Privacy Policy

This Privacy Policy explains how the Philippine College of Radiology ("PCR," "we," "us," or "our") collects, uses, stores, discloses, and otherwise processes personal data submitted through the PCR Events Portal or collected in connection with an event.

By completing an event registration form, submitting personal data, or using an event registration or attendance service, you acknowledge the processing described in this Policy and, where consent is the applicable lawful basis, consent to such processing. PCR processes personal data in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its implementing rules and regulations, and other applicable laws.

Depending on the event and the services you use, we may collect:

• identity and contact information, including your name, email address, telephone number, and address;
• professional and eligibility information, including your designation, membership information, PRC registration details, and a copy of your PRC ID when required or provided;
• event-related information, including your selected registration type, dietary requirements, emergency contact details, application or registration status, and assigned registrant or ticket number;
• payment and transaction information, including payment method, reference or trace numbers, proof of payment, and payment-verification status; and
• system and attendance records, including registration identifiers, submission and check-in timestamps, scanning-station or device labels, and technical records reasonably necessary to operate and secure the portal.

The information requested may vary by event. PCR will seek to collect only data that is adequate, relevant, and reasonably necessary for the stated purposes.

We may process your personal data to:

• create and administer your event registration;
• determine registration eligibility and applicable fees;
• process, verify, reconcile, and document payments;
• issue registration confirmations, tickets, attendance records, certificates, and other event-related materials where applicable;
• communicate event instructions, changes, reminders, and support updates;
• administer event access, attendance, safety, reporting, and operational requirements; and
• comply with legal, regulatory, accounting, audit, security, and legitimate organizational requirements.

We collect information reasonably necessary to process and verify an event registration fee.

Cash, bank transfer, or QR payment. Where applicable, we may require proof of payment, such as a deposit slip, receipt, or transaction screenshot. We use this information to verify, reconcile, and confirm your payment and registration.

Maya Checkout. If you choose Maya Checkout, you will be redirected to Maya's payment gateway. Payment credentials and sensitive financial details entered on that gateway are collected directly by Maya and are governed by Maya's own privacy policy and terms. PCR does not receive your full card or account credentials; we receive only the transaction information and payment status required to process your registration.

PCR does not sell or rent your personal data. Subject to appropriate access controls and confidentiality obligations, your information may be made available only to:

• PCR and personnel authorized to administer the event;
• the organizers and authorized operational personnel of the event for which you registered; and
• relevant third-party companies that provide or support the systems used for portal hosting, data storage, authentication, security, payment processing, communications, registration, and attendance tracking.

Third-party providers may process personal data only to deliver their contracted services, comply with applicable law, or protect the security and integrity of their services. We may also disclose information where required by law, lawful process, or a competent government or regulatory authority.

PCR may store personal data in secured systems located within or outside the Philippines. Where a service provider processes information in another jurisdiction, PCR will require safeguards appropriate to the nature of the data and the processing involved.

We retain personal data only for as long as reasonably necessary to fulfill the purposes described in this Policy, meet legal, regulatory, accounting, audit, and records-management obligations, resolve disputes, or establish, exercise, or defend legal claims. Data that is no longer required will be securely deleted, anonymized, or otherwise disposed of in accordance with applicable requirements.

PCR and its authorized service providers maintain reasonable organizational, physical, and technical safeguards designed to protect personal data against accidental, unlawful, or unauthorized access, alteration, disclosure, loss, or destruction. No method of electronic transmission or storage, however, can be guaranteed to be completely secure.

Subject to the conditions and limitations provided by applicable law, you may exercise your rights to be informed, object to processing, access your personal data, request correction of inaccurate or incomplete information, request erasure or blocking, obtain data portability where applicable, and lodge a complaint with the National Privacy Commission.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing performed before withdrawal. Withdrawal, objection, deletion, or blocking may limit PCR's ability to complete your registration, verify attendance, issue event credentials or certificates, or provide other requested services.

For questions, concerns, or requests relating to this Privacy Policy or the exercise of your data privacy rights, contact the Data Privacy Officer at pcr.support@techsouthgate.com.