Privacy Policy

Last updated: March 8, 2026

PH Livestock ("Baboy PH", "we", "us", or "our") operates a livestock listing service connecting breeders with buyers across the Philippines. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and National Privacy Commission ("NPC") Circular No. 16-03.

By using our platform, you consent to the practices described in this policy. If you do not agree, please do not use our services.

1. Personal Information We Collect

1.1 Information You Provide

  • Account information: Name, email address, and profile photo when you sign in via Google OAuth or magic link.
  • Phone number: If you choose to verify your phone through our SMS verification flow (via Semaphore).
  • Listing data: Animal details (breed, age, weight, price, health status, vaccination records), photos, location (province, city, barangay), and contact preferences you provide when creating listings.
  • Inquiry messages: Your name, email, phone number, and message content when you send an inquiry to a breeder.
  • Reviews: Rating (1–5) and comment text when you review a breeder.
  • Reports: Details you provide when reporting a listing or breeder for moderation.
  • Saved searches: Search filter criteria you choose to save for future use or notifications.
  • Contact form submissions: Name, email, and message content when you use our contact form.

1.2 Information Collected Automatically

  • Session cookies: Essential cookies required to maintain your authenticated session (see Section 5).
  • Listing view analytics: When you view a listing, we record a session identifier, timestamp, and the listing viewed to provide breeders with aggregate view statistics.
  • Rate limit counters: Temporary IP-based counters used to prevent abuse and enforce fair usage limits.
  • Audit logs: Records of administrative actions (e.g., trust level changes, content moderation decisions) for accountability and security.

1.3 Information We Do NOT Collect

We want to be explicit about what we do not collect:

  • Government-issued IDs: We do not require or store national IDs, driver's licenses, passports, or TIN numbers.
  • Financial or payment information: We do not process payments, hold funds, or collect bank account numbers, credit card details, or e-wallet credentials. All transactions occur directly between buyers and sellers outside our platform.
  • Biometric data: We do not collect fingerprints, facial recognition data, or any biometric identifiers.
  • Browsing history for tracking: We do not track your activity across other websites or build advertising profiles.
  • Device fingerprints: We do not generate or store unique device identifiers for tracking purposes.

2. Legal Basis for Processing

Under Section 12 of the DPA, we process your personal information on the following legal bases:

  • Consent (Section 12(a)): You provide consent when you create an account, submit listings, send inquiries, or use our contact form.
  • Contractual necessity (Section 12(b)): Processing is necessary to provide the services you have requested — publishing your listings, delivering inquiries to breeders, and sending notifications about listing and account activity.
  • Legitimate interest (Section 12(f)): We process certain data to maintain platform integrity and safety, including content moderation and auto-flagging, trust level management, blocklist enforcement, listing view analytics for breeders, rate limiting to prevent abuse, and saved search matching.
  • Legal obligation (Section 12(c)): We may process data to comply with Philippine law, including responding to lawful requests from the NPC, courts, or law enforcement authorities.

3. How We Use Your Information

We use the information we collect for the following specific purposes:

  • Publish livestock listings: Display your animal listings with the details, photos, and location information you provide.
  • Deliver inquiries and notifications: Transmit buyer inquiries to breeders and send email notifications about inquiry activity, listing status changes, review submissions, and saved search matches.
  • Content moderation: Review listings for compliance with our terms, including automated flagging of prohibited content and blocklist enforcement.
  • Trust and safety: Manage trust levels (NEW, VERIFIED, BANNED), process reports, enforce account suspensions, and maintain audit trails of moderation decisions.
  • Rate limiting: Enforce usage limits on inquiries, contact form submissions, and API endpoints to prevent abuse.
  • Analytics for breeders: Provide aggregate listing view statistics to help breeders understand interest in their animals.
  • Respond to support requests: Address your questions and concerns submitted through our contact form.
  • Legal compliance: Respond to lawful requests and protect our legal rights.

4. Sharing and Disclosure

We do not sell, rent, or trade your personal information. We share your data only in the following limited circumstances:

  • Between users (at your direction): When you send an inquiry, your name, email, and phone number (if provided) are shared with the breeder. When you submit a review, your name and review content are publicly visible.
  • Service providers: We use the following third-party services to operate the platform:
    • Cloudflare R2 — secure photo storage with access-controlled URLs
    • Semaphore — SMS delivery for phone verification OTPs (Philippines-based provider)
    • Resend — transactional email delivery for notifications and contact form messages
    • Database hosting provider — PostgreSQL database infrastructure

    These providers process data solely on our behalf and are bound by their own privacy and data protection obligations.

  • Legal requirements: We may disclose your information when required by law, regulation, or legal process, including lawful requests from the NPC, Philippine courts, or law enforcement authorities.
  • Safety and fraud prevention: We may disclose information in good faith when we believe it is necessary to protect the safety of our users, investigate fraud, or respond to a government request related to platform abuse.

