Privacy Policy

1 Introduction & Commitment

The Bureau of Investments – Ministry of Trade, Investments and Tourism (BOI-MTIT) of the Bangsamoro Autonomous Region in Muslim Mindanao (BARMM) ("we," "us," or "our") is committed to protecting the privacy and confidentiality of all participants in the Bangsamoro Investment Roadmap Development (BIRD) 2026–2035 Strategic Validation Survey.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you participate in the validation survey hosted at validation-survey.html and related BIRD 2026–2035 digital tools. By participating in the survey, you acknowledge that you have read and understood this policy.

2 Data Controller

The data controller responsible for your personal information under this policy is:

3 Information We Collect

We collect only the information necessary to validate the BIRD 2026–2035 roadmap and ensure representative participation across the Bangsamoro Economic and Investment Ecosystem (BEIE). The data collected falls into two categories:

3.1 Personal Identification Data (Voluntary)

3.2 Survey Response Data

Your responses to the validation questions, including but not limited to:

• SWOT factor ratings (Impact and Likelihood scores on 1–5 scales)
• Systems Archetype validation scores
• Leverage Point rankings (Meadows' Hierarchy)
• Strategic Options evaluation (1–10 scales)
• Phased Implementation feasibility ratings
• Open-text responses on Mental Models and strategic insights

3.3 Technical Data (Automatic)

• Timestamp of submission
• Browser type and device category (anonymized)
• Local storage entries (to preserve your editing progress within the survey)

4 Purpose of Data Collection

Your data is collected and used exclusively for the following purposes related to the BIRD 2026–2035 initiative:

1. Strategic Validation: To validate the SWOT analysis, Causal Loop Diagrams (CLDs), Systems Archetypes, Leverage Points, and Strategic Options of the Bangsamoro Investment Roadmap.
2. Strat Planner Pro Modeling: To feed quantitative data into the Strat Planner Pro mathematical framework, including the calculation of:
   • Resilience Index (RI) for Strengths and Opportunities
   • Risk Scores for Weaknesses
   • Vulnerability Index (VI) for Threats
3. Representative Analysis: To ensure all BEIE clusters (Foundations, Transformers, Enablers, Connectors, Financiers) and provinces are proportionally represented in the validation.
4. Reporting: To produce aggregated, anonymized findings for the final BIRD 2026–2035 Investment Roadmap document and the Strat Planner Pro Executive Summary.
5. Communication: To send you the final BIRD Roadmap document (only if you provide your email address and consent).

5 Legal Basis for Processing

We process your personal data in accordance with the Republic Act No. 10173 (Data Privacy Act of 2012) of the Philippines and the Bangsamoro Organic Law (Republic Act No. 11054), based on the following legal grounds:

• Explicit Consent: You provide informed consent via the survey's Module 0 before any data is collected.
• Public Interest / Official Authority: The BIRD 2026–2035 roadmap is an official planning instrument of the BARMM Government, mandated under the 2nd Bangsamoro Development Plan (BDP) 2023–2028.
• Legitimate Interest: BOI-MTIT has a legitimate interest in producing evidence-based investment policy for the Bangsamoro region.

6 Data Storage & Security

6.1 Where Your Data Is Stored

Survey responses are transmitted securely and stored as structured JSON files within the official BIRD-2026-2035 GitHub repository maintained by BOI-MTIT. Each response is saved as an individual file in the /data/responses/ directory with a unique timestamp identifier.

6.2 Security Measures

• Encryption in Transit: All data is transmitted over HTTPS/TLS encrypted connections.
• Access Control: The GitHub repository is maintained under the official asilvainnovations organization account with restricted write access to authorized BOI-MTIT personnel only.
• Authentication: Backend submission uses authenticated GitHub Personal Access Tokens (PAT) with least-privilege scope.
• Integrity: Each response file is immutable once committed to the repository, ensuring data integrity for audit purposes.

6.3 Retention Period

Your data will be retained for the duration of the BIRD 2026–2035 roadmap implementation cycle, which concludes on December 31, 2035, after which it will be archived or anonymized in accordance with BARMM government records retention policies.

7 Data Sharing & Disclosure

7.1 Aggregated Reporting

Survey results will be published in aggregated and anonymized form only within the BIRD 2026–2035 Investment Roadmap document, the Strat Planner Pro Executive Summary, and related BOI-MTIT publications. No individual response will ever be attributed to a specific participant or organization in any public report.

7.2 Authorized Recipients

Your data may be shared only with:

• Authorized BOI-MTIT personnel involved in the BIRD roadmap development
• The Bangsamoro Planning and Development Authority (BPDA) for integrated planning purposes
• Accredited third-party auditors for data integrity validation
• Development partners (e.g., UNDP, ADB, IsDB) only in anonymized, aggregated form

7.3 No Commercial Sharing

We will never sell, rent, trade, or share your personal information with any third party for commercial, marketing, or political purposes.

7.4 Legal Disclosure

We may disclose your information only if required by law, court order, or competent BARMM or Philippine government authority, and only to the minimum extent necessary.

8 Your Rights Under the Data Privacy Act

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights regarding your personal information:

• Right to Be Informed: You have the right to know how your data is being processed (this policy fulfills that right).
• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete data.
• Right to Erasure / Blocking: You may request deletion or blocking of your data, subject to legal retention requirements.
• Right to Object: You may object to the processing of your data at any time.
• Right to Data Portability: You may request your data in a structured, commonly used format.
• Right to Lodge a Complaint: You may file a complaint with the National Privacy Commission (NPC) of the Philippines.

9 Cookies & Local Storage

The BIRD Validation Survey uses browser local storage (not traditional cookies) for the following purposes:

• Progress Preservation: To save your editing progress within the survey so you do not lose work if your browser is accidentally closed.
• State Management: To remember which sections of the roadmap you have expanded.

This data is stored only on your device, is never transmitted to our servers, and can be cleared at any time through your browser settings. We do not use tracking cookies, advertising pixels, or third-party analytics services.

10 Children's Privacy

The BIRD Validation Survey is intended for qualified stakeholders, policymakers, investors, and development professionals aged 18 years and older. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any material changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

12 Contact & Complaints

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

For complaints that cannot be resolved directly with us, you may contact the National Privacy Commission (NPC) of the Philippines:

13 Your Consent

By clicking "Yes, I Consent" on Module 0 of the BIRD 2026–2035 Validation Survey, you acknowledge that:

1. You have read and understood this Privacy Policy;
2. You voluntarily consent to the collection and processing of your data as described herein;
3. You understand that your responses will be aggregated and anonymized in all public reporting;
4. You may withdraw your consent at any time by contacting the Data Protection Officer.