Legal
Privacy Policy
How we collect, use, and protect your personal data under the Philippine Data Privacy Act of 2012 (RA 10173).
1. Who we are
This website (webdesigner.ph) is operated by Palconit Digital Marketing Services, a sole proprietorship registered with the Philippine Department of Trade and Industry (DTI) and the Bureau of Internal Revenue (BIR). In this policy, "we", "us", and "our" refer to Palconit Digital Marketing Services. "You" means the visitor or prospective client interacting with this site.
For the purposes of RA 10173, we act as the Personal Information Controller for data collected through this site.
2. What we collect and why
We try to collect as little as possible. What we do collect falls into three categories:
2.1 Information you give us directly
- Contact form submissions: your name, email address, business name (optional), brief project description, rough budget range, desired timeline, and any notes you add. Used only to reply to your inquiry.
- Direct messages: if you email hello@webdesigner.ph or text 09223399922, we hold whatever you send us for as long as the conversation is active plus a reasonable follow-up window.
- Speed Compare widget: the URL you enter for benchmarking is sent to Google's PageSpeed Insights API via a Cloudflare Worker we control. We hash the URL and cache the resulting metrics for 24 hours so repeated checks don't hit the API again. We do not associate the URL with your name, IP, or any other identifier.
2.2 Information collected automatically
- Server logs (via Cloudflare): IP address, user agent, timestamp, requested URL. Retained up to 30 days for abuse detection and operational diagnostics.
- Aggregate analytics (Cloudflare Web Analytics): pageview counts and traffic patterns measured at the network edge. No cookies are set, no persistent client identifier is stored, and no individual session can be reconstructed. We see how many people read each page and where they came from at a country level — and nothing more.
2.3 Information we do not collect
- We do not set tracking cookies. No cookie consent banner is required because no analytics, advertising, or behavioral cookies are loaded.
- We do not run Google Analytics, Meta Pixel, or any third-party tag-management script.
- We do not collect payment or credit card information on this site.
- We do not collect ID numbers, government IDs, or biometric data.
- We do not build advertising profiles of site visitors.
- We do not sell, rent, or trade personal data with anyone.
3. Legal basis (RA 10173 §12)
We process personal data on these grounds:
- Consent — you submit the contact form or send a message via email/SMS.
- Legitimate interest — server logs for security, and the minimal metadata required to operate the site.
- Compliance with law — where we're required to retain records for BIR, DTI, or other regulatory purposes.
4. How long we keep data
- Contact form submissions: 24 months, then deleted unless you become a client.
- Client correspondence: duration of engagement plus 5 years for BIR/tax records.
- Aggregate analytics (Cloudflare): up to 6 months at the account level. No per-visitor identifier is stored at any point.
- Server logs: up to 30 days.
- Speed Compare cache entries: 24 hours.
5. Who processes your data with us
We use a small number of third-party services, each bound by their own privacy commitments. We select providers that publish Data Processing Agreements and support GDPR/APEC-aligned practices:
- Cloudflare (hosting, CDN, serverless Workers, and Web Analytics). Serves the site from edge nodes near you; logs minimal request metadata; collects cookieless aggregate analytics.
- Brevo (transactional email). Delivers contact-form submissions from our Cloudflare Worker to our inbox. EU-based (Paris); publishes a GDPR-compliant DPA.
- Google (PageSpeed Insights). Used anonymously for the Speed Compare widget — no personal data is sent.
- Google Workspace (email). All email correspondence.
6. Your rights under RA 10173
You have the right to:
- Be informed about what we collect and why (this page).
- Access a copy of the personal data we hold about you.
- Correct inaccurate data we hold.
- Object to processing or withdraw consent at any time.
- Erase or block data where processing is unlawful, unnecessary, or based on withdrawn consent.
- Data portability — receive your data in a usable electronic format.
- Damages — claim indemnity for damages sustained from inaccurate, incomplete, outdated, or unlawfully processed data.
- Complain to the National Privacy Commission (NPC). Contact details: www.privacy.gov.ph.
7. Security
We apply reasonable technical and organizational measures to protect personal data: HTTPS site-wide, encrypted email transport, limited access to client correspondence, and regular review of third-party processors. No system is perfectly secure; if a breach affecting your data occurs, we will notify affected individuals and the NPC within the timeframes RA 10173 requires.
8. Cookies
This site sets no cookies — neither essential nor analytics. We do not run Google Analytics, Meta Pixel, Microsoft Clarity, or any tag-management script. There is therefore no consent banner. See Section 2.3 for the full breakdown of what is and is not collected.
9. Children
This site is intended for business owners and procurement buyers. We do not knowingly collect data from anyone under 18. If we learn we have, we will delete it.
10. Changes to this policy
We'll update this page when our practices change. Material changes get a visible notice on the home page for at least 14 days and a refreshed "Last updated" date at the top of this page.
11. Contact us about privacy
For privacy-specific questions, data access requests, or to exercise any of your RA 10173 rights, contact:
Palconit Digital Marketing Services
Attn: Data Privacy Officer
Email: hello@webdesigner.ph
SMS: 09223399922
We reply to privacy requests within 15 calendar days, consistent with NPC guidance.