Legal
Privacy Policy
How we collect, use, and protect your personal data under the Philippine Data Privacy Act of 2012 (RA 10173).
1. Who we are
This website (webdesigner.ph) is operated by Palconit Digital Marketing Services, a sole proprietorship registered with the Philippine Department of Trade and Industry (DTI) and the Bureau of Internal Revenue (BIR). In this policy, "we", "us", and "our" refer to Palconit Digital Marketing Services. "You" means the visitor or prospective client interacting with this site.
For the purposes of RA 10173, we act as the Personal Information Controller for data collected through this site.
2. What we collect and why
We try to collect as little as possible. What we do collect falls into three categories:
2.1 Information you give us directly
- Contact form submissions: your name, email address, business name (optional), brief project description, rough budget range, desired timeline, and any notes you add. Used only to reply to your inquiry.
- Direct messages: if you email hello@webdesigner.ph or call 09223399922, we hold whatever you send us for as long as the conversation is active plus a reasonable follow-up window.
- Speed Compare widget: the URL you enter for benchmarking is sent to Google's PageSpeed Insights API via a Cloudflare Worker we control. We hash the URL and cache the resulting metrics for 24 hours so repeated checks don't hit the API again. We do not associate the URL with your name, IP, or any other identifier.
2.2 Information collected automatically
- Server logs (via Cloudflare): IP address, user agent, timestamp, requested URL. Retained up to 30 days for abuse detection and operational diagnostics.
- Analytics cookies (Google Analytics 4): pseudonymous session and device data used to understand aggregate site usage. IP anonymisation is enabled. Only loaded after you accept analytics cookies via the consent banner.
- Behavioural analytics (Microsoft Clarity): anonymised scroll, click, and session-recording data. Also gated behind the consent banner; if you decline analytics, Clarity never loads.
2.3 Information we do not collect
- We do not collect payment or credit card information on this site.
- We do not collect ID numbers, government IDs, or biometric data.
- We do not build advertising profiles of site visitors.
- We do not sell, rent, or trade personal data with anyone.
3. Legal basis (RA 10173 §12)
We process personal data on these grounds:
- Consent — you submit the contact form, or you accept the cookie banner.
- Legitimate interest — server logs for security, and the minimal metadata required to operate the site.
- Compliance with law — where we're required to retain records for BIR, DTI, or other regulatory purposes.
4. How long we keep data
- Contact form submissions: 24 months, then deleted unless you become a client.
- Client correspondence: duration of engagement plus 5 years for BIR/tax records.
- Analytics data: up to 14 months in Google Analytics; sessions auto-expire earlier in Clarity.
- Server logs: up to 30 days.
- Speed Compare cache entries: 24 hours.
5. Who processes your data with us
We use a small number of third-party services, each bound by their own privacy commitments. We select providers that publish Data Processing Agreements and support GDPR/APEC-aligned practices:
- Cloudflare (hosting, CDN, serverless Workers). Serves the site from edge nodes near you; logs minimal request metadata.
- Formspree (contact form delivery). Receives form fields and forwards them to our email.
- Google (Analytics 4, PageSpeed Insights). Analytics only fires after consent; PageSpeed is used anonymously for the Speed Compare widget.
- Microsoft (Clarity). Session analytics, gated behind consent.
- Google Workspace (email). All email correspondence.
6. Your rights under RA 10173
You have the right to:
- Be informed about what we collect and why (this page).
- Access a copy of the personal data we hold about you.
- Correct inaccurate data we hold.
- Object to processing or withdraw consent at any time.
- Erase or block data where processing is unlawful, unnecessary, or based on withdrawn consent.
- Data portability — receive your data in a usable electronic format.
- Damages — claim indemnity for damages sustained from inaccurate, incomplete, outdated, or unlawfully processed data.
- Complain to the National Privacy Commission (NPC). Contact details: www.privacy.gov.ph.
7. Security
We apply reasonable technical and organisational measures to protect personal data: HTTPS site-wide, encrypted email transport, limited access to client correspondence, and regular review of third-party processors. No system is perfectly secure; if a breach affecting your data occurs, we will notify affected individuals and the NPC within the timeframes RA 10173 requires.
8. Cookies
We use two types of cookies:
- Essential cookies: required for the site to work (remembering your consent choice, for example). Always on.
- Analytics cookies: Google Analytics 4 and Microsoft Clarity. Only loaded if you click "Accept all" on the consent banner. You can change your choice at any time by clearing browser storage for this site or using the "Manage cookies" link in the footer (coming post-launch).
9. Children
This site is intended for business owners and procurement buyers. We do not knowingly collect data from anyone under 18. If we learn we have, we will delete it.
10. Changes to this policy
We'll update this page when our practices change. Material changes get a visible notice on the home page for at least 14 days and a refreshed "Last updated" date at the top of this page.
11. Contact us about privacy
For privacy-specific questions, data access requests, or to exercise any of your RA 10173 rights, contact:
Palconit Digital Marketing Services
Attn: Data Privacy Officer
Email: hello@webdesigner.ph
Phone: 09223399922
We reply to privacy requests within 15 calendar days, consistent with NPC guidance.