Privacy Policy
The Good Principal
Operated by Hibaro Book Publishing
Website: https://thegoodprincipal.com
Effective Date: October 19, 2026
Last Updated: October 19, 2026
1. Introduction
Welcome to The Good Principal.
The Good Principal is an online publishing platform operated under the business name Hibaro Book Publishing, based in the Philippines. We create and distribute digital books, journals, educational resources, and editorial content designed for school principals, aspiring school leaders, and educators.
We respect your privacy and recognize the importance of protecting the personal information you share with us.
This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you visit our website, purchase digital products, subscribe to our communications, submit comments, or otherwise interact with our services.
We aim to handle personal information in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and regulations, and other applicable data protection laws.
By using our website, you acknowledge that you have been provided with this Privacy Policy. Where consent is required by law, we will seek it separately.
2. Who We Are
Website and Brand: The Good Principal
Business Operator: Hibaro Book Publishing
Website Address: https://thegoodprincipal.com
Country of Operation: Philippines
Privacy Contact: thegoodprincipal@gmail.com
Business Address: Brgy. Makiwalo, Mondragon, Northern Samar, Philippines 6417
Hibaro Book Publishing operates The Good Principal and is responsible for determining how personal information collected through the website is used, subject to applicable law.
Where the business is registered as a sole proprietorship, the legally responsible operator is the registered proprietor trading under the business name Hibaro Book Publishing.
For privacy-related questions, requests, or concerns, please contact us using the email address above.
3. Information We Collect
Depending on how you interact with our website, we may collect the following categories of information.
3.1 Information You Provide Directly
When you purchase a digital product, subscribe to our newsletter, submit a comment, or contact us, we may collect:
- Full name or preferred display name
- Email address
- Billing address and country
- Telephone number, where requested
- Order and purchase information
- Information submitted through contact forms
- Comments, messages, and other voluntarily submitted content
- Newsletter subscription preferences and consent records
We request only information reasonably necessary for the relevant service or transaction.
3.2 Purchase and Transaction Information
When you purchase an ebook, journal, or other digital product, our WooCommerce store may record:
- Products purchased
- Order number and date
- Purchase amount and currency
- Billing details
- Payment method and transaction status
- Payment transaction identifiers
- Download permissions and related records
- Refund and customer service history
We use this information to process purchases, confirm orders, provide access to digital products, maintain financial records, and resolve payment-related concerns.
3.3 Payment Information
Payments are processed through authorized third-party payment service providers, including PayPal.
When you choose a payment method, you may be redirected to the payment provider or interact with payment services integrated into our checkout.
Payment providers process payment information according to their own privacy and security policies.
We do not intentionally collect or store complete payment card numbers, card security codes, or PayPal account passwords on our website.
We may receive limited payment confirmation information necessary to complete and document your purchase.
3.4 Information Collected Automatically
When you browse our website, our hosting platform, WordPress installation, and related technical services may collect information such as:
- Internet Protocol (IP) address
- Browser type and version
- Device type and operating system
- Pages visited and referring website
- Date and time of access
- Cookies and session identifiers
- Technical logs, security events, and error information
This information helps us operate the website, maintain security, troubleshoot problems, and understand website performance.
4. How We Use Your Information
We may process personal information for the following purposes:
Order processing and digital delivery
To process purchases, confirm payments, issue transaction communications, and provide access to purchased digital products.
Customer support
To respond to inquiries, resolve download problems, investigate payment concerns, and provide assistance.
Website administration and security
To maintain website functionality, detect suspicious activity, prevent spam, and protect the website and its visitors.
Newsletter and promotional communications
To send educational content, updates, free resources, and occasional product announcements where you have subscribed or where another lawful basis permits such communication.
Comments and community participation
To review, moderate, approve, display, or remove comments and other submissions in accordance with our community standards.
Legal and financial compliance
To maintain records, comply with tax and accounting obligations, respond to lawful requests, and protect legitimate legal interests.
Website improvement
To assess technical performance and improve the accessibility, usability, and reliability of our services.
We do not use personal information for purposes incompatible with those described in this policy without providing appropriate notice or obtaining consent where required.
5. Legal Bases for Processing
Depending on the circumstances and applicable law, we process personal information on one or more of the following grounds:
- Contractual necessity: To process purchases and deliver products requested by customers.
