Privacy Policy

1. About This Privacy Policy

This Privacy Policy applies to:

• the BizPH website;
• BizPH account registration and authentication;
• the BizPH customer platform;
• BizPH products and solutions;
• public-facing BizPH features;
• customer support and communications; and
• other services operated by BizPH that link to this Privacy Policy.

Some information entered into BizPH is provided by businesses that use BizPH.

For example, a salon, restaurant, contractor, hotel, retailer, or other business may use BizPH to store information about its customers, employees, guests, suppliers, or delivery recipients.

In these situations, the business using BizPH may determine the purposes for which that information is collected and used, while BizPH processes information to provide the software and services.

2. Information We Collect

The information collected depends on how you interact with BizPH.

A. Website and Demo Requests

When you contact BizPH through our website, we may collect:

• name;
• business name;
• email address;
• phone number, if provided;
• business type;
• products or services of interest; and
• notes or other information you choose to submit.

Our website currently uses a contact/demo request form.

We do not currently operate a newsletter signup system or advertising-tracking system on the BizPH marketing website.

B. Account Information

When you create or use a BizPH account, we may process:

• email address;
• display name;
• account and organization information;
• organization name;
• organization slug;
• organization logo;
• timezone;
• currency;
• user membership information;
• roles and permissions; and
• account status information.

Authentication is provided through our authentication infrastructure. BizPH does not receive or store your password in its own application database.

C. Business and Operational Information

BizPH allows businesses to manage operational information.

Depending on the products enabled for an organization, this may include:

• customer information;
• employee information;
• supplier information;
• company information;
• leads and CRM records;
• invoices;
• payments and financial records;
• appointments;
• schedules;
• reservations;
• guest information;
• point-of-sale transactions;
• event information;
• tasks;
• inventory and procurement records;
• delivery and dispatch records;
• uploaded files and documents; and
• other information entered by authorized users.

D. Personal Information in Business Records

Business customers may enter personal information about other individuals into BizPH.

This may include:

• names;
• email addresses;
• phone numbers;
• addresses;
• delivery locations;
• customer records;
• employee information;
• reservation and guest information;
• appointment information;
• event guest information;
• payment-related business records;
• delivery proof information;
• signatures;
• photographs; and
• other information contained in documents uploaded by customers.

BizPH does not determine what information a customer chooses to enter into its organization.

Customers are responsible for ensuring that their collection and use of personal information through BizPH is lawful and appropriate.

E. Employee and Payroll Information

Organizations using HR and Payroll products may enter additional employment and statutory information.

Depending on how the customer uses the platform, this may include:

• employee numbers;
• employment dates;
• employment status;
• compensation and pay-rate information;
• tax status;
• TIN;
• SSS number;
• PhilHealth number; and
• Pag-IBIG number.

Customers are responsible for ensuring that they have an appropriate legal basis and authorization to process this information.

F. Dispatch and Delivery Information

Organizations using Dispatch may enter:

• recipient name;
• phone number;
• email address;
• pickup address;
• delivery address;
• geographic coordinates associated with delivery locations;
• proof-of-delivery recipient name;
• signature image; and
• delivery photographs.

Delivery tracking links may display limited recipient information to anyone who possesses the valid tracking link.

Tracking links are designed to use an unguessable token and currently expire 14 days after the scheduled delivery date.

Customers should therefore avoid sharing tracking links with unauthorized individuals.

G. Files and Documents

Customers may upload files and documents through BizPH Files.

Uploaded documents may contain personal or confidential information depending on what the customer chooses to store.

Files may include:

• business documents;
• contracts;
• forms;
• identification documents;
• signed documents;
• photographs;
• PDFs; and
• other supported file types.

BizPH does not inspect every document for personal information before storage.

Customers remain responsible for determining what documents they upload and share.

3. How We Use Personal Information

BizPH may process personal information for purposes including:

Providing the Services

To:

• create and maintain accounts;
• authenticate users;
• provide subscribed products;
• manage organizations and memberships;
• process customer requests;
• provide product functionality;
• store files and business records;
• provide support;
• operate public booking, ordering, tracking, and property listing and inquiry features; and
• maintain service functionality.

Security and Access Control

To:

• authenticate users;
• enforce organization boundaries;
• enforce roles and permissions;
• detect unauthorized access;
• maintain audit records;
• protect the platform; and
• investigate security incidents.

