Skip to content
Auvrix

Legal

Privacy policy

How we collect, use, share, store and protect personal data, in line with the Data Privacy Act of 2012.

01Who we are

Auvrix (Auvrix Web Studio) respects your privacy and follows the Data Privacy Act of 2012 (RA 10173), its implementing rules and National Privacy Commission issuances. We are a website business owned by Jesseca C. Gimo, at Arroyo Street, Liceralde Village, Lanang, Davao City, Philippines.

Contact our Data Protection Officer at auvrixph2026@outlook.com.

02What we collect and why

WhoData we collectWhy we use itBasis
Website visitorsName, email, phone, message, device and usage dataAnswer inquiries, run and secure the site, understand visitsYour consent; our legitimate interests
Prospective clientsName, role, business name, business phone and email, address, public web pages, notes from calls and visitsOffer our services and record your preferencesOur legitimate interests, after an assessment; your consent where required
ClientsContact details, billing details, TIN, project materials, site access detailsDeliver services, bill you, keep recordsContract; legal obligation
Freelancers and applicantsContact details, payment details, TIN, work recordsEngage and pay them, meet tax dutiesContract; legal obligation

We ask only for what we need. Please do not send us sensitive personal information unless a project requires it and we have agreed how to handle it.

03Business leads

We research businesses using public sources such as business websites, Facebook pages and directories. We record where each contact detail came from. We do not buy personal data lists unless the law allows it and the proper consents and agreements exist.

We tell you who we are and why we are calling, and we ask permission before following up. If you say no, we stop marketing to you the same day and keep only a minimal do-not-contact record.

04Who we share data with

We share data only as needed with:

  • freelancers working for us under written confidentiality terms
  • service providers such as Google Workspace, Zoom, Calendly, project management tools and Messenger
  • payment providers such as GCash, Maribank, Maya, Wise and banks
  • hosting and website platforms such as WordPress hosts, Webflow, Shopify and Vercel
  • our accountant, lawyer and government agencies when required by law

We do not sell personal data. Some providers store data outside the Philippines. We use reasonable contractual and technical safeguards where this happens.

05Cookies and browser storage

This website uses only what it needs to work: storage in your browser for preferences such as light or dark mode, currency, chat sounds and your onboarding checklist. We do not use advertising pixels. If we add analytics, we will update this policy first.

06Security

We use access controls, a password manager, two-factor authentication where available, and encrypted connections. Where possible, we ask to be added as a user on your accounts instead of receiving passwords, and we remove access when it is no longer needed. No system is fully secure, so please contact us at once if you suspect a problem. See our security practices.

07How long we keep data

  • Inquiries that do not become clients: 12 months after last contact
  • Prospect records: 12 months after last contact
  • Do-not-contact records: As long as needed to honor the request
  • Contracts and project records: 5 years after the project ends
  • Invoices, books and tax records: 10 years
  • Client site access details: Removed after handover or end of service

We then securely delete or anonymize the data, unless the law requires us to keep it longer.

08Your rights

You have the right to be informed, access your data, object to processing, correct it, and ask us to suspend, withdraw or erase it where the law allows. You may also obtain a copy of your data in portable form, claim damages and complain to the National Privacy Commission.

Send requests to auvrixph2026@outlook.com. We may need to confirm your identity. We reply within 15 business days.

09Personal data breaches

If a breach meets the legal test for notification, we will notify the National Privacy Commission and affected people within 72 hours of knowing or reasonably believing it occurred.

10Client websites

When we build or maintain a client’s website, that client decides how visitor data is used. We act as its processor, and its own privacy policy applies.

11Children

Our services are for businesses. We do not knowingly market to children or collect their data for marketing.

12Changes

We may update this policy and will post the new date here. Significant changes will be announced on this page.