Who we are
PanapaAntipara Optical (“we”, “us”) runs an optical clinic and online shop with branches in Imus, Bacoor, and Las Piñas. This policy explains how we collect, use, share, and protect your personal information when you use our website, book an appointment, reserve frames, or visit a branch. We follow the Data Privacy Act of 2012 (Republic Act No. 10173) and its rules.
Data Protection Officer: [Data Protection Officer name] · panapaantiparaoptical@gmail.com · 0917-103-8246
What we collect
- Account details: name, email address, and a password (stored only as a one-way hash). If you sign in with Google, we receive your name, email, and Google account ID.
- Contact and identity: phone number, birth date, age, gender, and your address, including map coordinates if you pin your location.
- Health information (sensitive): eye-exam results, visual acuity, eye pressure, findings, diagnosis, prescriptions, and notes by our optometrists. This also includes prescription images or exam files you or our staff upload.
- Appointments and reservations: branch, date and time, service, status, cancellations and no-shows, items reserved, vouchers, and claim dates.
- Payments: amount, status, and reference numbers from our payment provider. We do not see or store your GCash or Maya login or PIN.
- Shop activity: items in your bag, wishlist, and product reviews.
- Security data: email and IP address of login attempts, one-time codes (OTP), and restrictions placed on an account.
- Newsletter: your email address, if you subscribe.
Why we use it
- To create and secure your account and verify your email.
- To schedule and carry out eye exams, keep your clinical record, and prepare your glasses.
- To process reservations and payments and send confirmations and reminders.
- To keep our inventory, sales, and clinic operations accurate.
- To prevent fraud, abuse, repeated no-shows, and unauthorized access.
- To send our newsletter, only if you subscribed. You can unsubscribe at any time.
Because health information is sensitive personal information, we process it only with your consent or where the law allows (for example, to provide healthcare you requested). We ask for your consent when you sign up and book.
Who can see it
Inside PanapaAntipara: only authorized staff, based on role. Optometrists see clinical records; admin and owner accounts see what they need to run reservations, inventory, and reports.
Service providers we use:
- PayMongo processes GCash/Maya payments for reservations.
- Google provides sign-in and the email service that sends our verification codes and notices.
- OpenStreetMap (Nominatim) converts a map pin into an address when you use the location picker.
- Content delivery and font providers (such as jsDelivr and Google Fonts) load site styles and fonts, and therefore see your IP address.
We do not sell your personal information. We disclose it to others only when you ask us to, when needed to complete a service, or when required by law or a government agency.
Virtual try-on camera
If you use the virtual try-on, your browser asks for camera access. The video is processed on your device and is not uploaded to or stored on our servers.
How long we keep it
- Patient and clinical records: archived after about 24 months of inactivity and kept for 7 years afterwards.
- Appointments, reservations, and similar records: kept for about 2 years after they are archived.
- One-time codes and login-attempt records: short-lived, cleared regularly by automatic cleanup.
When the retention period ends, we review the record and securely delete or anonymize it unless the law requires us to keep it longer.
How we protect it
- Passwords are stored as one-way hashes; we cannot read them.
- Logins are protected by email verification codes and limits on repeated failed attempts.
- Forms are protected against forged requests, and the session cookie is HttpOnly.
- Prescription and exam files are not publicly accessible; they are shown only to the signed-in owner or authorized staff.
- Access to staff areas is by role, and data is backed up regularly.
No system is perfectly secure. If a breach puts your data at risk, we will notify you and the National Privacy Commission as the law requires.
Your rights
You may ask us to: see what we hold about you; correct inaccurate information; object to or restrict certain processing; withdraw your consent; request deletion or blocking of data we no longer need; and receive a copy of your data. Many details can be edited in My Account. For anything else, contact our Data Protection Officer above. Some clinical records must be kept for a period set by law or professional standards, and we will explain if we cannot delete something.
If you believe your rights were violated, you may file a complaint with the National Privacy Commission (privacy.gov.ph).
Children
Patients under 18 must have a parent or legal guardian make the booking or give consent. The guardian is responsible for the information provided for the minor.
Cookies
We use a session cookie to keep you signed in and to protect forms. We do not use advertising or third-party tracking cookies.
Changes and contact
We may update this policy and will change the date below when we do. For questions, email panapaantiparaoptical@gmail.com or call 0917-103-8246 (Bacoor) / 0917-703-3102 (Las Piñas).
Last updated: October 16, 2026