Privacy Notice

Who we are

Buhalon Foundry Software OPC ("Buhalon", "we", "us") operates this website and is the personal information controller for the data described in this notice.

You can reach us about privacy matters at [email protected].

Information we collect

We collect only what this website needs to function and to answer inquiries.

• Information you submit through the contact form: full name, email address, company or organization, inquiry type, message, and consent confirmation.
• Optional details you choose to provide: phone number, website, and preferred contact method.
• Technical information generated when you visit: IP address, browser and device type, referring page, and pages viewed. This is processed by our hosting and network providers as part of delivering and protecting the site.
• Aggregate usage events, if analytics is enabled. These record which pages and calls to action are used, never the contents of your message or any other form field.

Why we process it

• To respond to inquiries you send us and to continue that correspondence.
• To operate, secure, and maintain this website, including preventing spam and abuse of the contact form.
• To understand, in aggregate, which parts of the site are useful so we can improve them.
• To meet legal, regulatory, and record-keeping obligations that apply to us.

Where we rely on your consent — such as submitting the contact form — you may withdraw it at any time by contacting us. Withdrawal does not affect processing already carried out.

Service providers

We use a small number of providers to host the site, deliver it securely, and send transactional email. These providers process personal information only on our instructions and under contract.

We do not sell personal information, and we do not share it with third parties for their own marketing.

How long we keep it

Contact submissions are retained for as long as needed to handle the inquiry and to keep a reasonable record of business correspondence, then deleted or anonymized.

Technical logs are retained on our providers' standard schedules, which are short by design.

Your rights

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have rights over your personal information.

• To be informed about how your information is processed.
• To access the personal information we hold about you.
• To correct information that is inaccurate or out of date.
• To object to processing, or to withdraw consent where processing relies on it.
• To request erasure or blocking where the grounds under the Act apply.
• To data portability where applicable.
• To lodge a complaint with the National Privacy Commission.

How we protect it

The site is served over HTTPS. Form submissions are validated on the server, rate limited, and protected against automated abuse. Credentials for email and infrastructure are held server-side and are never exposed to the browser.

No system is perfectly secure. If you believe you have found a vulnerability, please follow the process on our security page.

International transfers

Some of our providers operate infrastructure outside the Philippines. Where personal information is transferred abroad, we require contractual protections consistent with the Data Privacy Act.

Children

This website is intended for a business audience and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has submitted information to us, contact us and we will remove it.

Changes to this notice

We update this notice when our practices change. The effective date above always reflects the current version, and material changes will be highlighted on this page.

Contact

Privacy questions and data-subject requests: [email protected]

General correspondence: [email protected]