Privacy Policy

This Policy explains how personal data is handled on fibyr.ph, in line with the Philippine Data Privacy Act of 2012 (RA 10173) and the rules of the National Privacy Commission (NPC).

1. Who is responsible for your data

• If you are a subscriber: your internet provider (the ISP) is the data controller for your personal data. fibyr.ph processes that data only as the ISP's processor, under its instructions.
• If you are an ISP owner or staff member: fibyr.ph is the data controller for your account data.

2. What we collect

• Account details — name, email, phone, and (for subscribers) service address and location pin.
• Service data — your plan, connection/PPPoE details, bills and payments, support tickets, and job records.
• Technical data — sign-in activity and device/session information needed to keep your account secure.

3. Why we use it

To create and run your account; to let your ISP provide, install, bill, and support your connection; to secure the service; and to meet legal, tax, and regulatory obligations.

4. Legal basis

We rely on your consent (given at registration), on the performance of your contract with your ISP, and on compliance with legal obligations, as recognised under the Data Privacy Act.

5. Sharing

Your data is shared with the ISP you subscribe to (or that employs you), and with service providers that help run the Platform (such as hosting, email, and payment processing) under confidentiality obligations. We disclose data to authorities only when legally required. We do not sell your personal data.

6. Retention

We keep personal data for as long as your account is active and as long as needed for the purposes above, including financial records that must be retained for legal and tax periods, after which it is deleted or anonymised.

7. Your rights

Under the Data Privacy Act you may: be informed; access your data; have it corrected; object to or withdraw consent for processing; have data erased or blocked where allowed; obtain a copy of your data; and lodge a complaint with the NPC. Withdrawing consent does not affect processing already carried out, and some data must be kept to meet legal obligations.

8. Security

We use organisational and technical safeguards — including encryption of sensitive fields, access controls, and secure sign-in — to protect personal data against unauthorised access, loss, or misuse.

9. Data Protection Officer

To exercise your rights or raise a concern, contact the Data Protection Officer at privacy@fibyr.ph. Subscribers may also contact their ISP directly. You may escalate unresolved concerns to the National Privacy Commission (privacy.gov.ph).

10. Changes

If this Policy changes, we will update the version and effective date above and, where appropriate, ask you to review and consent again.