Privacy notice
Last updated: 28 October 2026
DumaSnap makes school ID cards. To make your child's ID, we need their photo and some personal information. This notice explains what we collect, why, who sees it, how long we keep it and what your rights are under the Data Privacy Act of 2012 (Republic Act No. 10173).
Who we are
DumaSnap is run by Maria Christina Ganados Linehan, a photographer in Zamboanguita, Negros Oriental, Philippines. She decides how the information is used (she is the personal information controller) and is also the data protection officer. Contact her about anything in this notice:
- Email: [email protected]
- Phone: 0908 480 7352
- Facebook: DumaSnap
What we collect
About the student:
- full name, Learner Reference Number (LRN) and date of birth;
- school, grade, section and school year;
- sex, only if it is in the class list the school gives us;
- the photos we take, the finished portrait and the ID card.
About the emergency contact printed on the ID: name, relationship, address and phone numbers.
About the order: order number and dates, price, payments (amount, method, date and the GCash or MariBank reference number) and notes.
About class advisers: name and phone number. When an adviser uses the checking page on our website, we record the time, IP address and browser of each visit and every change they make.
When you visit dumasnap.com: our server logs record the pages requested, but not your IP address or browser. The site sets only the cookies it needs to work: one keeps an adviser signed in and one protects forms; Cloudflare may add a security cookie. There are no advertising or analytics cookies and no tracking scripts.
Where it comes from
- From you, when you order an ID or send us your child's details through the class Facebook group, Messenger, email or phone.
- From the school: the class adviser gives us the class list and checks the details and photos on our website.
- From us: the photos we take.
What we use it for
- to take and prepare your child's photo and make the ID card;
- to check the details with the class adviser before printing;
- to send you a preview, take payment, print the ID and deliver it through the class adviser;
- to contact you about your order;
- to make next year's ID faster if you order again;
- to keep the information and our systems secure.
We do not sell your information or use it for advertising. We do not post your child's photos online without asking you first.
Why we may use it
We use your child's information with the consent of a parent or guardian, given before photo day or when you order, and because we need it to make and deliver the ID. You can withdraw your consent at any time (see Your rights). We keep the records of advisers' visits and changes to protect the information.
Who else sees it
- The school. Your child's class adviser sees the details and small photos of their own section only, to check them, and receives the finished IDs to hand out. If you pay through the adviser, the adviser knows that you paid.
- Our service providers. They store or carry information for us and may not use it for anything else:
- Cloudflare, Inc. (USA): our domain name, the connection to our website, storage of small photo previews for advisers and of our encrypted backups;
- OVHcloud (Canada): the server that runs our website.
- Meta (Facebook and Messenger). When you send us details through Facebook or Messenger, Meta processes them under its own privacy policy. We send previews and adviser links through Messenger.
- GCash and MariBank. When you pay by GCash or by transfer to our MariBank account, they process the payment under their own terms. We keep only the amount, the date and the reference number.
- Government authorities, only when the law requires it.
We use an AI service to design card backgrounds. It never receives your child's photos or details. If you lend us an old ID as a design sample, we cover the face and the personal details before the AI service sees it.
Cloudflare and OVHcloud may keep information outside the Philippines. We remain responsible for it there.
Where it is stored
The original photos and the full records are kept on our own computer, which is not open to the internet. Our website keeps only what an adviser needs to check a section, and only for a short time.
How long we keep it
- Details and photos of students, contacts, orders and advisers, and the record of changes: 2 years after they were last updated (for example, after your last order), because most families order a new ID every year. Then we delete them.
- If you tell us you do not want an ID, or you cancel: we delete your child's photos and details within 30 days.
- On our website: only while needed, usually no longer than 14 days.
- Backups: deleted information can stay in our encrypted backups for up to 6 months, until they are replaced.
How we protect it
- Only the photographer and the person who maintains our systems can open the full records.
- Each class adviser gets a private link with a PIN for their own section only. The link works for a limited time, usually 14 days.
- The website uses an encrypted connection (HTTPS) and keeps no original photos. Advisers see small previews through links that expire after a few minutes.
- Files are named with random codes, not with children's names.
- Backups are encrypted.
Your rights
Under the Data Privacy Act you have the right to:
- be informed about how your information is used (this notice);
- see the information we hold about you or your child and get a copy;
- have wrong or incomplete information corrected;
- object to its use, withdraw your consent, and have it deleted or blocked;
- get a copy in a common electronic format to take elsewhere;
- be compensated for damage caused by wrong or unauthorised use;
- file a complaint with the National Privacy Commission.
A parent or legal guardian exercises these rights for a child. To use any of them, contact us by email, phone or Facebook. We may ask you to confirm who you are. We answer free of charge, within 30 working days at the latest.
If you withdraw your consent or ask us to delete the information before the ID is ready, we cannot make the ID.
Complaints
If you are not satisfied with our answer, you can complain to the National Privacy Commission: privacy.gov.ph, [email protected].
Changes to this notice
When we change how we use information, we update this notice and the date at the top. We announce important changes on our Facebook page.