Privacy Policy

For purposes of the Data Privacy Act, Play PALS Child Development Center is the Personal Information Controller (PIC) responsible for the personal data described in this policy. If you have any questions or concerns about how your data is handled, you may reach our team at playpalscdc@gmail.com, our designated privacy contact point.

We collect information directly from you when you:

• Submit a waitlist or inquiry form on our website;
• Request a progress report or certificate;
• Create or use a parent or staff portal account;
• Upload proof of payment for an invoice; or
• Contact us directly by email or phone.

The categories of personal data we collect include:

• Contact and identifying information — parent/guardian name, email address, phone number, and home address.
• Your child's information — full name, date of birth, age, and sex.
• Sensitive personal information — your child's diagnosis, referring doctor, recommended interventions, enrolled therapy services, assigned therapists, and session or progress records. Health-related information like this is treated as sensitive personal information under the Data Privacy Act and is given a higher standard of protection.
• Account credentials — email address and password for parent and staff portal accounts.
• Billing and payment information — invoice details, payment method, reference numbers, and images you upload as proof of payment. We do not collect or store your full card or bank account numbers.

• To respond to waitlist and inquiry submissions and schedule an intake or consultation;
• To deliver occupational, physical, speech, and special education therapy services, and to maintain accurate clinical and session records;
• To create and manage invoices, and to verify submitted proof of payment;
• To operate parent and staff portal accounts, including login and identity verification;
• To process requests for progress reports and certificates;
• To communicate with you about your child's care, appointments, and account; and
• To comply with applicable recordkeeping, tax, and regulatory obligations.

We process your personal data on the basis of your consent (for example, when you submit a form), the necessity of a contract (to deliver the services you enrolled in and to bill for them), and our legitimate interest in operating and securing our website and portal.

Because our services are provided to children, we necessarily collect information about minors. This information is provided by, and processed with the consent of, a parent or legal guardian on the child's behalf. We only use a child's information for the purposes described in this policy — namely, to provide and coordinate their therapy services.

Your data is stored with Supabase, our database and authentication provider, which encrypts data in transit and at rest, and our website is hosted on Vercel. Access to client records, session notes, and payment information within our admin dashboard is restricted by staff role — for example, therapists can see clinical records for their clients, while billing information is limited to admin and secretary accounts. We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

Our portal uses essential cookies to keep you securely logged in to your account. We do not currently use third-party advertising or analytics cookies to track you across the web.

We retain your child's clinical and session records for as long as they are enrolled with Play PALS, and for a reasonable period afterward to meet our recordkeeping, tax, and legal obligations. Waitlist submissions that do not result in enrollment are kept only as long as reasonably needed to follow up, after which they are deleted or anonymized. You may request earlier deletion of your data as described in Section 8 below, subject to any legal or contractual obligations that require us to keep it.

Under the Data Privacy Act of 2012, you have the right to:

• Be informed that your personal data will be, are being, or have been processed;
• Object to the processing of your personal data;
• Access your personal data that we hold;
• Correct (rectify) any inaccurate or outdated personal data;
• Erasure or blocking of your personal data under certain conditions;
• Data portability — to obtain a copy of your data in an electronic format;
• Damages for any harm caused by inaccurate, incomplete, or unlawfully processed personal data; and
• File a complaint with the National Privacy Commission if you believe your rights have been violated.

To exercise any of these rights, please contact us at playpalscdc@gmail.com. We will respond to your request within a reasonable time.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal data is handled, please contact us at playpalscdc@gmail.com.