Data Privacy Policy

Last updated: 13 August 2026

Chef MD — The Healthy Project Nutrition Center ("THP", "we", "us") is the Personal Information Controller for the information you give us. This policy explains what we collect, why we collect it, who sees it, how long we keep it, and the rights you have under the Data Privacy Act of 2012 (Republic Act No. 10173).

We ask you to read this before you create an account. Your health information is sensitive, and we would rather you know exactly how it is handled.

What we collect

Account and contact information. Your name, email address, mobile number, date of birth, sex, address, city, profile photo, and an emergency contact.

Health information. Your medical history, current conditions, medications and supplements, allergies, food restrictions, height, weight and other body measurements, laboratory results you choose to share, food intake logs, diary entries and food photos, and the notes your RND records during and after your consultation. Under RA 10173 this is sensitive personal information, and we treat it accordingly.

Identification documents. If you claim a Senior Citizen or PWD discount, the ID you upload so an administrator can verify your eligibility.

Payment information. The amount, date, status, and method of each payment. We never see or store your full card number. Card details are entered directly into secure fields hosted by our payment provider, Xendit. If you choose to save a card, we store only a masked reference (such as the last four digits and the card brand) and a token held by Xendit.

Session recordings. Where your RND records a counseling session, the recording is stored privately and is available only to authorized staff.

Technical information. Sign-in activity and basic device and usage information, which we use to keep accounts secure and to fix problems.

Why we use it, and on what basis

We use your information to:

• prepare your nutrition assessment, Diet Rx, prescription, and meal plan;
• schedule and deliver your consultation with an RND;
• have your plan reviewed by an auditor before it is released to you;
• prepare and deliver your meals, including allergen handling, if you are on a Full-Service Plan;
• process payments, issue official receipts, and apply Senior Citizen or PWD discounts;
• send you service messages — booking confirmations, payment receipts, plan-ready notices, delivery updates, and program reminders;
• keep the Service secure, and keep the records our regulators and tax authorities require.

We rely on your consent for processing your sensitive health information, on the performance of our contract with you for delivering the service you paid for, on our legal obligations for tax, receipt, and record-keeping duties, and on our legitimate interests for keeping accounts secure and preventing fraud.

We do not sell your personal information, and we do not use your health information for advertising.

Who sees your information

Inside THP, access follows your care, not curiosity. Each role sees only what its work requires:

• your Registered Nutritionist-Dietitian sees your assessment, health information, plan, and diary;
• an auditor reviews your clinical documents before release, and monitors care quality;
• the kitchen sees, for Full-Service clients only, your delivery address and window, your meals for the day, and your allergies and food restrictions — it does not see your medical history, laboratory results, or consultation notes;
• administrators see account, billing, and verification records.

Outside THP, we share information only with service providers who help us run the Service, and only as much as they need:

• Xendit, our payment provider, for processing payments and refunds;
• Resend, for sending transactional email;
• our hosting and file-storage providers, for running the platform and storing uploaded files;
• professional advisers and government authorities, where the law requires it.

These providers act on our instructions and are bound to protect your information. Some of them process data outside the Philippines; where that happens we take steps to ensure your information keeps an equivalent level of protection.

How we protect it

Access is controlled by role and checked on every request. Passwords are stored hashed, never in readable form. Connections are encrypted in transit. Uploaded files — identification documents, medical records, and session recordings — are stored in a private bucket and are served only to signed-in, authorized users; they are never publicly linkable. Administrative and clinical actions are written to an audit log.

No system can be guaranteed completely secure. As our consent form notes, we cannot guarantee your data against unlawful hacking, though we take reasonable and appropriate measures to prevent it.

How long we keep it

We keep clinical records for as long as your account is active and afterwards for the period required of health records under Philippine law. Financial records, including receipts, are kept for the retention period required by the Bureau of Internal Revenue. Consent records are kept for as long as needed to show what you agreed to and when.

When a retention period ends, we securely delete or anonymize the information.

Your rights

Under the Data Privacy Act you have the right to:

• be informed about how your information is collected and used;
• access the personal information we hold about you, and get a copy;
• object to processing, and to withdraw a consent you previously gave;
• correct information that is inaccurate or out of date;
• erase or block information that is unlawfully processed, no longer necessary, or that you have withdrawn consent for;
• data portability — receive your information in a commonly used electronic format;
• damages for harm caused by inaccurate, unlawfully obtained, or unauthorized use of your information;
• complain to the National Privacy Commission.

You can update most of your details yourself in your profile. For anything else, email us and we will respond within a reasonable period.

Withdrawing consent. You may withdraw your consent to processing your health information at any time. Please note that we may then be unable to continue providing nutrition care to you, and that withdrawal does not undo processing already carried out lawfully.

Cookies and local storage

We use your browser's local storage to keep you signed in and to remember small preferences, such as whether you have seen the guided tour. We do not use advertising or cross-site tracking cookies.

Children

The Service is intended for adults. We do not knowingly collect information from anyone under 18 except where a parent or guardian provides it as part of their own care arrangement. If you believe a child has given us information directly, contact us and we will remove it.

Changes to this policy

We may update this policy. Each update is published as a new version with its own date, and we will ask you to review a material change before you continue using the Service.

How to reach us

To exercise a right, ask a question, or raise a concern about your information, email our Data Protection Officer at thpconsultant@chefmdrx.com.

If you are not satisfied with our response, you may bring a complaint to the National Privacy Commission, 5th Floor, Delegation Building, PICC Complex, Pasay City — privacy.gov.ph.