Privacy Policy
This policy explains what information we collect through the Ailalay website, why we collect it, who helps us handle it, and what you can ask us to do with it.
Last updated:
1. Who this policy covers
This policy applies to the ailalay.com website, operated by Ailalay Software Development(“Ailalay”, “we”, “us”), based in Iloilo City, Western Visayas, Philippines. For the information described here, Ailalay is the personal information controller.
It covers the website and the inquiries you send through it. If we go on to work together, any additional handling of personal data within that engagement is addressed in the agreement for that work.
We process personal information in line with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.
2. Information we collect
Information you give us through the contact form
When you submit an inquiry through our contact form, we collect:
- your full name
- your business or company name
- your email address
- your phone number or messenger handle, if you choose to provide it (optional)
- the inquiry type you select
- the message you write, and anything you choose to include in it
- your consent choices — that you accepted our Terms & Conditions and this Privacy Policy, and whether you separately opted in to marketing communications
- the date and time your inquiry was submitted, and the page you submitted it from
Please only include what is needed to describe your inquiry. Do not send confidential business records, financial details, government-issued ID numbers, or other sensitive personal information through the form.
Information collected automatically
To keep the contact form usable by people rather than by bots, our anti-spam and abuse-prevention measures process technical information about your submission, including your IP address and signals about how the page was used. This is used for security and abuse prevention only.
As on most websites, standard technical information is also processed when you visit — such as IP address, browser and device type, the page that referred you, and the pages you view. This supports the secure operation and measurement of the website, and is described in the sections on cookies and similar technologies and service providers.
Booking a business assessment
If you book a free business assessment, the booking is handled on a third-party scheduling platform. Any details you enter there are collected by that provider under its own privacy policy and shared with us so we can hold the meeting.
3. How we use your information
We use the information described above to:
- respond to your inquiry and send you an acknowledgment that we received it
- communicate with you about the products or services your inquiry relates to, and answer follow-up questions
- follow up on a business discussion already under way with you
- arrange and prepare for a call, meeting, or business assessment you asked for
- protect the website and its forms against spam, automated submissions, fraudulent activity, and other abuse
- understand general website usage, identify technical problems, and improve how the website works
- keep an internal record of inquiries so we can handle them properly
- meet legal or regulatory obligations where these apply to us
We rely on your consent for the contact form, and on our legitimate interest in responding to business inquiries, keeping our systems secure, and improving our website.
We only use your information for marketing if you separately opted in to it. Sending an inquiry on its own never adds you to a marketing list. See marketing communications below.
We do not use your information to make automated decisions that produce legal or similarly significant effects on you.
4. Marketing communications
There is an important difference between the two kinds of email we may send you. Replying to your inquiry, acknowledging that we received it, and continuing a business conversation you started are ordinary correspondence — they are not marketing, and they happen because you contacted us.
Marketing is separate. The contact form has its own optional checkbox for receiving our newsletters, product updates, and occasional promotions. It is unticked by default, it is never required, and it is independent of the consent you give to our Terms & Conditions and this Privacy Policy. You can submit an inquiry without it.
If you leave it unticked, we will only use your details to deal with your inquiry and any conversation that follows.
If you tick it, we record that preference so we can send you those communications. You can withdraw your marketing consent at any time, at no cost, by emailing us at [email protected]. Any marketing email we send will include a way to unsubscribe. Withdrawing marketing consent does not affect our ability to reply to an inquiry you have already sent, and does not affect the lawfulness of anything we did before you withdrew it.
6. Service providers
Like most businesses, we use trusted third-party service providers to support website functionality, security, communications, analytics, and other business operations. These providers may process information on our behalf where necessary to deliver their service, and we seek to limit what is shared to what is reasonably necessary for that purpose.
The categories relevant to this website are:
- Security and anti-spam services. We use security and anti-spam technologies to help detect automated, fraudulent, or abusive activity, and to keep our forms usable. This includes Google reCAPTCHA on our contact form, which collects technical and interaction information from the page in order to tell a person from a bot. Google’s use of that information is governed by its own privacy policy and terms. We name this service specifically because it runs in your browser and collects information directly from you.
- Communication services. We use a third-party email delivery service to securely send the emails connected to your inquiry — the notification to our team and the acknowledgment to you. It processes the contents of those emails, including your name, company, email address, and message.
- Website operation and performance services. We use providers to operate the website and keep it running reliably. These process the standard technical information described in information we collect.
- Analytics and website-insight services. We use analytics technologies to understand website usage, identify technical issues, and improve the experience.
- Scheduling services. If you book a free business assessment, a third-party scheduling service handles the booking and shares your booking details with us.
Some of these providers operate outside the Philippines, so your information may be processed abroad. Where that happens, we rely on providers that commit to appropriate data protection safeguards in their own terms.
7. Data sharing
We share information, or allow access to it, only where it is reasonably necessary to:
- operate and maintain the website
- process and respond to your inquiry
- deliver the communications you asked for
- keep the website and our forms secure
- measure and improve how the website performs
- comply with applicable legal obligations, or respond to a lawful request
- establish, exercise, or defend a legal claim
That means the service providers described in service providers above, acting on our instructions or as controllers for their own service, and the Ailalay team members who need the information to respond to you. We do not share your information for anyone else’s advertising.
8. How long we keep your information
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected — responding to you and continuing any business discussion that follows — and afterwards to maintain appropriate business records, resolve disputes, protect our services, and comply with applicable legal obligations.
In practice, an inquiry that goes nowhere is kept for a limited period and then deleted, while correspondence connected to an actual engagement is kept for as long as that relationship and the applicable requirements need it. Marketing preferences are kept until you withdraw them.
We have not set a single fixed retention period covering every case. If you want to know what we currently hold about you, or want it deleted, contact us using the details in contact us and we will act on it.
9. How we protect your information
We take reasonable organisational, technical, and administrative measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure. Information you send through this website is transmitted over an encrypted connection, submissions are checked and protected against automated abuse, and access to inquiries is limited to the people at Ailalay who need it to respond to you.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security — which is why we ask you not to send sensitive information through the contact form.
10. Your rights
Under the Data Privacy Act of 2012, and subject to its conditions and exceptions, you have the right to:
- be informed — to know that your personal information is being processed, and why
- access — to obtain a copy of the personal information we hold about you, and details about how it is processed
- correct — to have inaccurate or incomplete information rectified
- object — to object to processing, including for direct marketing
- withdraw consent — including your marketing consent, at any time
- erasure or blocking — to ask us to remove or block your information where the grounds under the Act apply
- data portability — to obtain your information in an electronic format where the Act provides for it
- damages — to be indemnified for damage caused by inaccurate, incomplete, unlawfully obtained, or unauthorised use of your personal information
- complain — to lodge a complaint with the National Privacy Commission
To exercise any of these, contact us using the details below. We may need to confirm your identity before acting, so that we do not disclose your information to someone else. These rights are not absolute — in some cases we may need to keep information to meet a legal obligation or to defend a legal claim, and we will explain if that applies.
This section is a plain-language summary of rights under Philippine law, not legal advice about your particular situation.
11. Changes to this policy
We may update this policy as our website, our providers, or the applicable requirements change. The current version is always the one published here, and the “last updated” date at the top shows when it last changed. Where a change materially affects how we handle your information, we will take reasonable steps to make it clear.
12. Contact us
For any question about this policy, or to exercise any of the rights described in your rights, email us at [email protected] or use our contact form. We are based in Iloilo City, Western Visayas, Philippines, and normally respond during business hours, Monday to Friday, 8:00 AM to 5:00 PM (PHT).
This policy should be read together with our Terms & Conditions.