Privacy Policy & Terms

Saandugo ("we," "our," or "us") is not a blood bank or health facility. We are an online platform that helps connect voluntary blood donors with accredited hospitals and blood service facilities. We do not collect, store, test, or sell blood. All blood donation procedures are handled only by licensed and accredited health institutions.

Saandugo is currently in its prototype testing stage as part of a school project, and is not a formal health service provider. All blood donation arrangements are coordinated with accredited health facilities. We comply with the Philippine Data Privacy Act of 2012 (RA 10173) in handling your personal and sensitive information.

This Privacy Notice explains how we collect, use, store, share, and protect your data, and what rights you have over it.

1. Information We Collect

When you register and use our platform, we may collect the following:

Personal Information

• Full name
• Email address
• Mobile number
• Date of birth
• Location or city

Sensitive Personal Information

• Blood type
• Donation history (date and type of last donation)

Technical Information (if applicable)

• IP address
• Browser type and version
• Device information

2. Legal Basis for Processing

We process your personal and sensitive information based on your explicit consent, which you provide when you register on our platform and agree to this Privacy Notice.

3. Purpose of Processing

We use your personal data to:

• Facilitate potential donor - recipient matches
• Coordinate with accredited health facilities for blood donation logistics
• Contact you about donation opportunities
• Provide SMS/email reminders for future donation schedules (if you opt in)
• Improve, test, and develop the Saandugo platform
• Comply with legal obligations

4. Data Sharing and Disclosure

We may share your personal data with:

• Accredited hospitals and blood service facilities for donor screening and coordination (only with your explicit consent)
• Authorized service providers e.g., cloud hosting, email/SMS providers, for platform operations
• Regulatory authorities if required by law or court order

We do not sell, rent, or trade your personal data to third parties.

5. Data Storage and Retention

We secure your data in access-controlled systems and is processed securely on cloud infrastructure compliant with ISO 27001.

We retain your data only for as long as necessary to fulfill the purposes stated above or as required by law.

Upon withdrawal of consent, we will delete or anonymize your data within a reasonable period. Please email us at hello@saandugo.com if you want to delete your account.

6. Data Security Measures

We implement organizational, physical, and technical measures such as:

• Encryption of sensitive information
• Restricted access to authorized personnel only
• Secure password protocols and authentication measures
• Regular system monitoring and vulnerability checks

7. Data Breach Protocol

In the event of a data breach that is likely to harm you, we will:

• Notify you and the National Privacy Commission (NPC) within 72 hours as required by law
• Take necessary steps to mitigate the breach

8. Your Rights Under the DPA

You have the right to:

• Be informed about how your data is collected and used
• Access the personal data we hold about you
• Request correction of inaccurate data
• Withdraw your consent at any time
• Request deletion or blocking of your data
• Lodge a complaint with the NPC

To exercise these rights, email us at: hello@saandugo.com

9. Changes to this Privacy Notice

We may update this Privacy Notice from time to time. We will notify you through the platform or by email when significant changes are made.

10. Contact Information

Email: hello@saandugo.com