- Legal obligations: To maintain records and comply with applicable laws.
- Legitimate interests: To secure our website, prevent fraud, provide support, and maintain business operations, where permitted and appropriately balanced against individual rights.
- Consent: For activities such as optional newsletter subscriptions and non-essential cookies where consent is required.
- Other lawful grounds: Where processing is otherwise permitted under applicable data protection laws.
You may withdraw consent for consent-based activities, subject to applicable legal limitations.
Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal.
6. Email Subscriptions and Marketing Communications
Visitors may voluntarily subscribe to receive educational content, free resources, publishing updates, and occasional promotional emails from The Good Principal.
We may use an email marketing service, such as Mailchimp, to manage subscriptions and deliver communications when that service is connected and operational.
Where required, we obtain consent before sending marketing communications.
Purchasing a digital product or submitting a website comment does not automatically subscribe you to promotional emails.
If you subscribe, we may record your email address, subscription preferences, consent status, and relevant subscription activity.
You can unsubscribe from promotional emails through the unsubscribe link included in those messages or by contacting us directly.
Unsubscribing from marketing emails does not prevent us from sending necessary transactional communications relating to purchases, account security, or customer support.
7. Comments and Office Confessions
The Good Principal publishes editorial content, including Office Confessions, that explores the personal and professional experiences of school leaders.
7.1 Website Comments
When visitors leave comments, we may collect the information entered into the comment form, together with technical information used for moderation and spam prevention.
If a comment is approved, the display name and comment content may become publicly visible.
Email addresses submitted through comment forms are not intended to be publicly displayed.
We reserve the right to moderate or remove comments that violate our policies, disclose sensitive personal information, or create privacy or safety concerns.
7.2 Personal Stories and Submissions
Visitors who voluntarily submit stories, reflections, or confessions should avoid including identifying details about students, teachers, employees, schools, or other individuals.
Where stories are submitted for possible publication, we may review, edit, anonymize, or decline them to protect privacy and comply with editorial standards.
We will not treat a private submission as permission for public publication unless the contributor has authorized the relevant use.
If a submission contains personal information about another person, we may remove or withhold identifying details.
We encourage contributors to use pseudonyms and avoid unnecessary personal or sensitive information.
8. Cookies and Similar Technologies
Our website may use cookies and similar technologies to support essential functions.
These may include:
- Maintaining shopping cart contents
- Supporting checkout sessions
- Remembering website preferences
- Maintaining login sessions, where applicable
- Protecting the website from abuse
- Measuring website performance, where analytics tools are enabled
Some cookies are necessary for the website to function properly.
Other cookies, including optional analytics or advertising cookies, will be subject to applicable notice and consent requirements.
You may manage cookies through your browser settings and any cookie preference controls provided on our website.
Disabling essential cookies may affect shopping cart, checkout, or account functionality.
9. Advertising and Analytics
We may promote The Good Principal through external platforms, including Facebook and Instagram.
If we enable analytics, advertising pixels, or conversion-tracking technologies, those tools may process information about website visits, interactions, or purchases, subject to applicable privacy requirements.
Where legally required, we will provide appropriate notice and obtain consent before activating non-essential tracking technologies.
We will update this policy and any relevant cookie notices when new advertising or analytics integrations materially change our data practices.
We do not represent that a particular advertising or analytics service is active unless it has been implemented.
10. Third-Party Service Providers
We use third-party services to operate our website and deliver digital products.
Depending on the services enabled, these may include:
WordPress and WooCommerce
To operate the website, manage products, process orders, and provide digital downloads.
Bluehost
To provide website hosting and associated technical infrastructure.
PayPal
To process supported online payments.
Email delivery and marketing providers
To deliver transactional emails and, where configured, manage newsletter subscriptions.
Website security and spam-prevention services
To detect abusive activity, protect website functionality, and moderate spam.
We disclose personal information to service providers only where reasonably necessary for their functions or otherwise permitted by law.
Some providers act as independent controllers of personal information and maintain their own privacy policies.
We encourage visitors to review the privacy policies of the third-party services they use.
11. International Data Transfers
The Good Principal is operated from the Philippines and serves visitors and customers in different countries.
