applicable retention requirements.
Security and Technical Logs
Technical and security-related logs may be retained for a limited period as necessary for cybersecurity, troubleshooting, fraud and abuse prevention, system administration, and investigation of security incidents, subject to applicable policies and requirements.
9. Your Rights & Meta Data Deletion
In accordance with the Data Privacy Act of 2012, you have rights concerning your personal data, including, where applicable, the right to access, correct, request portability of, or request deletion of your personal information.
These rights are subject to applicable legal limitations, including information that we are legally required or authorized to retain for administrative, legal, regulatory, records-management, or security purposes.
How to Delete Your Meta App Data
- Log into your Facebook account and go to Settings & Privacy > Settings > Apps and Websites.
- Locate our LGU Application and select Remove.
- To request the deletion or erasure of personal information submitted through our systems, contact our Data Protection Officer at dpo@itogon.gov.ph.
Requests for deletion remain subject to applicable legal, administrative, records-retention, and security requirements.