5. Cookies and Tracking

We use essential cookies only. These are strictly necessary for the platform to function:

  • Session cookie: Maintains your authenticated session after sign-in.
  • CSRF token: Protects against cross-site request forgery attacks.

We explicitly do NOT use:

  • Analytics cookies or tracking scripts (no Google Analytics, no Hotjar, etc.)
  • Advertising cookies or retargeting pixels
  • Third-party cookies of any kind
  • Browser fingerprinting or cross-site tracking technologies

6. Data Storage and Security

We implement the following specific security measures to protect your personal information:

  • HTTPS encryption: All data in transit is encrypted via TLS/HTTPS.
  • Database access controls: Database access is restricted to authorized application services with role-based permissions.
  • Cloudflare R2 access-controlled URLs: Uploaded photos are served via time-limited, access-controlled URLs rather than public bucket access.
  • No password storage: We use Google OAuth and magic link authentication exclusively. We never store passwords.
  • Audit trails: Administrative actions (trust level changes, content moderation) are logged for accountability.
  • Rate limiting: IP-based and user-based rate limiting protects against brute-force attacks and abuse.

While we take reasonable and appropriate measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and encourage you to protect your own account by keeping your email account secure.

7. Data Retention

We retain your personal information for the following periods:

  • Account data: Retained for the duration your account is active. Upon account deletion request, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
  • Listing data: Active while the listing is published. Archived or sold listings are soft-deleted (removed from public view) but retained in our database for dispute resolution and legal compliance purposes.
  • Inquiry data: Retained for the duration that both the sender and recipient accounts remain active.
  • Reviews: Retained for the duration the reviewer's account is active. Hidden reviews (moderated by admin) are retained internally but removed from public view.
  • Reports: Retained for a minimum of one (1) year for moderation accountability and pattern analysis.
  • Audit logs: Administrative action logs are retained for a minimum of one (1) year per DPA record-keeping requirements.
  • Contact form messages: Retained for a minimum of six (6) months to ensure adequate follow-up and resolution.

After the applicable retention period, data is securely deleted or anonymized so that it can no longer be associated with you.

8. Your Rights Under the Data Privacy Act

Under Sections 16 through 18 of the DPA, you have the following rights regarding your personal information:

  • Right to be informed (Section 16(a)): You have the right to know what personal data we collect, how it is used, and with whom it is shared. This Privacy Policy fulfills that obligation.
  • Right to access (Section 16(c)): You may request a copy of the personal data we hold about you.
  • Right to correction (Section 16(d)): You may request correction of inaccurate, incomplete, or outdated personal information.
  • Right to erasure or blocking (Section 16(e)): You may request deletion or blocking of your personal data when it is no longer necessary for the purpose for which it was collected, or when you withdraw consent.
  • Right to data portability (Section 18): You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
  • Right to object (Section 16(c)): You may object to the processing of your personal data, including processing based on legitimate interest.
  • Right to file a complaint: If you believe your data privacy rights have been violated, you have the right to file a complaint with the National Privacy Commission (NPC) at https://www.privacy.gov.ph.

To exercise any of these rights, please contact us through our contact page. We will respond to your request within fifteen (15) days as required by the DPA.

9. Data Breach Notification

In accordance with Section 20(f) of the DPA and NPC Circular No. 16-03, in the event of a personal data breach that is likely to cause harm to affected data subjects:

  • We will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach.
  • We will notify affected users within seventy-two (72) hours of becoming aware of the breach, describing the nature of the breach, the data involved, and the measures taken to address it.
  • We will take immediate steps to contain the breach, assess its scope, and implement measures to prevent recurrence.

The 72-hour notification period begins from the time we become aware of the breach. Discovery of a breach may occur after the actual breach event.

10. Children's Privacy

Our platform is intended for users aged 18 and older. We do not knowingly collect personal information from individuals under 18 years of age. Under the DPA, the processing of personal data of minors requires the consent of a parent or guardian. If we become aware that we have collected personal information from a minor without appropriate consent, we will take immediate steps to delete that information.

11. International Data Transfers

Some of the third-party service providers we use (such as cloud hosting and email delivery services) may store or process data on servers located outside the Philippines. In such cases, we ensure that appropriate safeguards are in place consistent with the requirements of the DPA for cross-border data transfers, including that such providers maintain adequate levels of data protection.

Your personal data will not be transferred to any country or territory that does not provide an adequate level of data protection without appropriate contractual or organizational safeguards.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date. For material changes that significantly affect how we collect, use, or share your personal information, we will provide prominent notice on the platform prior to the changes taking effect.

Your continued use of the platform after changes are posted constitutes your acceptance of the updated policy.

13. Contact Information

If you have questions about this Privacy Policy, wish to exercise your data privacy rights, or have concerns about how your personal information is handled, please visit our contact page.

If you are not satisfied with our response, you have the right to file a complaint with the National Privacy Commission (NPC). Visit https://www.privacy.gov.ph for more information.