1. Who is responsible for your information
VCFY I.T. Solutions, owned by Melvic Monje, is the personal information controller for information collected through vcfyit.com and our services. Our business address is Blk 14 Lot 12 Mahogany St., The Palms Lakeshore, San Rafael, Mexico, Pampanga 2021, Philippines.
Our Data Protection Officer is Melvic Monje. Contact: [email protected] or +63 977 380 2213.
The self-serve VCFY Business Kit at kit.vcfyit.com has its own Privacy Policy.
2. What we collect
- Inquiries and orders: your name, email, phone number, business name, domain, and anything you write in our contact, project, training or business email forms.
- Calls and chats: details you give when you book a call through Calendly or message us on Messenger, WhatsApp or Viber.
- Accounts: your email address and a securely hashed password when you create an account for the course.
- Payments: your name, email, amount, payment method type and payment status. Card and e-wallet details are entered on PayMongo’s secure checkout. We never see or store your full card number.
- Client project information: content, files, billing details, and any logins you share so we can build and manage your website, email or integrations.
- Website usage: pages visited, device and browser type, approximate location and referring site, collected through Google Analytics cookies.
3. Why we use it
- To reply to inquiries, prepare quotations and deliver the services you ask for (to fulfil a contract or take steps before one).
- To bill you, process payments and issue invoices or receipts (contract and legal obligations, including BIR rules).
- To give you course access and support.
- To keep our website and services secure and prevent fraud or spam (legitimate interest).
- To understand how visitors use the site so we can improve it (legitimate interest, using analytics cookies).
- To send updates about your project or account. We only send marketing emails if you agree, and you can opt out any time.
We do not sell your personal information.
4. Who we share it with
We share information only with service providers we need to run the business, and only as much as they need:
- Vercel (website hosting) and Hostinger (hosting for client websites)
- Brevo (delivers form submissions and emails)
- Supabase (accounts and course data)
- PayMongo (payment processing)
- Google (Analytics, and Google Workspace for business email)
- Calendly (call booking), and Meta, WhatsApp and Viber (chat)
Some of these providers store or process data outside the Philippines. We use providers that protect data to a standard comparable to Philippine law. We may also disclose information when the law, a court or a government agency requires it.
5. Cookies
We use Google Analytics cookies to measure site traffic, and sign-in cookies to keep you logged in to your account. You can block or delete cookies in your browser settings. The site still works without analytics cookies.
6. How long we keep it
- Inquiries that do not become a project: up to 2 years, then deleted.
- Client, billing and payment records: for as long as Philippine tax and accounting laws require.
- Logins you share with us: only while we need them for your work. Change them once the work is finished.
- Course accounts: while the account is active, or until you ask us to delete it.
7. How we protect it
We use encrypted connections (HTTPS), access controls, and secure password storage. Only Melvic Monje has access to client information. If a breach puts your information at risk, we will notify you and the National Privacy Commission as the law requires.
8. Websites we build for you
When we build or host a website for your business, you are the personal information controller for your own visitors’ and customers’ data, and we process it only to provide our services to you. You are responsible for your own website’s privacy notice. We can add one as a page on your site.
9. Your rights
Under the Data Privacy Act, you have the right to:
- be informed about how your information is used
- access a copy of your information
- object to processing, including marketing
- correct inaccurate information
- have your information erased or blocked
- get your information in a portable format
- claim damages, and file a complaint with the National Privacy Commission
To use these rights, email [email protected]. We will reply within 15 working days. If you are not satisfied, you can contact the National Privacy Commission at privacy.gov.ph.
10. Children
Our services are for businesses and adults. We do not knowingly collect information from anyone under 18.
11. Changes
We may update this policy. The date at the top shows the latest version. If a change significantly affects how we use your information, we will tell active clients by email.
12. Contact
Privacy questions or requests: [email protected]. Our full business details are on the contact page.