Privacy Notice

What personal data we collect, why, who receives it, how long we keep it, and your rights under the Data Privacy Act of 2012 (RA 10173).

This Privacy Notice explains how Davao Corporate ("we", "us") handles personal data when you visit davaocorporate.info, contact us, create an account, place an order or subscribe to a plan. We follow the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and the issuances of the National Privacy Commission (NPC). We collect only what we need, we never sell personal data, and we protect what we keep.

1. Who is responsible

Personal information controller: Davao Corporate, Davao City, Philippines.
Data Protection Officer / privacy contact: inquiry@davaocorporate.info. Write to this address for any question, request or complaint about your data.
Where the National Privacy Commission requires it, we register our Data Protection Officer and data processing systems with the NPC.

2. What we collect, why, and on what basis

What	Why we use it	Basis under the Data Privacy Act
Contact form: first and last name, email, position, business, location, mobile number (optional) and your message	To reply to your enquiry and follow up on it	Your consent, and steps you ask us to take before a contract
Customer account (optional): email, name, password (stored only as a one-way hash), account creation and last sign-in time	To let you follow your enquiry and orders and download your purchases	Contract and your consent
Orders: name, email, business, items ordered, order reference, PayMongo payment ID and payment method, order notes	To deliver your purchase, give support, and keep accounting and tax records	Contract and legal obligation
Monthly plans: name, email, website addresses you give us, payment history for the plan	To provide and bill the plan	Contract
Update emails: your email and whether you agreed to hear from us	To send new articles, products and places. Every message has an unsubscribe link	Your consent
Email address checks: result of a domain and mailbox check, the date of the last good result, and, at most once a day, a short test message	To keep our list accurate and stop sending to dead addresses	Our legitimate interest in accurate records, limited to people who contacted us or agreed to hear from us
Anonymous visit statistics: device, browser, screen size, language, time zone, country, referring site, pages viewed, time on page. No name, no email, no IP address stored (a one-way salted fingerprint of the IP address is kept only to limit abuse)	To understand which pages are useful and to keep the site secure	Our legitimate interest, and your consent for optional Google Analytics

We do not ask for sensitive personal information (such as health, government ID numbers, religion, political views or bank details). Please do not put it in forms or messages. If you do, tell us and we will delete it.

3. Contacts we did not collect from a form

We may add business contacts from lists or files that we have a lawful right to use (for example, people who gave us their details in person or through a partner). We record where each contact came from. We do not send marketing or update emails to such contacts unless they have given permission, and we tell them where we got their details when we first write to them. If you want to know where we got your details, or want them removed, write to inquiry@davaocorporate.info.

4. Automated lead scoring

Our contact system gives each enquiry a score from 0 to 100 based on what the person told us (for example whether they gave a business name or a detailed message). The score only helps us decide which enquiries to answer first. It is not used to refuse service, set prices or make any decision with legal effect on you. You may object to it by writing to inquiry@davaocorporate.info.

5. What we never collect

We never see or store your card number, e-wallet PIN or online banking login. Payments happen on PayMongo's secure pages. See Payments.

6. Who receives your data

Only service providers needed to run the site and your order: PayMongo (payments), our web hosting provider, our email provider, and, if enabled, Google Analytics. We have given them only what they need, and they may use it only to provide their service, or under their own privacy terms. PayMongo handles your payment details under its own privacy policy, as a separate responsible party for those details. We do not sell, rent or trade personal data and do not use it for advertising profiles. We may disclose data when the law or a court or government authority requires it.

7. How long we keep it

See the Data Retention Schedule. In short: contact records are reviewed after 24 months with no activity, order records are kept for the legal accounting period, and anonymous visit statistics are deleted after 180 days.

8. Your rights

Under the Data Privacy Act you have the right to:

be informed about how your data is processed (this notice);
access the personal data we hold about you;
object to processing, including direct marketing and automated scoring, and withdraw consent at any time;
rectify errors in your data;
erase or block your data when it is incomplete, outdated, false, unlawfully obtained or no longer needed;
data portability, meaning a copy in a commonly used electronic format;
claim damages if you were harmed by inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of your data;
complain to the National Privacy Commission (privacy.gov.ph).

If you have an account, you can download your data and delete your account yourself under My account. Otherwise email inquiry@davaocorporate.info from the address you used with us. We reply within 30 days. We may need to keep some records (for example orders) because the law requires it. We will tell you what we kept and why.

9. Security

We use HTTPS, hashed passwords, access control, rate limiting, server-side payment verification and a database that is not reachable from the web. See Security. If a personal data breach happens that is likely to put you at real risk of serious harm, we will notify the NPC and the people affected within 72 hours of learning about it, as the NPC rules require.

10. Cookies and similar storage

We do not use advertising cookies. See the Cookies and Analytics Notice for the full list and how to turn analytics off. We respect the Do Not Track setting.

11. Storage abroad

Our hosting and email providers may store data on servers outside the Philippines. We choose providers that protect data in line with accepted standards, and we remain responsible for the data we give them.

12. Children

This website is not meant for anyone under 18. If you believe a minor sent us personal data, email us and we will delete it.

13. Changes

We may update this notice. The date at the top shows the latest version, and we will highlight material changes on the home page.