Archived policy version
Home2bit Privacy Policy
1. Who this notice covers
HOME2BIT IT SOLUTIONS INC. (“Home2bit”, “we”, “us”) provides this notice for people visiting our corporate website, contacting us, creating an account or requesting our services. It explains how we handle personal data for our own customer and prospective-customer relationships.
For these activities, Home2bit acts as the Personal Information Controller (PIC): the organization that determines the purposes and controls the processing of the personal data. A Personal Information Processor (PIP) processes personal data on a controller's instructions. These roles are used in the sense of the Philippine Data Privacy Act, not as interchangeable labels. Data Privacy Act, section 3
Data entered into a customer's business website or operational modules is a separate context. Where the customer determines the processing and Home2bit acts on its instructions, the customer is the PIC and Home2bit may act as its PIP under an appropriate processing agreement. The customer's notice and the applicable service arrangements must explain that activity. Selecting a module in a sales configurator does not itself begin that operational processing.
2. Personal data we collect
We collect information you provide and information needed to operate the functions you use:
If needed, scroll horizontally to read the table.
| Interaction | Relevant information |
|---|---|
| General Contact Form | Name, optional business name, email address or phone number (at least one usable method), inquiry type including privacy inquiries, message, preferred response method and language |
| Account registration and use | Name, email, login credentials, account status, optional profile information, language preference and account-security records |
| Verification and password recovery | Contact address and records needed to request, send and validate account-verification or recovery communications |
| Sales and configuration requests | Account contact details, request-specific business/project name, optional phone and reference URL, requirements, selected capabilities, management and storage plans, intended website pages, domain answers, payment-gateway interest, language, submitted configuration, calculated estimate, account association, request status and relevant times |
| Agreement choices | The choice made, relevant notice or terms version and reference, timestamp and association with the inquiry or account request |
| Service access and security | Network and request information, such as IP address or a derived security identifier, access events and records needed to limit abuse and investigate problems |
We receive these details directly from you, from a representative submitting them with authority, and through the website and account functions you use. A sales request can concern a different business from your other requests; project information is not automatically treated as your single permanent business profile.
Please avoid including unrelated personal data, passwords, identity-document copies, payment-card details or sensitive information in a general message. Ordinary inquiry fields are not an invitation to provide sensitive or legally privileged information. Any necessary handling of such information requires an appropriate, separate basis and safeguards.
3. Why we use data and the basis for doing so
We use data for the stated interaction rather than treating every submission as permission for every possible use.
If needed, scroll horizontally to read the table.
| Purpose | Basis, where applicable |
|---|---|
| Respond to a requested quotation and arrange or perform your service | Necessary steps you request before entering a contract, or performance of a contract with you |
| Handle general business inquiries and communicate with a business representative | Our legitimate interest in responding and managing the relationship, where necessary and not overridden by the individual's rights and freedoms |
| Create, authenticate and protect accounts; deliver verification and recovery messages | Performance of the requested account service and, for proportionate security and abuse prevention, legitimate interests subject to the same rights assessment |
| Keep records of agreement choices and handle disputes | Applicable legal obligations and necessary protection or establishment of rights, using the lawful basis appropriate to the record |
| Send optional promotional communications | Your separate, informed consent for that marketing purpose |
We do not use a general privacy acknowledgment as blanket consent. Where consent is the basis, it must relate to a specified purpose and can be withdrawn. Processing that is necessary on another valid legal basis is assessed separately. Sensitive personal information is subject to the additional conditions of law; an ordinary legitimate-interest basis does not by itself authorize its processing. Data Privacy Act, sections 12–13
If you do not provide information necessary to respond, verify account access or prepare a quotation, we may be unable to complete that particular request. Optional marketing is not a condition of a general inquiry or service request.
4. Contact messages, sales requests and records
The Contact Form records your message for internal review. Account verification and password-recovery messages serve account-security purposes. A transactional sender is not a support mailbox, and replying to an automated message should not be assumed to submit a support request.
Sales requests retain their submitted requirements, configuration and estimate so that we can review the particular project and explain its history. A displayed automated estimate is a calculation for discussion, not a final commercial approval. We record relevant actions and agreement choices for accountability without treating them as acceptance of an individual service order or recurring-payment authorization.
The current Contact inquiry implementation stores the message for internal review; it does not automatically email the inquiry text.
