How Basey Audit Reports protects your privacy

This independent, non-partisan public-information project presents public audit reports. It is not an official website of the Municipality of Basey, Samar, or the Commission on Audit (COA).

The site operator controls the limited personal data that this site processes. Republic Act No. 10173, or the Data Privacy Act of 2012, governs this processing.

This informational website has no accounts or payments. If you submit the contact form, the site collects:

• Your name
• Your email address
• The subject
• Your message

The operator uses these details to review and answer your inquiry. The site also collects the following data automatically:

• Google Analytics 4 uses cookie-based identifiers to record page views and interactions. Depending on your activity, it can record:
  • The page you visit and its referral source
  • Your approximate location and device information
  • Scroll depth and outbound-link clicks
  • Site-search terms
  • Form starts and submissions
  • Video engagement and file-download clicks
  The site does not configure Google Analytics to collect the contents of contact-form fields.
• Google Search Console reports how this site appears in Google Search. Its reports include:
  • Search queries
  • Impressions, clicks, and average position
  • Landing pages
  • Country and device category
  Search Console records activity in Google Search. It does not track what you do after you open this site.
• Cloudflare Web Analytics aggregates site-performance data without using cookies. Its reports include:
  • Pages visited
  • Approximate location
  • Browser and device type
  • Referrer
  • Visit time
• Cloudflare and Vercel process your Internet Protocol (IP) address and standard request details. They use this data for security and reliability.
• Your browser stores your theme preference in a device-only browser setting called local storage.

Source reports identify public officers acting in their official roles. This includes elected officials and accountable officers named in audit observations. The site publishes names only when they are relevant to the audit record. Publishing a name does not imply wrongdoing or liability.

To reduce privacy risk, the published dataset excludes or redacts:

• Private home addresses and personal telephone numbers
• Full bank or account numbers; masked values show only the last four digits
• Names of private payees, personnel, and aid or disaster-relief recipients

If the site displays personal data that concerns you, ask the operator to review it through the contact form.

Official report files can include full account numbers and names that this site masks or omits. Use the original report on the audit report documents page as the authoritative record.

The operator reviews Google Analytics and Cloudflare reports to understand how people use the site. These reports help the operator improve pages and report-file links. Search Console reports show how people find the site through Google Search. Network logs help protect the site against abuse.

The operator uses contact data to answer inquiries. It also uses this data to investigate possible errors and improve the site. The operator does not sell analytics data or use it for advertising. The operator does not combine analytics reports with contact-form submissions to identify you.

Section 12(f) of the Data Privacy Act permits processing for the operator’s legitimate interests. Your fundamental rights and freedoms can override those interests. The operator has a legitimate interest in maintaining and securing this public-information reference site.

Google Analytics uses cookies set for this site’s domain to distinguish browsers and preserve session information. These cookies include _ga and _ga_<container_id>. Google documents a default expiration of up to two years. Your browser settings or manual deletion can shorten this period.

Cloudflare Web Analytics does not use cookies. Your browser stores your theme choice locally instead of in a cookie. You can block or delete analytics cookies without losing access to the site’s public content. You can also install the Google Analytics Opt-out Browser Add-on.

The operator does not sell personal data. It also does not rent or trade it. The following providers operate site services and may process limited data under their agreements and privacy terms:

• Cloudflare delivers and protects the site and runs Cloudflare Web Analytics. Review the Cloudflare Privacy Policy.
• Google runs Google Analytics and Google Search Console. Review Google’s privacy policy and its guide to safeguarding Analytics data.
• Vercel hosts the application and serves its pages. Review the Vercel Privacy Notice.
• GitHub hosts the site’s private source code. Review the GitHub General Privacy Statement.
• Discord delivers contact-form submissions to a private channel that only the site operator can access. Review the Discord Privacy Policy.

These providers may process data outside the Philippines. Section 21 of the Data Privacy Act makes the operator accountable for transferred data. It requires contractual or other reasonable means to provide comparable protection.

Google Analytics cookies can remain in your browser for up to two years. You can delete them sooner, and browser limits can shorten their lifetime. Google Analytics standard properties retain user and event data for 2 or 14 months, depending on the property setting. Search Console makes 16 months of performance data available.

Cloudflare retains unsampled Web Analytics data for 7 days. It then reduces the data to an aggregated sample for longer storage. The operator can access Cloudflare Web Analytics reports for 6 months.

Other service-provider terms govern their network-log retention. The operator retains contact data until it answers your inquiry and closes any related investigation. The operator can retain a record when the law requires one.

The operator applies these safeguards under Section 20 of the Data Privacy Act:

• Encrypted connections between your browser and the site
• Cloudflare network protection
• Restricted access to site administration
• Software security updates

Under the Data Privacy Act, you may:

• Learn how the operator processes your data
• Object to processing
• Access your data
• Correct inaccurate data
• Request erasure or blocking when the Act’s conditions apply
• Receive a portable copy when the Act’s conditions apply
• File a complaint with the National Privacy Commission
• Claim compensation for unlawful processing

Some rights apply only when the site processes data that can identify you. Review the National Privacy Commission’s guide to your rights. Use the contact form to exercise a right. The operator will respond within the period required by the Act.

The operator will assess whether a personal data breach creates a real risk to affected people. If it does, the operator will notify them and the National Privacy Commission. The operator will send notice within 72 hours after learning of the breach, as National Privacy Commission Circular No. 16-03 requires.

This general-audience site does not knowingly collect information from children. If you believe a child submitted personal data, ask the operator to delete it through the contact form.

The operator may update this policy when the site or its data practices change. The date at the top of this page identifies the latest revision.

To ask a question or exercise a privacy right, use the contact form.