BloodLink
Privacy Policy
Last updated: October 14, 2026
BloodLink is a student capstone project. This policy describes how the system handles information as it is built today. It follows the principles of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
1. What we collect
We collect only what the service needs to connect donors, requesters and blood banks.
| When you | We collect |
|---|---|
| Create an account | Your name, email address, city, an optional phone number, an optional profile picture, and your password. The password is stored in a scrambled (hashed) form that nobody, including us, can read. We also note the date and time you agreed to the Terms of Service and this Privacy Policy. |
| Appearance settings | The text size, sidebar colour, reduce motion and high contrast choices you make under Account Settings. They only change how BloodLink looks for you. |
| Submit a donor card | Your blood type and the photo or file of your ID or donor card. |
| Request blood | The blood type and number of bags needed, the hospital and city, the reason, the date it is needed by, and the doctor's request or other proof document you upload. |
| Donate | The blood bank records the date and blood type of your donation (one bag), the bag's number, and the drive or request it was for. |
| Use your check-in code | A random code, made the first time your donor card or a drive you signed up for is shown. Its QR code lets blood bank staff find your account at a drive. The code says nothing about you by itself, and only blood bank staff can open the page it leads to. |
| Sign up for a drive or offer to help a request | That you did so, and when. |
| Register an organization | The organization's name, type, city, contact number, representative, storage facility details, map location and its verification document. |
| Be added to an organization's staff | Your name and work email, entered by the organization's owner or a manager, your role there, who added you, and, if you are removed, when. Your actions for the organization are recorded under your name and shown in its activity log; after removal they stay there, but you can no longer sign in. |
| Post a donation drive | The drive's title, date, place and street address, and optionally a contact person's name and number. These are shown to members so they can find the drive and ask about it, so enter a work number and only with that person's agreement. |
| Use the site while signed in | A record of key actions (for example "request posted" or "donor card approved") and the notifications sent to you. |
A blood type, a medical reason and a doctor's document are sensitive personal information. We ask for them only because a blood bank cannot act on a request or accept a donor without them.
2. How we use it
- To run your account and let you sign in.
- To send your blood request to the blood bank you chose, so it can review the document, confirm the priority and release units.
- To let blood banks verify donors and record donations.
- To show you your own history: requests, donations, sign-ups and activity.
- To notify you when something changes, such as a request being fulfilled, in BloodLink and by email unless you turn email off in Account Settings.
- If you have a donor card and are marked available, to tell you once after each donation when the waiting time is over and you can donate again. Press "Pause for now" on your donor card to stop these and the blood-needed messages below.
- If you have a donor card, are marked available and can give again, to tell you when a blood bank in your city needs blood your type can give. We use your city, blood type and last donation date for this; the person who needs the blood is never named.
- To let administrators verify organizations and donor cards and keep the platform safe.
We do not sell your information, and we do not use it for advertising.
3. Who can see it
| Who | What they can see |
|---|---|
| Other donors | On the open requests page they see only the need: blood type, number of bags, hospital, city, the priority the blood bank set and the needed-by date. They never see the requester's name or contact details. |
| The blood bank you send a request to | Your name, your email or phone, the request details and the proof document. |
| A blood bank you offer to help or whose drive you sign up for | Your name and the blood type on your donor card. |
| Blood bank staff logging a donation | They can find a member by name, by the exact email the member gives them, or by scanning the member's check-in code, to attach the donation to the right account. They see your name, city, the blood type on your donor card and whether your last donation was long enough ago, never your email or phone. Messages to donors are sent by BloodLink, not by the blood bank. |
| A blood bank, in its own downloads | A blood bank can download its records as a spreadsheet: the requests sent to it (with the requester's name), its stock movements, and who donated at its drives. Administrators can download organizations and requests, without the requester's name. |
| Blood banks and administrators, where your name is listed | Your profile picture, if you added one. Other members never see it. |
| Administrators | Account details, donor card files and organization documents, in order to verify them, and the record of actions on the platform. |
Uploaded documents are kept in private storage. They are not reachable by a public link; the site shows a request's document only to the blood bank handling it, and donor card and organization documents only to administrators who verify them.
4. Your location
Some pages can show how far a blood bank or drive is from you. This happens only if you allow it in your browser. The distance is worked out on your own device. Your location is not sent to BloodLink and is not saved. You can withdraw the permission in your browser at any time.
5. Other services the site relies on
- Maps. Map images come from OpenStreetMap. When a map loads, their servers receive your device's internet address, as with any website. When an organization searches for a place while posting a drive, the words typed are sent to OpenStreetMap's search service.
- Fonts, icons and scripts. Some of these are loaded from public content networks, which also receive your device's internet address.
- Email. Notification emails are sent through the mail service the site is set up with, which receives your email address and the message.
- Google Calendar. Only if you click "Google Calendar" on a drive: your browser opens Google with that drive's public details (name, date, place). BloodLink sends nothing about you. The ".ics" calendar file is made by BloodLink and goes only to your device.
- Cookies. BloodLink uses only essential cookies, to keep you signed in and to protect forms. It does not use advertising or tracking cookies.
6. Storage and deletion
- You can change your name, email, phone and city in your profile, and your password in Account Settings.
- You can delete your account in Account Settings. This removes your account, your donor card and, for an organization account, the organization.
- Blood requests and donation records are kept after an account is deleted, with the name removed. Blood banks need these records to trace where each unit of blood came from and where it went.
- We keep information for as long as the account exists, or as long as a blood bank needs the related record.
7. Your rights
Under the Data Privacy Act you have the right to be informed about how your data is used, to see it, to correct it, to object to its use, to have it erased or blocked, and to complain to the National Privacy Commission. Most of these you can do yourself from your profile and Account Settings. For anything else, contact us.
8. Contact
Questions about this policy or about your information: support@BLOODLINK.example.
See also our Terms of Service.