1Who we are
The HSST Reunion 2026 web portal is operated by the Holy Spirit School of Tagbilaran (HSST) Reunion Committee, located at Holy Spirit School, Tagbilaran City, Bohol 6300, Philippines. We are committed to safeguarding your personal information and upholding your rights as a data subject.
2Information we collect
When you register or use this platform, we may collect the following:
- Identity & contact
- Full name (including prefix, middle name, and suffix), username, email address, and mobile number
- Address
- Street address, city, province or state, postal code, and country
- School records
- HSST levels attended, batch, school years attended, whether you graduated, and whether you are a batch representative
- Profile & involvement
- Occupation, volunteer committee interest and notes, whether you are a priest who wishes to concelebrate at the reunion Mass, and whether you are a medical practitioner and your specialty (all optional)
- Events & donations
- Event RSVPs and registrations, items you select, payment status recorded by officers, and donation amounts, dates, reference numbers, and receipt images you upload
- Staff accounts
- For school employees and staff: position, years of service, contact number, and address
- Account & security
- Your password (stored only in hashed form), two-step sign-in settings, and sign-in session details such as IP address and browser
3How we use your information
We use your data only for reunion and alumni association purposes, including:
- Verifying your alumni identity and managing your account
- Keeping the association's official record of HSST alumni
- Processing event registrations and RSVPs, and recording payment status
- Verifying donations against the receipts and reference numbers you submit
- Coordinating volunteers, medical support, and the reunion Mass
- Sending event updates, announcements, reminders, and account emails such as password resets
- Generating batch-level reports for authorized coordinators and batch representatives
- Keeping accounts secure and preventing misuse of the platform
- Complying with legal and regulatory requirements
We process your information based on the consent you give when you create your account. You may withdraw your consent at any time by contacting us. Withdrawing consent may mean we can no longer keep your account active.
4Who can access your information
- Admin
- Full access, including managing coordinator accounts
- Reunion Coordinators
- Full access to alumni records, accounts, and reports
- SSPS Staff
- Event and announcement management only
- Batch Representatives
- Members of their own batch only, including contact details, address, and involvement information needed to coordinate the batch
- Cashiers
- Donation records and uploaded receipts, to verify payments
- Other Alumni
- Cannot view other members' personal details
5Service providers
We do not sell, trade, or rent your personal data. To run this platform, we rely on a few service providers that handle your data only on our behalf and only for the purposes below:
- DigitalOcean
- Hosts the website and the database
- Amazon Web Services (S3)
- Stores uploaded files, such as donation receipt images
- Mailtrap
- Sends account emails such as password resets
- Google Maps
- Suggests addresses as you type on the registration form, so the text you enter in the address field is sent to Google
Some of these providers store or process data on servers outside the Philippines. We may also disclose information when required by law or by order of a government authority.
6Payments & donations
Event fees and donations are paid outside this website, through the reunion committee and your batch representative. Authorized officers only record in the platform whether you have paid. When you submit a donation, you may provide the amount, date, reference number, and a photo of your receipt so a cashier can verify it. We do not collect or store credit card numbers, bank passwords, or e-wallet log-in details.
7Data storage & security
Your data is stored on secure cloud servers. We protect it with hashed passwords, encrypted connections (HTTPS), role-based access controls, and two-step sign-in for staff accounts.
If a data breach puts your personal information at risk, we will notify the National Privacy Commission and affected users within 72 hours of discovering it, as required by law.
8Your rights under RA 10173
As a data subject under the Data Privacy Act of 2012, you have the right to:
- Be informed
- Know how and why your personal data is collected and used, as explained in this policy
- Access
- Request a copy of the personal data we hold about you
- Object
- Object to certain uses of your personal information, or withdraw your consent
- Erasure
- Request deletion or blocking of your personal data
- Correction
- Update inaccurate or incomplete data via your profile settings or by contacting us
- Portability
- Receive your data in a structured, commonly used format
- Damages
- Be compensated for damages caused by inaccurate, incomplete, or unlawfully used personal data
- File a complaint
- Lodge a complaint with the National Privacy Commission at privacy.gov.ph
To exercise any of these rights, please contact us at the email address below. You can also reach the National Privacy Commission directly at privacy.gov.ph.
9Data retention
This platform also serves as the HSSTian Alumni Association's long-term record of alumni. Your personal data is therefore kept after the reunion event, as part of the association's records, until you ask us to delete it. Donation and payment records are kept for as long as needed for financial accountability.
When you ask us to delete your account, we will delete or anonymise your personal data, except records we must keep for accounting or legal reasons.
11Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed. If we make significant changes, such as collecting new kinds of information or using it for new purposes, we will tell you by email or through a notice on the platform before the changes take effect.
12Contact us
For privacy concerns, data requests, or questions about this policy, please reach us at:
Originally effective April 19, 2026. Last updated October 4, 2026.