Privacy notice

What we collect

When you join a waitlist

• Your email address, and if you give them, a shop name, a compound you are interested in, the number of buyers in a group and a short message.
• The page you signed up from and any campaign tags in the link you followed.
• A one-way keyed hash of your IP address, used only to limit repeated sign-ups from one connection. We do not store the IP address itself, and the hash cannot be turned back into it.
• If we send you a confirmation email: when it was sent, a hash of the link's one-time code and when you confirmed.

When you order a test

Your contact details, so we can reach you about the order, and what you send in: the compound, the vendor, the batch and the label amount. The vial details go on the test record. Your name and contact details never do.

When you browse

We do not use advertising trackers, analytics cookies or third-party form services, and the site sets no cookies of its own. Like any website, our hosting provider sees your IP address in order to deliver each page.

Why

• Waitlist: to email you once when testing, group tests or vendor testing open, as you asked. Our lawful basis is your consent, which you can withdraw at any time.
• Confirmation email: to check that the address is yours before we keep it.
• The IP hash: to protect the form from abuse.
• Orders: to carry out the test you asked for and to tell you about its result, a correction or a vendor reply.

Test records

Records describe vials, not people. A public record names the vendor and the batch. You can choose a private record, which opens only for people holding its key.

Who sees your data

Only Tested.ph and the services that run the site for us: our database host, which stores data in Singapore, and our website host. Partner laboratories receive coded samples and never receive your details. We never sell personal data or share it for marketing.

How long we keep it

• Unconfirmed sign-ups: if we sent you a confirmation email and you did not confirm, your sign-up is deleted 30 days after the email was sent. A deletion job runs for this. Sign-ups that were never sent a confirmation email are not deleted this way.
• Confirmed sign-ups, and sign-ups that were never sent a confirmation email: kept until you ask us to delete them or we close that waitlist.
• The IP hash is stored with the sign-up and is deleted with it.
• Order contact details: kept while we may need to reach you about that test, and deleted when you ask, unless the law requires us to keep them.

Your rights and how to use them

Under RA 10173 you have the right to be informed, to access the data we hold about you, to have it corrected, to have it erased or blocked, to object to processing, to data portability, and to be compensated for damage caused by inaccurate or unlawfully used data. You can withdraw consent to the waitlist at any time.

To make a request, use the contact page. Leave the email address you signed up with and write what you want, a copy of your data, a correction or deletion, in the message. We reply to that address.

We may ask you to confirm the request from the address in question, so that nobody else can obtain or erase your data.

Complaints

If you think we have mishandled your data, tell us first so we can put it right. You can also complain to the National Privacy Commission, the Philippine authority that enforces the Data Privacy Act. The Commission usually asks that you first give us the chance to respond.