Data Privacy Notice

Who we are

The Municipality of Bustos, Bulacan, operates this Citizen Services Portal and the underlying Community-Based Management System (CBMS) as a personal information controller under RA 10173. We collect and process your personal information to deliver local government services.

What we collect and why

When you use this portal or transact with our offices, we may collect:

• Identity and contact details (name, birthdate, address, barangay, mobile number, email) — to process certificate requests, confirm your identity at the barangay hall, and reach you about your request.
• Your IRIS Ai+ account when you sign in here (your account number, the time you last signed in, and which requests and applications you submitted while signed in) — to check that the account may submit and to show your submissions in the app.
• Household and socio-economic information — for census-based planning, social-welfare programs, and disaster preparedness, as authorized by law.
• Face check and identity photos (mobile app) — a photo of your face taken during a short live check and, where the LGU has turned on identity verification, a photo of a government ID and of you holding it — to confirm that a real person registered the account and to decide whether it may submit requests. We record the type of ID but never ask for or store the ID number.
• Assistance-application details (including financial circumstances) — solely to assess eligibility for the assistance you applied for.

We process this data on the legal bases of your consent (given when you submit a form here), the fulfillment of the LGU's statutory mandates, and the provision of the public service you requested.

Face check and identity verification (mobile app)

If you use the IRIS Ai+ citizen mobile app you are asked to complete a face check: the app asks you to blink, turn your head or smile, then takes one photo of your face so that staff can confirm a real person registered the account. It does not compare your face with any national ID database.

Where the LGU has turned on identity verification you are also asked to photograph a government ID (the front, and the back where there is one) and to take a photo of yourself holding it. These photos are stored encrypted, are seen only by authorised staff who verify identities (each time an image is opened it is recorded), and are used only to decide whether your account may submit requests. A staff member decides your submission unless the LGU has switched on automatic face matching. If it is not approved you will see the reviewer's reason and can submit again.

Signing in on this portal, cookies, and linked submissions

To request a certificate or apply for assistance on this portal you sign in with your IRIS Ai+ account (the same mobile number and password as the mobile app). The account must have completed the face check in the app and, where the LGU has turned on identity verification, have an approved identity. Accounts are created only in the app; this portal cannot take face or ID photos.

When you sign in, the portal places a sign-in cookie in your browser. It holds your account number, your name and a session code, is encrypted and signed so it cannot be read or altered, and is sent only to this portal. It ends when you sign out, when you close the browser, or after 30 minutes without activity, and also when your password is reset or your account is disabled or deleted. We record the time you last signed in. The portal also uses a security cookie against forged form submissions and a short-lived session cookie for the verification question on the forms. We use no advertising or tracking cookies.

A request or application you submit while signed in is linked to your account: it also appears under "My requests" or "My applications" in the app, and staff can see which account submitted it. You may enter another person's name on the form (for example a family member); it is still linked to your account. Tracking a request by its reference code and verifying an ID need no account and set no sign-in cookie.

If you forget your password you can ask for a reset code here or in the app. When this server can send them, we send the code by SMS to the account's mobile number and by email if the account has an email address; you can also get a code from your barangay hall or City Hall after showing a valid ID. Codes are stored only in scrambled (hashed) form.

How we protect it

Your information is stored in a government-controlled system protected by, among other measures: encrypted connections (HTTPS), role-based staff access limited to your own barangay's personnel, two-factor staff sign-in, full audit trails of every access and change, and approval-gated deletion. Sensitive records (e.g. protection cases) carry additional access restrictions.

Who we share it with

Your data is not sold and is shared only as needed to operate the service or as required by law: national agencies with a legal mandate (e.g. DILG, DSWD, PSA), and technology processors that host parts of the service (Microsoft Azure for email/AI infrastructure, Google for map display). If the LGU switches on automatic face matching for identity verification, your face-check photo and ID photos may be sent to a face-matching service (Microsoft Azure AI Face) for that comparison; otherwise they are seen only by the LGU's authorised staff. Processors act only on our instructions and are bound by data-protection obligations.

How long we keep it

Records are retained only for as long as needed for the service and for the retention periods required of local governments by law and audit rules. Security and audit logs are retained for at least one year. Face-check photos are deleted once the retention period the LGU sets has passed (365 days unless the LGU chooses otherwise) and when you delete your account. Photos of an ID and of you holding it are deleted 30 days after your submission is decided, unless the LGU sets a different period, and when you delete your account. Copies held in backups are removed when those backups expire. When a record is approved for deletion, it is deactivated in a way that preserves the accountability trail.

Your rights

Under RA 10173 you have the right to be informed, to access your personal data, to correct inaccurate data, to object to processing, to request erasure or blocking, to data portability, and to be indemnified for damages. You may also choose to withhold your exact birth day (month and year only) when registering. To exercise any of these rights, contact the Data Protection Officer below or visit your barangay hall. In the mobile app you can also delete your own account, which deletes your face-check photo and any ID photos; requests you already submitted stay in the LGU's records.

Data Protection Officer

Data Protection Officer, Municipality of Bustos
Municipal Hall, Bustos, Bulacan
(044) 760-0001

You may also lodge a complaint with the National Privacy Commission (privacy.gov.ph).