1. Introduction

DICT operates SENTINEL to monitor the availability, inventory, health, and utilization of ICT equipment in Digital Transformation Centers. We respect your privacy and process personal data in line with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

2. Personal Data We Collect

• Account data: name, email address, role, assigned center, and a securely hashed password.
• Security data: two-factor authentication settings, sign-in times, and session details.
• Usage and audit data: actions you perform in the system (for example, creating or updating records), with date, time, and IP address.
• Device data: for monitored equipment, hardware and software details reported by the SENTINEL agent, such as device name, operating system, and health readings.

3. Why We Process Your Data

• To verify your identity and let you sign in (authentication).
• To control what you can see and do based on your role and center.
• To keep an audit trail that protects the integrity and security of the system.
• To manage equipment, tickets, announcements, and notifications.
• To detect misuse, investigate incidents, and improve reliability.

4. Sharing of Data

We do not sell your personal data. Data is accessible only to authorized DICT personnel with a legitimate need, and may be disclosed when required by law or by a lawful order of a government agency.

5. Retention

Account and audit records are kept only as long as needed for the purposes above or as required by law and government records rules. Records that are removed are soft-deleted and later disposed of securely.

6. How We Protect Your Data

• Passwords are stored hashed, never in plain text.
• Connections are encrypted, and sessions expire after a period of inactivity.
• Access is role-based, with optional or mandatory two-factor authentication.
• Sensitive actions are logged for accountability.

7. Your Rights

Under the Data Privacy Act, you have the right to:

• be informed about how your data is processed;
• access and request a copy of your personal data;
• correct inaccurate or outdated data;
• object to processing or withdraw consent, subject to legal and operational limits;
• request erasure or blocking of data that is no longer necessary; and
• lodge a complaint with the National Privacy Commission.

8. Cookies

SENTINEL uses only essential cookies to keep you signed in and to protect against forged requests. It does not use advertising or third-party tracking cookies.

9. Contact

To exercise your rights or raise a concern, contact your center's administrator or the DICT Data Protection Officer. You may also contact the National Privacy Commission at privacy.gov.ph.

10. Changes to This Notice

We may update this notice to reflect changes in law or in how the system works. The latest version is always available on this page.