Privacy Policy

EDVA Technologies ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information you provide through this website, in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

By using this website or submitting information through it, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not submit information through the site.

Who is responsible for your personal information

EDVA Technologies is the personal information controller for information collected through this website. If you have questions or requests regarding your personal information, you may contact us at sales@edvatechnologies.com.

What personal information we collect

We collect only the information you choose to provide and a limited amount of technical information needed to operate the site securely. Specifically:

Information you give us

• Contact form: your name, email address, and the message you send.
• Project or quote request: your name, email address, phone number (optional), company name, role or job title, business goals, project scope and requirements, an indicative budget range, timeline, preferred technologies, information about your existing systems, and any files you choose to upload.
• Newsletter subscription: your email address, together with a record of your consent.
• Consultation booking: information you provide when scheduling a call through our booking tool.

Information collected automatically

• Technical and usage information such as your device and browser type, and a one-way, irreversibly hashed representation of your IP address, which we keep as proof of consent rather than as a stored plain IP address.
• Information generated by our anti-spam and bot-protection service when you submit a form.
• With your consent, analytics information about how you use the site (see our Cookie Policy).

We do not intentionally collect sensitive personal information (as defined under the Data Privacy Act). Please do not submit sensitive personal information — for example government-issued numbers, health, or financial account details — through this website's forms.

Why we process your personal information

We process your personal information for the following purposes:

• To respond to your inquiries and to prepare and discuss proposals for the services you ask about.
• To communicate with you about your request, including sending confirmations and follow-ups.
• To send you our newsletter, where you have subscribed and confirmed your subscription.
• To protect the website against spam, abuse, and fraudulent submissions.
• To understand and improve how our website performs, where you have consented to analytics.
• To comply with legal obligations and to establish, exercise, or defend legal claims.

Legal bases for processing

We rely on the following criteria for lawful processing under the Data Privacy Act:

• Your consent — for example, when you subscribe to our newsletter or agree to analytics cookies.
• Steps taken at your request prior to entering into a possible engagement — for example, responding to a project request.
• Our legitimate interests in operating, securing, and improving our business and this website, balanced against your rights and interests.
• Compliance with a legal obligation.

How we share your personal information

We do not sell your personal information. We share it only with service providers who process it on our behalf and under our instructions, and only to the extent necessary to provide this website and respond to you. These providers currently include:

• A customer-relationship management provider, used to record and manage inquiries.
• A transactional email provider, used to send confirmations, notifications, and newsletter messages.
• A cloud database and file-storage provider, used to store form submissions and any files you upload.
• A bot-protection and anti-spam provider, used to screen form submissions.
• A website analytics provider, used only where you have consented.
• A content-management and website-hosting provider, used to operate and serve the site.
• A scheduling provider, where you choose to book a consultation.

We may also disclose personal information where required by law, by a court, or by a competent government or regulatory authority, or where necessary to protect our rights, safety, or property.

Cross-border transfers

Some of our service providers are located outside the Philippines and may process your information abroad. Where this happens, we take steps intended to ensure your information continues to receive a level of protection consistent with the Data Privacy Act, including relying on the providers' contractual data-protection commitments.

How long we keep your personal information

We keep your personal information only for as long as necessary for the purposes described above — for example, for the duration of our discussions with you and for a reasonable period afterwards to maintain business records, resolve disputes, and meet legal requirements. When it is no longer needed, we securely delete or anonymize it.

How we protect your personal information

We implement reasonable and appropriate organizational, physical, and technical security measures intended to protect your personal information against loss, misuse, and unauthorized access, disclosure, or alteration — including encryption of information in transit and access controls on our systems. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Your rights under the Data Privacy Act

Subject to the conditions and exceptions in the law, you have the right to:

• Be informed whether your personal information is being processed.
• Access the personal information we hold about you.
• Request correction of inaccurate or outdated personal information.
• Object to the processing of your personal information, or withdraw consent you previously gave.
• Request the erasure or blocking of your personal information in the circumstances allowed by law.
• Data portability, where applicable.
• Be indemnified for damages sustained due to unlawful processing, as provided by law.
• Lodge a complaint with the National Privacy Commission.

To exercise any of these rights, please contact us at sales@edvatechnologies.com. We may need to verify your identity before acting on your request. You may also contact the National Privacy Commission (privacy.gov.ph) if you believe your rights have been violated.

Children's privacy

This website is intended for businesses and adults. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us so we can delete it.

Changes to this Policy

We may update this Policy from time to time. When we do, we will change the version and effective date shown on this page. Your continued use of the website after an update means you accept the revised Policy.

How to contact us

For any questions about this Policy or your personal information, contact EDVA Technologies at sales@edvatechnologies.com.