Privacy Policy

Scope

This policy covers this website, direct inquiries, and the way I handle information while providing independent virtual-assistance and operations services.

A client project may also have its own proposal, service agreement, confidentiality terms, data rules, or instructions. Those documents may add requirements for a particular engagement.

Website data

This website does not require an account, sign-in, mailing-list subscription, or visitor profile. I do not keep a database of people who simply browse the website.

I also do not use automated profiling to score, categorize, or evaluate visitors.

The hosting or network provider may still process basic technical information needed to load, protect, and maintain the website. This can include an IP address, browser or device details, request times, approximate location derived from an IP address, or security/server logs. I do not use that technical information to build visitor profiles.

Cookies & tracking

I use Umami Analytics to understand general website traffic and selected interactions, such as page views, referral sources, browser and operating system, device type, country-level location, and events such as clicks on selected website buttons.

Umami does not use cookies, does not track visitors across websites, and does not store personally identifiable information for this analytics setup. An IP address may be used temporarily to derive anonymous session and location information, but Umami states that the IP address itself is not stored.

My Umami Cloud account uses the United States data region. I use these statistics for internal website improvement and to understand which content and pages are useful. I do not use this website to build advertising audiences, create behavioral profiles, or follow visitors across other websites.

I do not intentionally add Meta Pixel, behavioral advertising tags, or session-recording software to this website. A hosting provider, browser, email application, or other external platform may still use its own essential technology or technical logs outside the website code I personally maintain.

Contact inquiries

If you contact me, you may provide your name, company or business name, email address, optional phone number, preferred communication method, and whatever information you include in your message.

The website inquiry form sends the information you enter through a secure server-side endpoint hosted on Wasmer. The endpoint creates a private inquiry record in my Notion Client Requests Inbox so I can review and respond. The Notion integration credential is stored server-side and is not included in the public website code.

Please do not send passwords, login credentials, full payment-card details, medical records, government identification numbers, or other highly sensitive records through the public inquiry form. If sensitive information is needed for an engagement, we can agree on a more appropriate way to share it.

Client data

Some assignments may require me to work with information supplied by a client or stored in a client-approved system. Depending on the job, that may include customer, prospect, employee, vendor, account, scheduling, order, support, CRM, or business-contact information.

I use client information only for the work I have been authorized to perform and within the access I have been given. I do not use client-controlled information for my own unrelated marketing, profiling, or resale.

If an engagement involves sensitive or regulated information, the client and I may need additional security, confidentiality, or compliance terms before that work begins.

AI-assisted tools & generated content

I do not rely on AI tools for every task or project. Whether I use AI assistance depends on the work involved, the client's instructions or preferences, and whether the tool is appropriate for the assignment.

When appropriate, AI may assist with tasks such as brainstorming, drafting, summarization, research support, organization, editing, design support, or other administrative and creative work. I remain responsible for reviewing the work, checking it where appropriate, and applying my own judgment before it is delivered.

A client may request the use of AI, limit its use, or ask that particular work be completed without AI assistance. I will follow the agreed approach for the project where reasonably possible.

When AI materially contributes to a deliverable, I will disclose that involvement. Where relevant, I will distinguish between AI-assisted or AI-generated elements and elements created without AI assistance rather than presenting them as the same thing.

I do not intentionally submit unnecessary confidential, sensitive, regulated, or client-controlled information to general-purpose AI tools simply for convenience. If a project requires that kind of information to be processed through an AI system, additional approval, safeguards, contractual terms, or a client-approved tool may be needed first.

Where AI-generated or materially AI-manipulated content requires additional disclosure or labeling under applicable law, platform rules, contractual terms, or client instructions, I will follow those requirements.

Call recording & meeting records

My default practice is to keep an accurate record of important business calls and online meetings when recording is lawful, appropriate, and reasonably practical. This may include audio, video, screen sharing, or an automated transcript.

These records help me return to instructions, decisions, approvals, scope changes, action items, and other details that may be important later in an engagement. They may also help clarify what was discussed or agreed if there is later a misunderstanding, disagreement, allegation, dispute, or other question about the conversation.

I do not make recordings for the purpose of creating conflict or building a case against a client. I keep records because accurate documentation can protect both the client and me if clarification is ever needed.

I will disclose that a meeting is being recorded and follow the consent requirements that apply to the people and locations involved. Where consent is required before recording begins, I will obtain that consent first.

A client or participant may ask that a meeting not be recorded. That preference can be communicated before the meeting or verbally during the call. If someone asks me to stop an active recording, I will stop it as soon as reasonably possible and may use written notes, a meeting summary, confirmation email, or another reasonable method to document the discussion instead.

If recording is declined, I may still document important instructions, decisions, approvals, or changes in writing and may ask the relevant person to confirm them when appropriate.

Recordings and transcripts may contain names, voices, images, chat messages, documents, screen-shared information, and other information discussed during the meeting. I use them only for legitimate business, record-keeping, contractual, dispute-resolution, or legal purposes and do not use them for unrelated advertising, profiling, resale, or public distribution.

If an AI transcription service, meeting assistant, or similar tool is used, the same privacy, confidentiality, disclosure, and client-instruction considerations described in this policy apply.

Recordings, transcripts, and meeting notes help document what occurred, but they do not automatically replace or amend a signed contract, proposal, statement of work, or other governing written agreement.

Sales & CRM

Some engagements may include outbound sales support, lead qualification, prospect follow-up, customer or account communication, CRM documentation, scheduling, or business-development support.

For that work, I may use contact or prospect information supplied by the client, available through a client-approved source, or already stored in the client's systems. The client may decide where that information came from, what it may be used for, and how long it should be kept.

That client-authorized sales or outreach work is separate from this website. I do not take information submitted through this website and use it for unrelated unsolicited marketing, and I do not sell it to third parties.

Do Not Call & opt-outs

I understand that Do Not Call and marketing opt-out rules are important, especially when an assignment includes outbound sales, lead qualification, prospect follow-up, or other direct outreach.

I do not maintain or reuse one master copy of national, regional, or client-specific Do Not Call lists across different clients. If a client asks me to make outbound calls, the client is expected to provide the approved calling list, suppression process, consent records, and access to any Do Not Call checks or internal lists required for that campaign. I will follow the approved process and instructions for that assignment.

If someone asks not to be called or contacted while I am handling an authorized campaign, I will respect the request, stop further outreach as required, and record or report the request through the client's approved system or process so the client's records can be updated.

The client is responsible for making sure its campaign, contact-list sources, consent records, and chosen systems are appropriate for the markets it is contacting. Rules can differ by country, location, type of call, and type of recipient. This does not remove any legal responsibility that may apply directly to me while performing the work, and I will not knowingly continue outreach that I understand to be prohibited.

Use of information

Information received directly from you may be used to:

• reply to an inquiry or request;
• discuss scope, availability, pricing, and support needs;
• prepare proposals, agreements, and project records;
• provide and manage contracted services;
• keep reasonable business, payment, and correspondence records;
• protect business accounts, files, and systems; and
• meet legal, tax, accounting, contractual, or dispute-related requirements where applicable.

I only ask for or use information when there is a clear business reason connected to an inquiry, agreed service, payment, record-keeping need, or legal requirement.

Sharing

I do not sell personal information. I do not share personal information for cross-context behavioral advertising.

Some information may pass through platforms that are needed to run the website, communicate with you, receive payment, store approved work, or perform a client assignment. Examples can include website hosting, email, meeting or messaging platforms, cloud storage, payment providers, and systems selected by a client.

When you choose to open or use an external platform, that provider manages its own systems and privacy practices. I do not control what an independent provider collects, logs, stores, or retains within its own service.

I may disclose information when it is needed for the agreed service, when you or the relevant client has authorized it, or when I am legally required to respond to a valid request. I do not disclose inquiry or client information simply for advertising, resale, or convenience.

Retention

I do not keep website visitor profiles because I do not create them.

Inquiry records and emails, proposals, contracts, payment records, project records, and client correspondence may be kept for as long as there is a reasonable business, contractual, tax, accounting, dispute-resolution, or legal reason to keep them.

A client's own systems and chosen platforms may use different retention, backup, deletion, access, and security practices from mine. I do not control those systems and cannot guarantee what a client or independent platform keeps outside the accounts, devices, or records under my control. I remain responsible for how I handle information within my control and for the obligations I accept in the relevant agreement, subject to applicable law.

Communication & security

I use reasonable safeguards that fit the type of information and the work being performed. This may include access controls, strong authentication, device security, limiting access to what is needed, confidentiality practices, and client-approved systems.

Communication with a client may take place through the client's business tools and through direct communication channels we agree to use, including my professional email, phone, chat, or meeting platforms.

I will not independently contact a client's customers or prospects outside the agreed scope. If direct customer or prospect contact is part of the assignment, I will do so only with the client's clear authorization and through the approved channel or process.

No internet transmission, email account, cloud platform, or storage method can be guaranteed to be completely secure. Sensitive or regulated information should only be shared through a method agreed for the engagement.

Privacy rights

I am based in the Philippines. Depending on where you, the client, or the relevant individual is located, different privacy laws may apply to a particular situation.

Those laws can include the Philippine Data Privacy Act of 2012, California's CCPA as amended by the CPRA, Canada's PIPEDA or other applicable Canadian privacy law, the UK GDPR and Data Protection Act 2018 as amended, the EU GDPR, and Australia's Privacy Act 1988 and Australian Privacy Principles where applicable.

Payments & business records

Payment methods can be agreed based on the client, location, currency, contract, and what is reasonably available to both sides. Depending on the engagement, I may accept bank or wire transfer, PayPal, and local Philippine options such as GCash, Maya, MariBank, or GoTyme where supported. Western Union remittance may also be considered when there is no more practical option. Cash App is not an available payment method for me in the Philippines.

For clients in the Philippines, including Metro Manila/NCR, local transfer or e-wallet options may be practical. Payment account details are shared privately after the scope and contract are confirmed; they are not published on this website.

Depending on the client's country, payment setup, and tax requirements, either party may need reasonable tax, payer, vendor, or business-registration information. I may request or provide documentation needed for invoicing, withholding, reporting, vendor onboarding, or Philippine BIR record-keeping. The exact form depends on the engagement and applicable rules.

Payment providers may process transaction or account information under their own terms. I do not need, and clients should not send me, online-banking passwords, one-time passwords, or full payment-card credentials.

External platforms

This website may link to external platforms such as email, video meetings, messaging tools, payment services, cloud storage, a portfolio library, or systems selected by a client. I do not control the privacy, security, cookie, or tracking practices of those independent providers.

My portfolio is hosted through Google Drive. When you open the portfolio, Google's own privacy policies and platform practices also apply to your use of Google Drive. I control the portfolio files I choose to make available, but I do not control Google's separate technical processing.

Likewise, when I work inside a client's chosen platform, that platform and the client may have their own settings, retention rules, access controls, and privacy requirements.

Social media & public platforms

I may use professional social media or networking platforms to communicate, share work-related content, respond to comments or messages, and connect with potential clients, collaborators, or other professionals.

Information shared through those platforms may also be processed by the platform itself under its own privacy policy, settings, and technical practices. I do not control how an independent social media platform collects, stores, tracks, or retains information within its service.

Public comments, reactions, tags, mentions, and other public interactions may be visible to other users. Direct messages or other non-public communications are treated as business correspondence and are not intentionally made public simply because they were sent through a social platform.

I do not intentionally publish private client information, confidential messages, private conversations, screenshots of non-public communications, or identifiable client work without appropriate permission. The same applies to testimonials, endorsements, case studies, or portfolio material where the client's identity or private information would otherwise be disclosed.

I may use publicly available professional information for reasonable networking, outreach, or business-development purposes, but I do not use social media interactions to build unrelated advertising profiles or sell personal information.

For social-media feedback and public-facing proof, the only content I intentionally collect for my own records or possible business use is ratings and reviews, and testimonials that a client or other person has chosen to provide. I do not intentionally collect other social-media information for that purpose.

Minors

This website and my services are intended for adults acting in a business or professional capacity. I do not knowingly ask anyone under 18 to submit personal information through this website.

If information relating to a minor is legitimately included in records supplied by a client, I will handle it only as needed for authorized work, within the client's approved systems and instructions, and subject to any additional privacy or confidentiality requirements that apply to the engagement.

Policy updates

This policy may be updated when the website, services, technology, legal requirements, or privacy practices change. The “Last updated” date at the top of the page will be revised when material changes are made.