Privacy Policy

1. What we collect

You give us:

• Contact details (name, email, phone, company) when you fill in our forms or book a discovery call.
• Project details you share during sales conversations.
• Credentials and access for sites we manage (stored encrypted — see Section 5).

We collect automatically:

• IP address, browser type, device type, pages visited (via Google Analytics 4).
• Cookie identifiers for analytics and functional cookies.
• Server logs (standard web server access logs, retained 30 days).

2. Why we collect it

• To respond to enquiries. If you book a call or fill a form, we use your details to reply.
• To deliver services. Once you're a Partner, we use your information to do the work you've hired us for.
• To send service updates. Maintenance reports, invoices, important security notices.
• To improve our site. Analytics tells us which pages help and which don't.
• For legal compliance. Tax records, contracts, and audit trails as required by Philippine law.

We do not sell your data. We do not use your data for advertising profiles. We do not share with third parties except as listed in Section 4.

3. Cookies

• Essential cookies — needed for the site to work (login state, form security tokens). No consent required.
• Analytics cookies — Google Analytics 4. Anonymised by default. You can opt out via your browser settings or any cookie banner we may add.
• No third-party advertising cookies.

4. Who we share with

We share data only with infrastructure providers needed to run our services:

• Hostinger — hosting
• Brevo — transactional email
• Stripe — payment processing (when used)
• Google — Workspace, Analytics, Search Console
• Calendly — discovery call scheduling
• Philippine government — when legally required (tax filings, court orders)

Each of these has its own privacy policy and complies with applicable data protection laws.

5. How we protect your data

• HTTPS across all properties (TLS 1.2+).
• Credentials stored in encrypted password vaults (1Password / Bitwarden).
• 2-factor authentication on all admin accounts.
• Daily off-site backups for retainer Partners.
• Access to client data is limited to project work; no analytics or marketing use.

6. Your rights (under RA 10173)

Under the Philippine Data Privacy Act of 2012 (RA 10173), you can:

• Ask what data we hold about you.
• Correct inaccurate data.
• Request deletion (subject to lawful retention obligations like tax records).
• Withdraw consent for non-essential processing at any time.
• File a complaint with the National Privacy Commission (NPC) if you believe we've mishandled your data.

To exercise any of these, email info@vcfyit.com. We respond within 15 business days.

7. Data retention

• Lead enquiries (no contract): kept 12 months, then deleted.
• Active client records: kept for the life of the engagement plus 5 years (PH tax retention requirement).
• Server logs: 30 days.
• Analytics: 14 months (GA4 default).

8. Children

We do not knowingly collect data from anyone under 18. If you believe a minor has submitted personal information, please email us and we will delete it.

9. Changes to this policy

We may update this policy as our practices change. The "Last updated" date at the top reflects the most recent revision. Material changes are announced on our homepage for 30 days.

10. Contact

VCFY I.T. Solutions
Owner / Data Protection Contact: Melvic Monje
Email: info@vcfyit.com
Address: Bacoor, Cavite, Philippines

See also: Terms of Service