ZHMS PRIVACY POLICY

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed through ZHMS, including information associated with account registration and authentication; member identity and profile management; Deposit Assistance; Withdrawal Assistance and processing records; payment and transaction verification; Service Center requests and support tickets; Events, invitations, QR codes, and attendance records; notifications and communications; administrative and operational records; security and audit logs; and other Hub services provided through ZHMS.

This Privacy Policy applies only to information processed through ZHMS and related Hub operations.

External platforms such as Zignals.net, banks, payment providers, cryptocurrency networks, and other third-party services may maintain their own privacy policies and data-processing practices.

2. Personal Information We May Collect

Depending on the services you use, ZHMS may collect or process account and identity information including full name, email address, contact information, date of birth or other profile information when required, ZHMS Member ID, Hub affiliation, account status, profile photograph or avatar, Referral Code, Sponsor Code when applicable, and other information necessary to identify and maintain the member's account.

ZHMS may process account and security information necessary to secure accounts and maintain system integrity, including authentication records, login and logout information, active session information, account-security events, device or browser information, IP address or similar technical information where collected by the system or its infrastructure, password-reset and email-verification records, and security and administrative audit logs.

Passwords are not intended to be stored in readable form.

When using Deposit Assistance or related services, ZHMS may process information such as deposit amount, payment method or payment channel, transaction date and time, transaction or reference number, cryptocurrency transaction information when applicable, wallet or payment destination information, uploaded payment receipts or screenshots, verification status, funding or processing status, and internal processing notes and audit records.

ZHMS does not automatically treat submission of payment information as confirmation that a payment has been received or that an external account has been funded.

Withdrawal requests may originate from an external platform such as Zignals.net and may subsequently be recorded in ZHMS by authorized personnel for Hub-side review and processing.

Withdrawal-related information may include member identification, withdrawal reference, amount, request and processing dates, payment or release information, processing status, verification information, supporting records, and administrative or audit notes.

When you contact the Hub or submit a Service Center request, ZHMS may process request subject, request description, category, attachments, messages and replies, request status, assigned personnel, resolution information, and request history and audit records.

For Events managed through ZHMS, information may include guest or member name, Guest or Invitation ID, QR Invitation Code, Event registration information, attendance or check-in status, and related Event records.

3. How We Use Personal Information

Personal information processed through ZHMS may be used to create and maintain member accounts; verify member identity; assign and maintain permanent ZHMS Member IDs; authenticate users and protect accounts; provide Hub services and member assistance; process and verify Deposit Assistance records; record and process Withdrawal Assistance; review payment and transaction information; respond to Service Center requests; send operational notifications and communications; manage events and attendance; prevent fraud, abuse, and unauthorized access; investigate security incidents; maintain administrative and audit records; improve system reliability, usability, and security; maintain accurate operational records; fulfill legitimate business and operational requirements; and comply with applicable legal and regulatory obligations.

ZHMS will not intentionally use personal information for purposes that are incompatible with the reason for which it was collected unless permitted or required by applicable law.

4. Legal Basis and Purpose of Processing

Personal information may be processed where appropriate based on your consent; the performance of services you request; legitimate operational and security requirements; compliance with legal obligations; protection of users, accounts, systems, or transactions; or other lawful grounds permitted under applicable Philippine law.

Where consent is the applicable basis for processing, it should be freely given, informed, and specific to the relevant purpose.

Withdrawal of consent does not necessarily require deletion of records that ZHMS is legally or legitimately required to retain.

5. Accuracy of Information

Users are expected to provide accurate and current information.

Members may be permitted to update certain profile information through ZHMS.

Some information may become read-only after verification, including permanent Member IDs and confirmed referral or sponsor information.

Where correction of protected or verified information is required, the member may be required to contact an authorized Admin or Developer so the correction can be properly reviewed and recorded.

6. Uploaded Documents and Receipt Recognition

ZHMS may allow users to upload receipts, screenshots, profile images, and other supporting documents.

Automated receipt-reading or Optical Character Recognition (OCR) technology may be used to assist with extracting information from uploaded receipts.

OCR and similar automated tools are provided as a convenience and may not always interpret information correctly.

Members remain responsible for reviewing and confirming transaction information before submission.

Manual submission remains available where required information can be provided without automated extraction.

7. Access to Personal Information

Access to information stored in ZHMS is restricted according to user roles and operational responsibilities.

Depending on their authorized role, access may be provided to the member to whom the information relates, authorized Hub Staff, authorized Administrators, authorized Developers or system administrators, and other authorized personnel where access is necessary for legitimate operational, security, support, or compliance purposes.

Users are provided only the level of access appropriate to their role.

ZHMS personnel must not access member information for personal or unauthorized purposes.

8. Sharing and Disclosure of Personal Information

ZHMS does not sell members' personal information.

Information may be disclosed or made accessible only where reasonably necessary for legitimate purposes, including to authorized Hub personnel; Zignals.net or applicable authorized operational personnel where necessary to complete member assistance; infrastructure, database, authentication, hosting, storage, email, or communication service providers; payment-related service providers where applicable; professional advisers or service providers subject to appropriate confidentiality obligations; or government authorities or other parties when disclosure is required by law, lawful order, or valid legal process.

