Last updated: February 2026
This policy outlines how Mike Ongchua (the "Author"), acting as a Personal Information Controller (PIC), handles personal data in compliance with Republic Act No. 10173 (The Data Privacy Act of 2012).
I collect personal data in the form of likeness (images), audio, and video recordings of individuals ("Subjects") during events or project documentation.
The processing of this data is based on Legitimate Interest (Section 12(f) of RA 10173). As a creator, I have a legitimate interest in documenting projects and artistic work. This interest is balanced against your privacy by:
Using private, non-indexed distribution channels.
Implementing strict expiration dates on access links.
Restricting the audience to intended recipients only.
To uphold the principle of data minimization, I follow a strict retention schedule:
Standard Retention: Digital assets shared via private links are retained for 90 days. After this period, the link expires and the temporary cloud version is deleted.
Requested Disposal: If a Subject exercises their right to erasure, I will revoke access and destroy the specific files within 30 days of a verified request.
Archival: Some content may be kept in a secured, offline archive for historical or portfolio purposes unless a valid objection is raised by the Subject.
I implement "Privacy by Design" to protect your media:
Access Control: Content is shared via password-protected or uniquely generated expiring links (e.g., OneDrive).
Encryption: Data is encrypted at rest and in transit using industry-standard protocols.
Confidentiality: I do not sell, rent, or trade your personal data to third parties.
Content is hosted on global cloud infrastructure (e.g., Microsoft OneDrive). By accessing the CONTENT, you acknowledge that data may be processed on servers outside the Philippines that adhere to international data protection standards.
This media is shared in good faith for intended recipients only.
Warning: Any recipient who re-shares, publishes, or redistributes this CONTENT without express permission from the Author and the Subjects involved may be held solely liable for Unauthorized Processing or Malicious Disclosure under Sections 25 and 31 of RA 10173.
You have the right to access, correct, or object to the processing of your CONTENT.
To exercise these rights or request a takedown, contact the Author/DPO directly:
Mike Ongchua | Use the button below (direct email) or pick an alt-contact option here.