Privacy Notice for Profile Verification

Who handles your data

REN.PH is the personal information controller for this verification. For any privacy question, or to reach our Data Protection Officer, email admin@ren.ph.

Why we ask you to verify

Broker profiles on REN.PH are built from public regulatory records. Verification confirms that the person claiming a profile is the licensed broker named on it. This protects you from someone impersonating you and taking control of your profile, and protects the public from a fraudulent claim. Verification is optional and broker-initiated. You choose to do it; we do not require it to use the site.

What we collect

When you submit a verification, you provide:

• One photo of the front of your PRC ID, which you redact before uploading (see below).
• Your PRC license number, typed into the form. We use it only to confirm it matches the last 4 digits visible on your card.
• Your confirmations (the consent checkboxes you tick before submitting).

Your name is already on your public profile, so we do not collect it again here.

You redact sensitive details before uploading

Before you take the photo, we ask you to cover three things, because under the Data Privacy Act they are Sensitive Personal Information and we do not need them to verify you:

• Your birthdate: cover it completely.
• Your full license number: cover everything except the last 4 digits.
• Your signature: cover it completely.

If any of these are still visible when our reviewer looks at your photo, we reject the submission and ask you to re-upload. We do this to keep less of your sensitive data on our servers, which lowers your risk if anything ever goes wrong.

What we store, and what we never store

We are deliberate about keeping as little as possible. Here is exactly what happens to your PRC number:

• We convert it into a one-way hash (a scrambled value that cannot be reversed back into your number) and store that.
• We store the last 4 digits separately, to match against your card.
• We never store your full license number. It is discarded in the same step, and it is never written to our logs.

After our reviewer makes a decision, we keep only the result of the review, the timestamps, the reviewer's ID, the hash, and the last 4 digits. We do not keep your photo, your birthdate, your signature, or your full license number.

Who sees your photo

Your photo is stored in private, encrypted storage. It is never made public, never linked from any page, and never shown to other users. Only authorised REN.PH reviewers can open it, through an access-controlled internal tool. Our storage and hosting providers (Cloudflare and Supabase) process the data on our instructions and on our behalf.

How long we keep your photo

We delete your photo as soon as a reviewer approves or rejects your submission. As a guarantee, your photo is permanently deleted within 7 days of upload no matter what, including if you abandon the process and we never review it. This 7-day limit is enforced automatically by our storage system, independently of our application.

What happens after you submit

A REN.PH reviewer checks your submission, typically within 1 to 2 business days. We email you the outcome:

• Verified: your profile transfers to you and shows a "Verified Broker" badge.
• Needs a clearer photo or better redaction: we tell you what to fix and you can re-upload.

Either way, your photo is deleted within 7 days as described above.

Our lawful basis

Your PRC license is sensitive personal information, so we rely on your consent under Section 13(a) of the Data Privacy Act, which you give by ticking the single, dedicated consent box and submitting. This consent is specific to verifying this claim and is not bundled with our Terms of Service. We are also acting on our legitimate purpose of preventing impersonation of licensed professionals. You can decline at any point before submitting simply by not uploading.

Your rights

Under the Data Privacy Act of 2012 (RA 10173), you have the right to be informed, and to access, correct, erase, object to, and port your personal data. You may also withdraw your consent at any time. Because your photo and sensitive details are deleted within 7 days and we keep only a minimal record of the verification result, an erasure request after review concerns only that record. Withdrawing consent or requesting deletion removes your verified status until you re-verify, and you can do this yourself from your dashboard once verified.

To exercise any of these rights, contact us at admin@ren.ph. You may also file a complaint with the National Privacy Commission at privacy.gov.ph.

Changes to this notice

This is version 1.0. If we materially change how we use your ID, we will ask for your consent again before the new use, and publish a new version here.

Contact us

If you have questions about this notice or how we handle your verification data, please contact us: