Privacy Policy

1. Overview

N3MH — the National NGO Network for Mental Health ("N3MH", "we", "us", or "our") is committed to protecting the privacy and personal data of all individuals who interact with our website, services, and programs. This Privacy Policy explains what information we collect, how we use it, and your rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

By using this website (n3mh-algonplace.com) or submitting information through any of our forms, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We collect personal information only when you voluntarily provide it to us. The types of information we may collect include:

• Contact information — name, email address, phone number, and organization name submitted through our Contact Us form or membership application.
• Newsletter subscription data — name and email address submitted through our newsletter signup form.
• Membership application data — organization details, membership track, and supporting documents submitted during the application process.
• Mental health screening data — responses to self-assessment tools (PHQ-9, GAD-7, AUDIT, CAGE, DAST-10, PCL-5). These are processed anonymously using a SHA-256 patient hash and are not linked to your identity without your explicit consent.
• Payment information — billing details processed through PayMongo for membership fees. We do not store full card numbers; payment data is handled by PayMongo under their own privacy and security standards.
• Technical data — IP address, browser type, device type, and pages visited, collected automatically through Google Analytics 4 (GA4) for site performance and analytics purposes.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to inquiries and provide support through our contact and inbox systems.
• To process membership applications and manage member accounts.
• To send newsletters and network updates to subscribers who have opted in.
• To process membership fee payments securely through PayMongo.
• To generate anonymized mental health screening results for personal use and aggregate research.
• To improve our website, services, and user experience through analytics.
• To comply with applicable Philippine laws and regulations, including RA 11036 (Philippine Mental Health Act) and RA 10173 (Data Privacy Act).

4. Legal Basis for Processing

Under RA 10173, we process your personal data on the following legal bases:

• Consent — where you have given explicit consent, such as subscribing to our newsletter or submitting a screening form.
• Contractual necessity — where processing is required to fulfill a membership agreement or service request.
• Legitimate interests — where processing is necessary for the legitimate interests of N3MH, such as improving our services and communicating with members, provided these interests are not overridden by your rights.
• Legal obligation — where processing is required to comply with applicable Philippine law.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following circumstances:

• Service providers — trusted third-party processors (e.g., PayMongo for payments, Google Analytics for site analytics, and our email relay service) who process data on our behalf under strict data processing agreements.
• Legal compliance — when required by law, court order, or government authority under Philippine jurisdiction.
• Network coordination — with member organizations and partner agencies of N3MH, only where you have consented or where sharing is necessary for the delivery of network services.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Membership records are retained for the duration of active membership and for a period of five (5) years thereafter. Newsletter subscription data is retained until you unsubscribe. Anonymized screening data may be retained indefinitely for aggregate research purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include HTTPS encryption, HMAC-SHA256 verification for payment webhooks, HTTP-only session cookies, and access controls for administrative systems.

While we take reasonable precautions, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and to notify us immediately if you suspect any unauthorized use of your account.

8. Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act, you have the following rights:

• Right to be informed — to know how your personal data is being collected and processed.
• Right to access — to obtain a copy of your personal data held by N3MH.
• Right to rectification — to correct inaccurate or incomplete personal data.
• Right to erasure or blocking — to request deletion or blocking of your personal data under certain conditions.
• Right to object — to object to the processing of your personal data, including for direct marketing.
• Right to data portability — to receive your personal data in a structured, commonly used format.
• Right to lodge a complaint — to file a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact our Data Protection Officer at the address below.

9. Cookies and Analytics

Our website uses cookies and similar technologies to enhance your browsing experience and to collect analytics data through Google Analytics 4. Analytics cookies are only loaded after you have provided consent through our cookie consent banner.

You may withdraw your consent at any time by clearing your browser cookies or adjusting your browser settings. Note that disabling cookies may affect the functionality of certain features on this site.

10. Third-Party Links

Our website may contain links to external websites, including government agencies, partner organizations, and social media platforms. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or network operations. The "Last Updated" date at the top of this page will reflect the most recent revision. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us: