Last updated: August 14, 2026
This Privacy Policy explains how CFC West1C1 collects, uses, stores, and protects personal data through Oracle, our Members Portal, covering both registered portal accounts (Admins, Moderators, Area Coordinators, and other staff) and the members whose records are managed within it.
1. Information We Collect
Depending on how you use Oracle, we collect:
Account information — your email address and password (managed securely by our authentication provider, never stored in plain text) for portal accounts, plus an optional profile photo.
Membership records — name, Member ID, gender, status, Area/Chapter assignment, household head, year registered, and Pastoral Service role, as encoded by your Area's authorized portal accounts.
Formation and training history — Pastoral Formation (PFO) and Christian Life Program (CLP) module completion records used to track your formation progress.
Messages — direct messages exchanged between portal accounts within Oracle (e.g. between a moderator and a member submitting a record change).
Device push notification tokens — if you enable notifications on the mobile app, a token identifying your device so we can deliver notifications to it. No message content is stored by the notification service itself.
Usage and audit logs — a record of changes made to membership data (who changed what, and when), page-view activity for administrators, and training-lookup activity, kept for accountability and troubleshooting.
2. How We Use Your Information
To maintain accurate membership, household, and Area/Chapter records.
To track Pastoral Formation and CLP training completion.
To let you look up your own training record or self-register for a session using your Member ID.
To let authorized portal accounts communicate about a record (e.g. a proposed change to your information).
To detect, review, and correct erroneous or unauthorized changes through our change-request and audit history.
To send you notifications about activity relevant to your portal account, if enabled.
3. Legal Basis
We process personal data under the Data Privacy Act of 2012 (Republic Act No. 10173), on the basis of your consent (for the public lookup/registration pages), our legitimate interest in maintaining accurate ministry and formation records, and, for portal staff accounts, the performance of your role within the organization.
4. Who Can Access Your Data
Access within Oracle is role-based and scoped by Area — portal accounts only see the pages and records their assigned role and Area permit. Edits made by accounts without direct editing rights are queued as change requests and must be reviewed and approved by an Admin or Moderator before they take effect. We do not sell, rent, or share your personal data with third parties for marketing purposes.
5. Data Storage and Security
Your data is stored with Supabase, our cloud database and authentication provider, protected by row-level access policies enforced at the database layer, encrypted in transit, and restricted to authorized portal accounts. No system is completely immune to risk, but we apply reasonable organizational and technical safeguards proportionate to the sensitivity of the data involved.
6. Data Retention
Membership and formation records are retained for as long as needed to serve their ministry purpose. Audit and training-lookup logs are kept according to a retention period configured by our Admins and are purged automatically once that period elapses.
7. Your Rights
Under the Data Privacy Act, you have the right to be informed, to access your personal data, to request correction of inaccurate data, to object to or withdraw consent for its processing, and to request its deletion, subject to our legitimate record-keeping needs as a ministry organization. To exercise any of these rights, contact us using the details below.
8. Children's Data
Some CFC ministries serve minors under a parent or guardian's supervision. Where we hold formation or membership records for a minor, we treat that data with the same safeguards described above, and a parent or guardian may exercise the rights in Section 7 on the minor's behalf.
9. Changes to This Policy
We may update this policy as Oracle's features change. Material changes will update the "Last updated" date above; continued use of the portal after a change constitutes acknowledgement of the revised policy.
10. Contact Us
For questions, concerns, or to exercise your data privacy rights, reach out to any of our moderators:
jamesryanpatiag@gmail.com
markjosephreyes1513@gmail.com