Privacy Policy

1. Scope of This Policy

This Privacy Policy applies to all personal data collected by ERC through:

• Digital platforms and web applications (including Reset360)
• Assessments and screening tools (including ADAPTS)
• Coaching, guidance, and wellness programs
• Communications, registrations, and inquiries

This policy covers both online and offline data processing activities.

2. Types of Personal Data We Collect

ERC may collect the following categories of personal data:

2.1 Personal Information

• Name, email address, phone number
• Organization, school, or program affiliation
• Account or login credentials (where applicable)

2.2 Sensitive Personal Information

• Responses to mental health screening and reflection tools
• Emotional, behavioral, or psychological self-reports
• Program participation records related to well-being

Sensitive personal information is processed with heightened safeguards, consistent with the Data Privacy Act.

2.3 Technical and Usage Data

• Device information, browser type, and IP address
• Activity logs for system security and performance monitoring

3. Purpose of Data Collection and Processing

ERC collects and processes personal data solely for legitimate and specific purposes, including:

• Facilitating self-reflection, screening, and wellness assessments
• Supporting coaching, guidance, and program delivery
• Improving platform functionality and user experience
• Program monitoring, evaluation, and planning
• Compliance with legal and regulatory obligations

ERC assessments, including ADAPTS, are not diagnostic or clinical tools and are not used for medical diagnosis, treatment planning, insurance determinations, or employment decisions.

4. Legal Basis for Processing

ERC processes personal data based on one or more of the following legal grounds:

• Your freely given, informed, and explicit consent
• Fulfillment of contractual or program-related obligations
• Compliance with legal requirements
• Legitimate interests of ERC, provided these do not override your fundamental rights and freedoms

5. Data Sharing and Disclosure

ERC does not sell or trade personal data.

Personal data may be shared only under the following circumstances:

• With authorized ERC personnel and program partners who are bound by confidentiality obligations
• When required by law, court order, or government regulation
• To protect the safety, rights, or welfare of individuals
• In anonymized or aggregated form for reporting, research, or program improvement purposes

Individual-level mental health data is never shared without appropriate safeguards and consent.

6. Data Storage and Security Measures

ERC implements reasonable and appropriate organizational, physical, and technical safeguards to protect personal data, including:

• Role-based access controls
• Secure servers and encrypted storage where applicable
• Regular system monitoring and security updates
• Internal data handling policies and staff confidentiality agreements

Despite best efforts, no data transmission or storage system can be guaranteed to be completely secure.

7. Data Retention

ERC retains personal data only for as long as necessary to fulfill the stated purposes or to comply with legal, regulatory, or institutional requirements.

When data is no longer required, it is securely deleted, anonymized, or archived in accordance with applicable standards.

8. Data Subject Rights

In accordance with the Data Privacy Act, you have the right to:

• Be informed about the processing of your personal data
• Access your personal data
• Object to data processing in certain circumstances
• Request correction of inaccurate or outdated data
• Withdraw consent, subject to legal and contractual limitations
• Request data deletion, blocking, or anonymization when appropriate
• Lodge a complaint with the National Privacy Commission

Requests may be subject to identity verification and reasonable processing time.

9. Children and Minors

When ERC services involve minors, data collection and processing are conducted in accordance with applicable laws and institutional policies. Parental or guardian consent is obtained where required.

10. Changes to This Privacy Policy

ERC may update this Privacy Policy from time to time to reflect legal, regulatory, or operational changes. Updates will be posted on ERC platforms with the revised effective date.

Continued use of ERC services after updates constitutes acknowledgment of the revised policy.

11. Contact Information

For questions, concerns, or requests related to data privacy, you may contact:

You may also contact the National Privacy Commission of the Philippines for further information or to lodge a complaint.