Service providers that process personal information on behalf of ZHMS should receive only the information reasonably necessary to perform their authorized functions.

9. Third-Party Platforms and Services

ZHMS may interact with or rely upon third-party services for functions such as authentication, database hosting, file storage, email delivery, website hosting, payment processing or verification, cryptocurrency transaction verification, and external account operations.

These third parties may process information according to their own contractual, privacy, and security obligations.

Use of an external service, including Zignals.net, may also be subject to that service's own Terms and Privacy Policy.

10. Data Security

ZHMS uses reasonable administrative, organizational, and technical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, loss, misuse, or destruction.

Security measures may include, where appropriate, authentication and authorization controls; role-based access restrictions; secure password handling; email verification; session-management controls; database access controls; protected file storage; row-level or record-level access restrictions; audit and activity logging; security monitoring; logout and session-revocation controls; and software and infrastructure security updates.

No internet-connected system can guarantee absolute security. ZHMS therefore continually evaluates and improves safeguards appropriate to the nature of the information being processed.

11. Data Retention

ZHMS retains personal information only for as long as reasonably necessary for the purposes for which the information was collected, legitimate Hub operations, security and audit requirements, dispute resolution, establishment or defense of legal claims, and applicable legal or regulatory requirements.

Different categories of records may have different retention periods.

For example, account information, transaction records, withdrawal records, Service Center history, security logs, and administrative audit records may need to be retained for different periods based on their operational or legal purpose.

When information is no longer required and no lawful or legitimate reason exists to retain it, it should be securely deleted, anonymized, or otherwise disposed of using appropriate safeguards.

12. Account Deactivation and Record Retention

Deactivating, suspending, or closing a ZHMS account does not necessarily result in immediate deletion of all information associated with the account.

ZHMS may retain necessary records relating to completed transactions, Deposit and Withdrawal Assistance, security incidents, audit history, support requests, fraud prevention, legal obligations, or legitimate operational records.

Information that is no longer required should be securely removed or anonymized in accordance with applicable retention procedures.

13. Cookies and Technical Information

ZHMS may use cookies, authentication tokens, browser storage, or similar technologies that are necessary for maintaining authenticated sessions, remembering user preferences, protecting account security, maintaining application functionality, and improving system performance.

Where optional analytics or other non-essential tracking technologies are introduced in the future, appropriate notices or consent mechanisms should be provided where required.

14. Communications and Notifications

ZHMS may send communications necessary for operating the service, including email verification, password-reset messages, security notifications, request-status updates, transaction-assistance updates, administrative notices, Event-related communications, and important service announcements.

Certain essential operational or security communications may not be optional while an account remains active.

15. Children's Privacy

ZHMS is intended for persons authorized to use the applicable Hub services.

Where processing of information belonging to minors becomes necessary, appropriate consent, authorization, and safeguards should be applied as required by applicable law and the nature of the service.

16. Your Privacy Rights

Subject to applicable law and any lawful limitations, individuals whose personal information is processed by ZHMS may have the right to be informed about the collection and processing of their personal information; access personal information maintained about them; request correction of inaccurate or incomplete information; object to certain forms of processing where legally applicable; request erasure or blocking of personal information where legally applicable; exercise data portability rights where applicable; withdraw consent when processing is based on consent, subject to lawful limitations; seek compensation or damages where provided by law; and file a complaint with the National Privacy Commission when they believe their privacy rights have been violated.

Some requests may be subject to identity verification and lawful limitations.

For example, ZHMS may be unable to erase information that must be retained for legal obligations, transaction records, security investigations, fraud prevention, legitimate claims, or other lawful purposes.

17. Exercising Your Privacy Rights

A member who wishes to access, correct, or raise concerns regarding personal information may submit a request through the official Hub support channel or ZHMS Service Center.

ZHMS may require reasonable identity verification before fulfilling a privacy request to prevent unauthorized disclosure or modification of another person's information.

Requests will be reviewed and handled in accordance with applicable law and operational requirements.

18. Personal Data Breaches

If ZHMS becomes aware of a personal data breach, the incident will be assessed and addressed according to applicable security procedures and legal requirements.

Where notification is required by applicable law or National Privacy Commission regulations, affected individuals and/or the appropriate authorities will be notified in accordance with those requirements.

Users should immediately report suspected unauthorized access, account compromise, or disclosure of personal information through an authorized Hub communication channel.

19. Changes to This Privacy Policy

This Privacy Policy may be revised when ZHMS introduces new features; data-processing practices change; security procedures are updated; Hub operations change; or applicable legal or regulatory requirements change.

Material changes may be announced through ZHMS or other official Hub communication channels.

The effective or last-updated date of the Privacy Policy will be displayed at the beginning of this document.

20. Privacy Contact

Questions, requests, or concerns regarding this Privacy Policy or the handling of personal information may be submitted through the official ZHMS Service Center or authorized Zignals CDO Hub communication channels.

Additional contact information may be published within ZHMS or on the official Hub website.

Individuals also have the right to contact or file an appropriate complaint with the National Privacy Commission of the Philippines when applicable.