Privacy Policy

BuildTayo provides website development, e-commerce, custom software, business automation, API and system integration, and AI-enabled technology services.

For personal data collected directly through this website for BuildTayo's own business purposes, BuildTayo acts as the personal information controller where applicable.

The exact information depends on how you interact with us. Our inquiry forms may collect your name, business name, email, phone or Messenger contact, existing website URL, service interests, budget range, timeline, project requirements, and other information you voluntarily provide.

Customer communications

Our chat and inquiry systems store messages, conversation timestamps, contact details, and related inquiry or project information. Customer and activity records connect these communications so authorized administrators can respond and manage the relationship.

Technical and security information

Our application processes request timestamps and may process IP addresses for rate limiting and Cloudflare Turnstile verification. Hosting, Firebase, and security infrastructure may also generate operational, authentication, error, and security logs.

We collect personal data when you submit the main contact form, a pricing or service-specific inquiry form, start or use realtime customer chat, communicate directly with us, or interact with us during service delivery. Technical and security systems also generate limited records needed to operate and protect the website.

5. Basis for processing

The applicable lawful basis depends on the activity. It may include consent where appropriate, steps you request before entering a contract, performance of a contract, compliance with a legal obligation, or another lawful ground recognized by Philippine law. We do not treat every processing activity as consent-based.

When you submit a contact, pricing, web development, e-commerce, custom software, automation, API and integration, or AI solutions inquiry, we process the information you provide to understand your request, contact you, assess requirements, discuss or prepare a proposal, and keep appropriate business records.

Optional fields help provide context but are not required unless the relevant form marks them as required. Submitting an inquiry does not subscribe you to promotional marketing.

When you use customer chat, we process your name, email, optional business name and phone number, messages, timestamps, and conversation history to answer questions, discuss projects, provide support, maintain the conversation, and protect against abuse.

Chat uses Firebase anonymous authentication to give your browser access only to its authorized conversation. A conversation identifier is stored in your browser's local storage so the chat can be restored on return visits.

BuildTayo uses third-party technology and cloud infrastructure. Inquiry, customer, activity, authentication, and chat records are processed using Google Firebase services, including Cloud Firestore and Firebase Authentication. Cloudflare Turnstile helps protect inquiry and chat entry points from automated abuse.

We may disclose appropriate information to cloud, hosting, security-verification, and communication providers; authorized contractors supporting service delivery; professional advisers where necessary; and government or regulatory authorities where legally required. Service providers should receive only information appropriate to their services and be subject to applicable safeguards and arrangements.

10. International processing

Some providers may operate in, or process information from, locations outside the Philippines. Where applicable, BuildTayo will take reasonable and appropriate measures required by applicable privacy law for such processing.

BuildTayo retains personal data only for as long as reasonably necessary for the purpose for which it was collected, legitimate business requirements, applicable legal obligations, or the establishment, exercise, or defense of legal claims.

Periods vary by record type. BuildTayo is developing documented schedules for unsuccessful inquiries, customer communications, active customer records, completed project records, security and abuse-prevention records, legal and accounting records. Until exact schedules are formally adopted, records are reviewed according to their continuing purpose and applicable requirements rather than assigned unsupported public deadlines.

BuildTayo implements reasonable and appropriate organizational and technical safeguards designed to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction. Current application controls include authenticated administrative access, role-based Firestore rules, server-side validation, restricted customer-chat access, same-origin checks, rate limiting, bot protection, secure transport in production, and server-only Firebase administrative credentials.

No internet service can promise absolute security. BuildTayo maintains processes for responding to security incidents involving personal data and will make notifications when required by applicable law.

Subject to conditions and limitations under applicable Philippine law, your rights may include the rights to be informed, access personal data, object to certain processing, correct inaccurate information, request erasure or blocking where applicable, data portability where applicable, seek damages or compensation where applicable, and lodge a complaint with the National Privacy Commission.

14. How to exercise your rights

You may ask to access or correct your information, object to certain processing, request deletion or blocking where applicable, ask how your information is processed, or raise a privacy concern. For certain requests, we may reasonably verify your identity to prevent unauthorized access to another person's information, without requesting excessive identification by default.

If you believe your privacy rights have been violated, you may also have the right to lodge a complaint with the National Privacy Commission of the Philippines . This link does not imply that the Commission endorses BuildTayo.

BuildTayo currently uses Firebase Authentication state needed for customer chat and local storage for the chat conversation identifier. Cloudflare Turnstile may use necessary browser mechanisms to provide abuse prevention. The application has a provider-agnostic event hook, but no website analytics provider, advertising pixel, or marketing tracker is currently configured.

If non-essential analytics, advertising, or marketing technology is introduced, this notice and any required consent controls will be updated before it is enabled.

16. Automated decisions and children

BuildTayo does not currently use website submissions to make solely automated decisions that produce legal or similarly significant effects. Its business services are not intentionally directed to children; information involving a child that requires special handling will be assessed under applicable law.

17. Data incidents

BuildTayo maintains processes for responding to security incidents involving personal data and will provide notifications when required by applicable law.

We may update this Privacy Policy when our services, technology, data-processing practices, or applicable requirements change. When we make changes, we will update the “Last updated” date and provide additional notice where appropriate or required.