Skip to content

Legal

Privacy Policy

Last updated:

Who We Are

The company named in the contact details below is the personal information controller for the personal data described in this policy. This means it decides how and why that data is processed, under the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

We hold personal data only for the purposes described in this policy. If we ever need to use it for a new purpose, we will check that the new purpose is compatible with the original one and, where the law requires, tell you or ask for your consent first.

Scope

This policy covers personal data we collect through this website and through emails you send to us. It applies to visitors to this website, to people who write to us, and to representatives of clients or prospective clients who contact us in a business capacity.

It does not cover personal data we process for our clients. That data is handled under the relevant service agreement and the client’s instructions.

Information We Collect

We collect only the information described below.

a. Information you send to us

If you email us, we receive your name, email address, company and any other details you include in your message.

b. Technical data

The servers that deliver this website may record basic technical information when you visit, such as your IP address, browser type, the pages you request, and the time of each request.

c. What we do not collect

This website has no forms, user accounts, analytics tools or advertising trackers. We do not ask you to create an account or to submit personal data through the website.

How We Use Personal Data

We use personal data to:

  • reply to your emails and handle your enquiry;
  • prepare, enter into and manage a business relationship with you or your company;
  • keep this website and our systems secure and working properly;
  • meet our legal and regulatory obligations.

Legal Basis

We process personal data only on the grounds the Data Privacy Act allows. These are: your consent, where the law requires it; steps you ask us to take before entering into a contract, or the performance of a contract; our legitimate interests, such as answering business enquiries and keeping our systems secure, where these do not override your rights; and compliance with a legal obligation.

Sharing of Personal Data

We do not sell personal data. Service providers that receive it act on our instructions and may use it only to provide their services to us. We share personal data only:

  • with service providers that help us run email and hosting, under confidentiality and data protection terms;
  • with government bodies or courts when the law requires it, or to respond to a valid legal request.

Transfers Outside the Philippines

Some of our service providers may store or process personal data outside the Philippines. Where this happens, we require safeguards that are appropriate to protect your data, consistent with the Data Privacy Act.

Retention

We keep personal data only as long as it is needed for the purpose it was collected for, or as long as the law requires. After that, we delete it or dispose of it securely.

This policy does not state fixed retention periods, because the period depends on the purpose and the law.

Security

We use organizational, physical and technical measures to protect personal data against loss, misuse, and unauthorized access, alteration or disclosure.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Emails you send us also depend on the security of your email provider.

Your Rights

As a data subject, you have the right to:

  • be informed about how your personal data is processed;
  • access your personal data and ask for a copy of it;
  • object to the processing of your personal data in cases the law allows;
  • ask us to correct inaccurate or incomplete personal data;
  • ask us to erase or block your personal data, as the law allows;
  • obtain your personal data in an electronic, commonly used format, where the law provides this right;
  • claim damages if you suffer harm from inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of your personal data, as provided by law;
  • file a complaint with the National Privacy Commission.

Exercising Your Rights and Complaints

To use any of these rights, contact us using the details below. We may ask you to confirm your identity first.

Please contact us first so we can try to resolve your concern. You also have the right to lodge a complaint with the National Privacy Commission, the Philippine data protection authority.

Privacy Questions and Requests

Send privacy questions and requests about your personal data to the contact details below. Please write “Privacy” in the subject line.

We will route your request to the person responsible for data protection in our company, who will respond to it.

Changes to This Policy

We may update this policy. The date at the top shows when it was last updated, and we will post changes on this page.

If a change affects how we use personal data you have already given us, we will tell you before the change takes effect, as far as the law requires.

Contact us

Willow Oak Corporation

26th Floor, Cebu Exchange Tower, Salinas Drive, Lahug, Cebu City, Cebu, Philippines 6000

inquiry@willowoak.ph