Privacy Policy

We collect information you provide directly, data generated by your use of our services, and information from third-party sources where lawfully permitted. Categories include:

We use collected data only for legitimate business purposes under a lawful basis:

• Service Delivery — To respond to inquiries, schedule consultations, and deliver contracted services.
• Portal Operations — To authenticate staff and consultants accessing the internal CMS portal.
• Security & Fraud Prevention — To monitor for unauthorized access, audit trails, and threat detection.
• Analytics — To analyze site traffic, improve content, and measure service performance (aggregated only).
• Legal Compliance — To fulfill obligations under Philippine law (RA 10173 — Data Privacy Act of 2012) and applicable regulations.
• Communications — To send transactional emails such as inquiry confirmations and OTP passcodes.

AmBytez does not disclose personal data to external parties except in the following circumstances:

• Service Providers — Carefully vetted vendors (e.g., email delivery, cloud hosting) bound by data processing agreements.
• Legal Obligations — When required by Philippine law, court order, or government authority.
• Business Transfers — In the event of a merger or acquisition, with appropriate data protections maintained.
• With Your Consent — Where you have explicitly authorized a specific disclosure.

All third-party processors are contractually required to handle data with equivalent or stricter standards than our own.

We implement layered security controls proportionate to the sensitivity of the data we handle:

• Passwords are hashed using bcrypt (cost factor 12) — never stored in plain text.
• Staff portal access is protected by multi-factor authentication (MFA) via one-time passcodes.
• All data in transit is encrypted using TLS 1.2+.
• Access to production systems is restricted by role-based access control (RBAC).
• Audit logs are maintained for all administrative actions within the portal.
• Regular security reviews and penetration assessments are conducted.

Despite these measures, no system is 100% immune to security incidents. In the event of a breach affecting your data, we will notify you as required by law.

Our website uses cookies and similar technologies for the following purposes:

You may configure your browser to refuse cookies; however, some portal features will not function without session cookies.

We retain personal data only as long as necessary for the purpose it was collected or as required by law:

• Inquiry / Contact form submissions — Retained for 3 years for business continuity and follow-up.
• Portal account data — Retained while the account is active; deleted within 30 days of account termination.
• Server logs & visit telemetry — Retained for 12 months for security monitoring.
• OTP tokens — Expire within 5 minutes and are purged immediately after use or expiry.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights:

• Right to be Informed — You have the right to know how your data is being processed.
• Right to Access — You may request a copy of the personal data we hold about you.
• Right to Rectification — You may request correction of inaccurate or incomplete data.
• Right to Erasure — You may request deletion of your data where there is no lawful basis for retention.
• Right to Object — You may object to processing based on legitimate interest.
• Right to Data Portability — You may request your data in a structured, machine-readable format.
• Right to Lodge a Complaint — You may file a complaint with the National Privacy Commission (NPC) at privacy.gov.ph.

To exercise any of these rights, contact our Data Protection Officer at privacy@ambytez.com.

Our website and portal may integrate with or link to third-party services. These include:

• Google Fonts — Typography rendering (no personal data shared).
• Bootstrap CDN — CSS/JS framework delivery.
• Hostinger SMTP — Transactional email delivery for OTP and inquiry confirmations.
• LinkedIn / GitHub — External social profile links (governed by their own privacy policies).

We are not responsible for the privacy practices of third-party websites linked from our pages. We encourage you to review their policies independently.

AmBytez's services are directed exclusively to enterprise organizations and professional adults. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware of such collection, we will delete the data promptly.

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or technology. When we make material changes:

• The "Last Updated" date at the top of this page will be revised.
• For significant changes, we will notify registered portal users via email.
• Continued use of our website or services after the effective date constitutes acceptance of the updated policy.

For any privacy-related inquiries, data subject requests, or concerns, please contact our designated Data Protection Officer: