{"id":3,"date":"2018-06-04T05:07:22","date_gmt":"2018-06-04T05:07:22","guid":{"rendered":"http:\/\/www.newlife.ph\/main\/thefort\/?page_id=3"},"modified":"2026-01-31T13:32:13","modified_gmt":"2026-01-31T05:32:13","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/newlife.ph\/thefort\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t
Effective Date: October 20, 2025<\/strong><\/p> Last Updated: October 20, 2025<\/strong><\/p> New Life The Fort (“we,” “us,” or “our”) is a church community based in the Philippines, dedicated to fostering spiritual growth, community fellowship, and service through our website at https:\/\/newlife.ph\/thefort<\/a> or newlifethefort.com<\/a> (the “Website”). We are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173, or “DPA”) and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC) of the Philippines.<\/p> As a faith-based organization, we process personal data in line with principles of transparency, legitimate purpose, and proportionality. Where applicable, we also strive to align with international standards, such as the General Data Protection Regulation (GDPR) for users in the European Union and the Children’s Online Privacy Protection Act (COPPA) for users in the United States, to ensure global compliance if our Website serves international visitors. If you are a resident of the EU, US, or another jurisdiction with stricter data protection laws, additional rights may apply, and we will honor them to the extent feasible.<\/p> By accessing or using our Website, you consent to the practices described in this Policy. If you do not agree, please do not use the Website. We may update this Policy periodically; changes will be posted here with the updated effective date. Continued use after changes constitutes acceptance.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t For clarity, key terms used in this Policy are defined as follows (in accordance with the DPA):<\/p> This Policy applies to all personal data processed through our Website, including data collected from visitors, members, volunteers, donors, and event participants. It covers our operations as a Personal Information Controller under the DPA. It does not apply to third-party websites linked from ours or offline church activities unless specified. Special provisions apply to children’s data and sensitive personal information to ensure compliance with parental\/guardian consent requirements and heightened protections for vulnerable data.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t We collect only the minimum personal data necessary for our legitimate purposes. Types include:<\/p> For children, we collect only data essential for youth programs or family events, such as name, age, birthdays, and health-related details for safety, and always with parental\/guardian verification.<\/p> We do not collect data from children under 13 without parental consent (see Children’s Privacy and Parental\/Guardian Consent<\/a>).<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t We collect data through:<\/p> Collection occurs only with your consent or as necessary for contractual or legal obligations. For children and sensitive health\/medical data, collection requires verifiable parental\/guardian consent.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t We process personal data solely for legitimate, church-related purposes, including:<\/p>\n Processing is limited to what is necessary and proportionate, with heightened care for children’s data and sensitive health\/medical information.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t As a religious organization, we may process Sensitive Personal Information (SPI), such as religious beliefs, health\/medical conditions, or special needs, which is afforded the highest level of protection under the DPA (Section 13). Under GDPR (Article 9), this aligns with “Special Category Data,” which includes processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health, or data concerning a natural person’s sex life or sexual orientation. Processing of such data is prohibited unless one of the specified lawful bases applies, and we adhere to these strictly for both DPA and GDPR compliance.<\/p> We process SPI\/Special Category Data only where a DPA lawful basis (e.g., explicit consent under Section 12) and a GDPR equivalent (Article 9) apply, including:<\/p> If SPI processing involves automated systems, we conduct Privacy Impact Assessments (PIAs) under DPA and DPIAs under GDPR to identify and mitigate risks. Breaches of SPI trigger immediate enhanced response protocols, including notifications to EU supervisory authorities where applicable.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t We do not sell or rent personal data. Disclosure occurs only:<\/p> All recipients must maintain confidentiality and use data only for specified purposes. Children’s data and sensitive health\/medical information are never shared without appropriate consent.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t We implement reasonable organizational, physical, and technical safeguards to protect personal data against loss, misuse, unauthorized access, alteration, or destruction, per NPC guidelines:<\/p>\n Despite these measures, no system is infallible. We cannot guarantee absolute security, but we prioritize protections for vulnerable groups like children and sensitive health data.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t Under the DPA (and GDPR\/COPPA where applicable), you have the following rights, exercisable free of charge (subject to verification):<\/p>\n Parents\/guardians have these rights on behalf of children under 18, including reviewing, rectifying, or deleting collected data such as health\/medical information or birthdays. Requests should be submitted in writing to our DPO (see Contact<\/a>). We respond within 30 days (or 45 for complex cases).<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\tTable of Contents\t\t\t<\/h3>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
Definitions<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tBack to Top\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
Scope and Applicability<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tBack to Top\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
Personal Data We Collect<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tBack to Top\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
How We Collect Personal Data<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tBack to Top\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
Purposes for Processing Personal Data<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n
\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tBack to Top\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
Sensitive Personal Information<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
Lawful Bases for Processing SPI\/Special Category Data:<\/h3>
Key Protections for SPI\/Special Category Data:<\/h3>
\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tBack to Top\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
Sharing and Disclosure of Personal Data<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tBack to Top\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
Data Security Measures<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n
\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tBack to Top\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
Your Rights as a Data Subject<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n