Our hosting, payment, email, and other service providers may process or store personal information outside the Philippines or outside the country in which a visitor resides.
Where international transfers occur, we seek to use appropriate contractual, organizational, or other safeguards as required by applicable law.
Different jurisdictions may provide different levels of legal protection for personal information.
12. Data Retention
We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this policy, including applicable legal, accounting, tax, security, and contractual obligations.
Retention depends on the category of information:
- Order and payment records: Retained for applicable financial, tax, accounting, and legal requirements.
- Customer service correspondence: Retained for as long as needed to resolve inquiries and maintain necessary business records.
- Newsletter information: Retained while a subscription remains active, with limited records retained afterward where necessary to honor unsubscribe requests or demonstrate compliance.
- Comments and approved public contributions: May remain published until removed under our moderation practices or following an appropriate request.
- Technical and security logs: Retained according to operational requirements and the retention settings of relevant service providers.
When information is no longer required, we will take reasonable steps to delete, anonymize, or securely dispose of it.
Certain information may need to be retained even after a deletion request when required by law.
13. How We Protect Your Information
We take reasonable technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, misuse, and loss.
These measures may include:
- Secure HTTPS connections
- Access controls for website administration
- Payment processing through established third-party providers
- Website updates and maintenance
- Security monitoring and spam prevention
- Restricted access to customer and transaction records
- Website backups and recovery procedures
No internet-based service or electronic storage system can guarantee absolute security.
If we become aware of a personal data breach, we will assess the incident and comply with applicable notification and response requirements.
14. Your Privacy Rights
Depending on your location and applicable law, you may have rights concerning your personal information.
These may include the right to:
- Be informed about how your personal information is processed
- Request access to personal information held about you
- Request correction of inaccurate or incomplete information
- Object to certain processing activities
- Withdraw consent where processing is based on consent
- Request deletion, erasure, or blocking of information where legally permitted
- Request data portability where applicable
- Lodge a complaint with an appropriate data protection authority
- Seek remedies available under applicable law
To exercise your rights, please contact:
We may request reasonable information to verify your identity before responding to requests involving personal information.
We will respond in accordance with applicable legal requirements and timelines.
For individuals in the Philippines, information about data privacy rights is available from the National Privacy Commission at https://privacy.gov.ph.
15. Privacy Rights of International Visitors
We recognize that visitors may access The Good Principal from the United States, Canada, the United Kingdom, the European Economic Area, Australia, and other jurisdictions.
Where applicable, we will respect additional rights and obligations under relevant privacy legislation, including the General Data Protection Regulation and applicable consumer privacy laws.
Such laws may provide additional rights relating to access, correction, deletion, portability, marketing preferences, and certain forms of automated processing.
The applicability of a particular law depends on the circumstances of the processing and the legal scope of that law.
Visitors may contact us to inquire about rights applicable to their information.
16. Children’s Privacy
The Good Principal is primarily intended for adult educators, school leaders, and other professional visitors.
Our products and services are not directed toward children.
We do not knowingly solicit personal information directly from children for marketing purposes.
If we discover that personal information has been collected from a child in circumstances requiring parental or guardian authorization, we will take appropriate action under applicable law.
Parents or guardians who believe that a child has provided personal information may contact us to request review or deletion.
17. External Websites and Links
Our website may contain links to third-party websites, services, and social media platforms.
We are not responsible for the privacy practices or content of websites that we do not control.
We encourage visitors to review the privacy policies of external websites before providing personal information.
18. Changes to This Privacy Policy
We may revise this Privacy Policy to reflect changes in our business operations, website functionality, payment providers, technology, or applicable legal requirements.
When updates are made, we will revise the Last Updated date at the beginning of this policy.
Where required by law, we will provide additional notice or seek renewed consent for material changes.
We encourage visitors to review this page periodically.
19. Contact Us
For questions, concerns, or requests regarding this Privacy Policy or the handling of personal information, please contact:
The Good Principal
Operated by Hibaro Book Publishing
Website: https://thegoodprincipal.com
Email: thegoodprincipal@gmail.com
Business Address: Brgy. Makiwalo, Mondragon, Northern Samar, Philippines 6417
We welcome privacy-related inquiries and will make reasonable efforts to respond promptly and appropriately.