Data Privacy Notice

What Information We Collect

When you submit a report, we may collect the following:

1. Platform where content was seen - To understand where the suspected disinformation appeared.

2. URL or link to content - To locate and verify the reported content.

3. Description of the suspected disinformation  - To understand what is being reported.

4. Type of content (post, screenshot, video, etc.) - To categorize and triage the submission.

5. Uploaded files (screenshots, images, PDFs) - To support verification and analysis.

6. Date the content was first seen - To establish timeline of potential campaigns.

7. Your province or region - To understand geographic spread.

8. Your name - To acknowledge contributors to published research (with consent).

9. Your contact email or Viber - To follow up if your report is investigated.

You may submit anonymously. Providing your name and contact details is entirely voluntary. If you do not provide contact details, we will not follow up with you individually, but your submission will still be reviewed.

Why We Collect This Information

CIRIS processes submitted information for the following legitimate purposes:

• Cognitive security research — to study disinformation narratives, Foreign Information Manipulation and Interference (FIMI), and information operations affecting the Philippines

• Public interest reporting — to produce independent WATCHPOST Alerts, policy briefs, and research reports that protect Philippine democratic resilience

• Triage and investigation — to assess, prioritize, and act on credible reports of suspected disinformation campaigns

• Pattern analysis — to identify systemic trends across submissions for aggregate research (no individual is identified in these analyses without their consent)

We do not use submitted information for commercial purposes, political campaigns, advertising, or any purpose unrelated to cognitive security and information integrity research.

How We Store Your Data

• Submissions are stored in a restricted-access database accessible only to authorized CIRIS analysts

• Files you upload are stored in an encrypted cloud storage environment

• We apply role-based access controls — only analysts assigned to review your submission can view it

• CIRIS does not sell, rent, share, or trade your personal information with third parties

• We do not publish raw submissions or share your contact details with external parties without your explicit consent

How Long We Keep Your Data

• Submissions that led to a published investigation - Up to 3 years after publication, then anonymized

• Submissions that were archived (not investigated) - 12 months, then deleted

• Contact details (if provided) - Deleted immediately after follow-up is complete, or after 12 months if no follow-up occurred

• Uploaded files - Same as submission retention period above
  
  After the retention period, personal data is permanently deleted or anonymized so that no individual can be identified.

Your Rights Under RA 10173

As a data subject, you have the following rights:

• Right to be informed — you have the right to know what personal data CIRIS holds about you (this notice fulfills that obligation)

• Right of access — you may request a copy of the personal data you submitted

• Right to rectification — you may request correction of inaccurate information

• Right to erasure / "right to be forgotten" — you may request deletion of your data, subject to CIRIS's legitimate research purposes

• Right to object — you may object to the processing of your data for specific purposes

• Right to data portability — you may request your data in a structured, readable format

To exercise any of these rights, email contact@ciris.org.ph with the subject line: "DPA Data Subject Request." We will respond within 15 business days.

Important Disclaimer on Submitted Content

• CIRIS will never publish raw submission content verbatim without your explicit written consent

• Submissions are treated as unverified tips for independent investigation. They are not treated as confirmed facts.

• CIRIS does not investigate or take action against private individuals based solely on a single unverified submission

• Do not include personal accusations against named private individuals without substantive documentary evidence. CIRIS is a research body, not a complaints body

• Submitting knowingly false or malicious information may expose you to legal liability under applicable Philippine law

Cookies and Analytics

The Bantay portal page on ciris.org.ph may use standard website analytics (e.g., page visit counts). No personally identifying information is collected through cookies without your consent. The submission form itself does not use tracking cookies.

Changes to This Notice

CIRIS may update this Privacy Notice as needed. The current version and effective date are always shown at the top of this page. Continued use of the portal after updates constitutes acceptance of the revised notice.

Contacts and Complaints

For privacy concerns or to exercise your rights:

Center for Information Resilience and Integrity Studies (CIRIS)

Email: contact@ciris.org.ph

If you believe your data privacy rights have been violated and CIRIS has not resolved your concern, you may file a complaint with the National Privacy Commission (NPC) of the Philippines:

Website: privacy.gov.ph
Email: complaints@privacy.gov.ph