Privacy Policy

This site publishes education on responsible parenthood and all natural family planning in the Philippines.

The organisation responsible for the information described here is the Responsible Parenthood and Natural Family Planning (RP-NFP) program of the Archdiocese of Cagayan de Oro. RP-NFP runs under the archdiocese’s CFLA ministry, and RP-NFP itself controls the data collected through this site.

Privacy questions are handled by the RP-NFP program administrator. Write to support@rpnfp.com or use the contact form.

When you send a message

The contact form stores exactly five things: your name, your email address, a subject line if you write one, your message, and the date and time the message arrived. RP-NFP uses them only to read your message and reply to you.

When you give a donation

Giving happens inside GCash or PayPal, never on this site. The program never sees or stores card numbers, bank details, or any other payment instrument.

After a gift arrives, an administrator may record it by hand: the amount, the reference number from the payment app, and — only if you chose to share them — your name, your email address, and any message you sent with it. A gift can be marked anonymous.

Administrator accounts

The people who run the site have accounts holding a name, an email address, and a role. This does not apply to visitors.

• No health information of any kind — no menstrual cycles, fertility charts, pregnancy status, medical history, or diagnoses. The contact form asks you not to send any, and you should not.
• No site analytics or tracking pixels are configured.
• Google AdSense scripts load only when the administrators enable configured Google ad placements.
• No IP addresses or browser user agents stored with your contact message.
• No account, sign-up, or profile is needed to read anything here.

The spam check is deliberately privacy-preserving. It is a hidden field that people never see and a check that the form was not filled in impossibly fast — nothing about you is inspected or stored to make that decision. If the check trips, the message is silently discarded rather than saved.

The typefaces used on this site are bundled with the site itself, so your browser does not request anything from Google or another font service while you read.

We derive pseudonymous counter keys from connection IP addresses and, for sign-in attempts, email addresses. These counters prevent spam and repeated password guesses. We store the digest, count and window start, not the original IP address or email in the counter table. Digests are not anonymous: known identifiers can still be guessed.

Counter windows last up to one hour. Hourly maintenance removes expired counters, normally within two hours of the window starting. Maintenance failures are monitored and may delay deletion.

Administrator changes are recorded with an account ID, role, action, record ID, outcome and time for 90 days plus the hourly cleanup interval. Audit records contain no submitted message bodies, passwords or tokens.

The site’s own public pages do not set cookies. Google AdSense, when enabled, may use cookies and process connection and device information to serve and measure ads. Google’s consent messages and privacy choices are configured through AdSense Privacy & messaging. See Google’s advertising privacy information. The site’s own authentication uses one cookie, nfp_session, and it is a session cookie for site administrators only. It is set when an administrator signs in, it is httpOnly so scripts cannot read it, and it holds nothing but a random token that identifies their signed-in session.

If you never sign in to the admin area, you never receive it.

Contact messages and donation records are stored in a Cloudflare D1 database. Images published on the site are stored in Cloudflare R2. The site itself runs on Cloudflare Workers, so requests to it pass through Cloudflare’s infrastructure and are covered by Cloudflare’s privacy policy.

Access is limited by role. Contact messages can be read only by senior administrators, not by every person with an admin login. Donation records are restricted the same way.

RP-NFP does not sell your information, rent it, or share it for marketing.

• GCash and PayPal handle donations in their own apps, under their own privacy policies. What you do there is between you and them.
• Cloudflare hosts the site, the database, and the images.
• Other websites this site links to — Church documents, government pages, NFP organisations, and similar — have their own privacy policies. This one does not cover them.

The handling of personal data in the Philippines is governed by the Data Privacy Act of 2012 (Republic Act No. 10173). As a data subject, your rights include:

• to be informed that your personal data is being processed;
• to access the personal data RP-NFP holds about you;
• to correct data that is inaccurate or out of date;
• to object to the processing of your data;
• to have your data erased or blocked; and
• to lodge a complaint with the National Privacy Commission.

To exercise any of these, write to the program through the contact page.

Google Translate loads only when you enable it in Accessibility. It translates the public page in place and sends page content and connection information to Google. Google may use cookies to remember your language. It is not loaded in the administration area.

Automatic translations may contain errors. The English original remains the reference for this site’s teaching and health information. See Google’s privacy policy for how Google handles information.

RP-NFP keeps a contact message for up to three months after it has replied and closed the inquiry. After that an administrator deletes it.

Donation records are financial records. RP-NFP keeps them for as long as Philippine tax and accounting rules require a non-profit to keep its books and supporting documents, and the program does not delete them earlier.

This site publishes educational content for adults, and in particular for engaged and married couples. RP-NFP does not knowingly collect personal information from children.

If you are a parent or guardian and believe a child has sent the program personal information, please contact the program and the program will delete it.

If what is collected or how it is handled changes, the program will update this page and change the “last updated” date at the top. Please check back now and then.

Questions, corrections, or a request about your data? Use the contact form.

For privacy matters, email support@rpnfp.com. No Data Protection Officer is named publicly; the RP-NFP program administrator handles these requests.