5. Optional marketing and withdrawal
Marketing is optional and is not selected by default. If you separately opt in, we may use the contact details covered by that choice to tell you about Home2bit services and offers. Marketing is distinct from replies you requested and essential account or service communications. Declining marketing does not prevent a general inquiry, account creation or quotation request. We may retain the relevant document version with your refusal to evidence and respect the choice; recording that version does not turn refusal into consent.
You can withdraw a marketing choice by contacting the support number in section 11, identifying the contact address or number concerned and saying that you no longer want promotional communications. You do not need to cancel your service to withdraw marketing consent. We will apply the withdrawal to future marketing and may keep a limited record necessary to respect your choice. Necessary non-marketing communications and other processing with an independent lawful basis may continue.
At Setup Request confirmation, Terms acceptance and Privacy Policy acknowledgment are required separately. Their document versions, references and times, the customer/request association and the separate marketing choice, including refusal, are recorded. The current Contact Form records only Privacy Policy acknowledgment for that inquiry; it does not ask for marketing consent. Acknowledgment records that the notice was presented and acknowledged, not that every word was read or every possible future use was authorized. The intake currently records the marketing choice; it does not itself operate a marketing campaign or automatic subscription service.
6. Service providers, disclosures and overseas processing
Personal data may be handled by authorized personnel and providers needed for website delivery, hosting, storage, account communications and security, to the extent required for those functions. Railway hosts the Platform and its PostgreSQL database. Cloudflare delivers and protects the public Site and participates in request delivery; page loading sends connection and request information, including IP address and requested URL, to Cloudflare. Cloudflare Web Analytics is configured as described in section 9. Our account-email integration uses Resend for transactional delivery when enabled. It does not establish an inbound company support mailbox.
When a provider processes data on our behalf, its access and instructions must be limited to the relevant purpose and supported by appropriate safeguards. Information may also be disclosed where required by law or to address a lawful claim, with disclosure limited to what is necessary.
Providers may process data outside the Philippines depending on the service arrangement. Home2bit remains accountable for personal data under its control and for appropriate protections in such arrangements. You may request information about the recipients and processing arrangements relevant to your data through section 11. This notice does not promise storage in a particular country. Data Privacy Act, section 21
7. Security
We use access restrictions and account-security measures to limit personal-data access to authorized purposes. Protect your account credentials and notify us if you suspect unauthorized access. We do not ask for your password in a general support message.
No internet service can eliminate all risk. If a personal-data incident arises, applicable legal duties concerning assessment, notification and cooperation apply. This notice does not claim a security certification or guarantee that every incident can be prevented.
8. Retention and deletion
We retain personal data for the purpose for which it is needed, taking account of legal obligations and the establishment, exercise or defence of rights. The following criteria guide the treatment of each category; an access-link expiry is not a deletion schedule.
If needed, scroll horizontally to read the table.
| Category | Retention and deletion criteria |
|---|---|
| General inquiries | Whether the inquiry has been answered or closed, necessary follow-up and any relevant dispute or legal requirement |
| Sales drafts and submitted requests | Whether a draft remains usable, whether a project is under review or proceeds to a service order, and the need to preserve the request and estimate history |
| Account information | The account relationship, an account-closure request, outstanding service obligations and necessary security or legal records |
| Consent and audit evidence | The need to establish which choice or action occurred, respect withdrawals and resolve a relevant complaint or obligation |
| Security and abuse records | The security purpose, incident investigation and any applicable legal need; not unlimited retention merely because storage is available |
| Terminated customer operational data | A 90-day recovery/export window from effective termination, with the pending-request and lawful-preservation exceptions described below |
| Financial, audit, consent and other personal-data records | Their applicable legal obligations, evidential purposes and other valid processing grounds, assessed separately from the operational-data window |
A Setup Draft can be claimed for 24 hours; expiry of that handoff credential does not delete the underlying database row. The current intake implementation does not automatically delete drafts, submitted requests or their consent and audit history on a schedule. Online Contact inquiries follow the general-inquiry criteria above; the 90-day operational-data window below is not an automatic deletion schedule for those inquiries. Similarly, closing an account or concluding a service does not necessarily erase every related record at once.
For terminated customer services, operational data is retained for a 90-day recovery/export window beginning on effective service termination, not temporary suspension or On Hold. Export requests are permitted throughout the window. Standard export support applies during the initial 30 days; days 31–90 remain available for requests involving retained data. A request must come from an authorized person and concern data they are entitled to receive.
