How we handle your details

Who we are

This site is run by Techbuild OPC, a software engineering firm in Metro Manila, Philippines. We are the personal information controller for what you send us through this site.

What we collect

When you visit any page, our firewall (AWS WAF) keeps a small sample of recent requests, which includes your IP address, browser details and the page you asked for. It also limits how many requests one address can make to this site in five minutes.

From the contact form, only what you type:

• your name
• your email address
• your company (optional)
• your message

The form also sends two technical values that aren't about you: how long the page was open before you pressed send, and an empty field that helps us filter out automated spam.

When you send the contact form, our server keeps a coded form of your IP address (a keyed hash, not the address itself) and a count, so one IP address (or home network) can send only a few messages a day. That record expires when the day ends (Philippine time), and our database deletes expired records automatically, usually within a few days.

We don't use cookies, analytics or advertising trackers. If you pick a light or dark theme, your browser remembers that choice on your device (local storage, key tb_theme). It is never sent to us.

Why we use it

To reply to your enquiry and, if you want to go ahead, to discuss and scope the work with you. We process what you send because you asked us to respond: a step you request before any agreement (Data Privacy Act of 2012, Republic Act 10173, section 12(b)).

We keep the firewall samples and the form's coded count to protect the site and the form from abuse, which is our legitimate interest (section 12(f)).

Where it goes

Pages reach you through Amazon CloudFront, a global delivery network. Your message goes to our server on Amazon Web Services in Singapore, which emails it to a Gmail inbox we use for enquiries, so Google stores it there too. Our server logs record only whether a message was sent, dropped as automated, held back by a limit, or failed to send, never what you wrote or your IP address.

Cloudflare runs our domain's DNS. It doesn't see what you send.

How long we keep it

We keep your message only as long as we need it to answer your enquiry and any work that follows, then delete it.

Server logs are deleted after 14 days.

Your rights

Under the Data Privacy Act you have the right to be informed, to access your personal data, to object to its processing, to have it corrected, to have it erased or blocked, to have its processing suspended or withdrawn, to data portability, and to claim damages. Your lawful heirs can exercise these rights on your behalf. You can also file a complaint with the National Privacy Commission.

How to reach us

Use the contact form and say it's a privacy request. Our Data Protection Officer will answer. We publish no email address; the form is our only channel.