If an authorized export request is received within the window, including on day 89, the data necessary to fulfil it is retained until fulfilment. Restoration or reactivation within 90 days is possible where the required data is available and restoration is technically feasible. This is not a promise of fully automatic backups, restoration or deletion, or guaranteed recreation of the original operating environment.
After the window, deletion is subject to pending export requests, legal obligations and other valid preservation exceptions. The 90-day period is a service-related operational-data arrangement, not a universal deletion deadline for financial, audit, consent or other personal-data records. Those records follow their own necessary, lawful retention criteria. Nor does the window remove statutory data-subject rights or the need for appropriate PIC–PIP processing arrangements for a customer's business data.
When identifiable data is no longer needed on a valid basis, it should be deleted or irreversibly anonymized. Where a lawful reason requires continued preservation, access and further use must remain limited to that reason. Any remaining backup copies must be handled consistently with those obligations rather than reused for an unrelated purpose. Data Privacy Act, section 11
9. Cookies and browser storage
Account functions use session cookies to maintain a signed-in session and support secure interactions. When Setup submission is available, the configurator uses browser session storage to retain configuration choices and entered inquiry details during the browser session. Its informational-only mode does not save those choices to browser storage. Clearing browser storage or restricting cookies may remove a draft or prevent account functions from working. Browser session restoration can affect how long session storage remains available on your device.
The public Contact Form does not deliberately save your message to browser storage. Submission to Home2bit is a separate action from filling out fields. If additional optional analytics or advertising tools are introduced, their purposes and choices must be explained before they are used where required; acceptance of this notice is not blanket permission to introduce them.
Cloudflare Web Analytics is configured for Site usage and performance measurement, excluding EU visitor data from automatic browser measurement. Browser security controls can restrict reporting. Its analytics beacon does not use cookies or browser storage; this does not mean that other Cloudflare services process no personal information.
10. Your rights
Subject to applicable legal conditions, you may request information about processing and recipients, access to your data, correction, erasure or blocking, and data portability where applicable. You may object to processing, including direct marketing, and withdraw consent where processing relies on it. You may also pursue the remedies and complaint rights provided by law. These rights are not all unconditional and may require assessment of competing legal duties or other people's rights. NPC implementing rules, sections 34–37
To make a request, use section 11 and describe the right or concern, the relevant account or inquiry and a safe way to contact you. We may seek proportionate information to verify identity or representative authority before disclosing or changing data. Do not send a full identity document through a general message unless an appropriate verification process has been explained.
We will explain the handling of your request and any applicable reason for a restriction or further information needed. You may raise a concern with the Philippine National Privacy Commission using its current official complaint procedures; contacting Home2bit does not waive that right.
11. Contacting Home2bit about privacy
Contact HOME2BIT IT SOLUTIONS INC. through Phone / SMS / Viber: +63 927 743 4946, or 0927 743 4946 within the Philippines. Say that your concern relates to privacy or marketing withdrawal so it can be directed appropriately. This is the general customer-support contact, not a statement that the number belongs to a formally appointed Data Protection Officer.
Once Account Support/Chat is operational and available to your account, you may also submit a privacy request there. Non-account holders may use the public Contact Form when it is enabled and confirms receipt. These additional channels do not require you to consent to marketing. If a channel is unavailable or does not confirm receipt, use the support number above; do not assume that a draft message has been submitted.
For data processed through another business's website or operational service, contact that business as well. Where Home2bit acts only on that business's instructions, the request must be handled in accordance with the applicable controller–processor arrangements and law.
Our operating office is Unit 1502, The Taipan Place, F. Ortigas Jr. Road, Ortigas Center, Barangay San Antonio, Pasig City, Metro Manila 1605, Philippines. This is our operating office, not a representation of our SEC registered office.
12. Changes to this notice
Changes to the purposes or arrangements described here require an updated notice and any further choice or consent required by law. A new notice does not retrospectively change what you previously accepted. Website Terms acceptance, privacy acknowledgment, optional marketing, individual service-order acceptance and any future recurring-payment authorization remain distinct.
The English and Korean texts share one document version and corresponding permanent archive links. Section 5 is the optional-marketing disclosure within that same version. Changing that disclosure requires a new Privacy Policy version. Archived versions and historical acknowledgment and consent records remain unchanged; recording the Privacy version does not convert a refusal of marketing into consent.