Business Administration

To:

• manage subscriptions;
• confirm payments;
• communicate about services;
• maintain business records;
• respond to inquiries;
• resolve disputes; and
• enforce agreements.

Legal and Regulatory Purposes

To:

• comply with applicable laws;
• respond to lawful requests;
• protect legal rights;
• establish or defend legal claims; and
• comply with applicable accounting, tax, regulatory, or other obligations.

4. Legal Basis for Processing

Where required by applicable law, BizPH processes personal information on an appropriate legal basis.

Depending on the circumstances, this may include:

• performance of a contract or provision of requested services;
• compliance with legal obligations;
• legitimate interests, where applicable and appropriate;
• consent, where consent is required or relied upon; and
• other lawful bases recognized under applicable law.

Where processing is based on consent, the individual may withdraw consent where permitted by law.

Withdrawal of consent does not necessarily affect processing that occurred before withdrawal or processing that has another lawful basis.

5. Customer-Controlled Information

BizPH is a business software provider.

When a customer uses BizPH to collect or manage information about its own customers, employees, guests, suppliers, or other individuals, the customer may have its own responsibilities under applicable data privacy laws.

For example, a business using BizPH may determine:

• what information it collects;
• why it collects it;
• how long it needs it;
• who within its organization may access it; and
• whether it is legally permitted to process it.

BizPH provides technical tools and controls to support the customer’s use of the platform but does not replace the customer’s own privacy obligations.

Customers should provide their own privacy notices where required.

6. Sharing and Disclosure

BizPH may disclose or provide access to personal information where reasonably necessary to provide the services or comply with applicable requirements.

This may include:

Service Providers

BizPH may use third-party providers for services such as:

• authentication;
• cloud database infrastructure;
• cloud file storage;
• hosting;
• mapping and geolocation;
• communications infrastructure; and
• other technical services required to operate BizPH.

Current infrastructure providers include services such as Supabase, Vercel, Railway, and Mapbox, depending on the applicable BizPH feature.

Customer-Authorized Access

Information may be accessed by authorized users within a customer’s organization according to the organization’s roles and permissions.

Legal Requirements

BizPH may disclose information where required or permitted by applicable law, lawful government requests, court orders, or other legal processes.

Protection of Rights and Security

BizPH may disclose information where reasonably necessary to investigate security incidents, prevent fraud or abuse, protect the rights and safety of users, or protect BizPH and its services.

BizPH does not sell personal information to third parties.

7. Third-Party Infrastructure

BizPH uses third-party infrastructure providers to operate portions of the service.

For example:

Supabase may provide authentication, database, and storage infrastructure.

Mapbox may provide mapping, geocoding, routing, and map-related functionality for applicable Dispatch features.

Vercel and Railway may provide application hosting infrastructure.

Third-party providers may process information as necessary to provide their services to BizPH.

Their processing may be subject to their own terms and privacy policies.

BizPH seeks to use appropriate contractual, organizational, and technical measures when engaging third-party service providers.

8. Payments

BizPH currently does not operate an integrated online payment gateway.

Customers may arrange subscription payments manually through payment methods communicated by BizPH, which may include GCash or bank transfer.

BizPH does not receive or store payment-card numbers through its application.

Payment information recorded in BizPH may include the amount, payment method, and transaction or reference information entered by an authorized user.

9. Cookies and Similar Technologies

BizPH currently uses only limited technologies necessary for its services.

The customer platform uses authentication session cookies associated with its authentication provider.

BizPH may also store a local device preference, such as whether the application sidebar is collapsed.

BizPH currently does not use:

• Google Analytics;
• Google Tag Manager;
• Meta/Facebook pixels;
• Microsoft Clarity;
• PostHog;
• advertising pixels;
• device fingerprinting; or
• a marketing cookie-consent system.

The BizPH marketing website currently does not use analytics or advertising tracking.

This may change in the future. If BizPH introduces material tracking or analytics technologies, this Privacy Policy may be updated accordingly.

10. Public Features

Certain BizPH products may provide public-facing features.

Public Schedule Booking

A visitor may provide:

• name; and
• mobile number.

The resulting booking interface is designed not to publicly display the visitor’s mobile number, notes, or payment information.

Public Reservations

A visitor may provide:

• name;
• phone number;
• optional email;
• dates;
• guest count; and
• notes.

The public confirmation provides a confirmation number.

Public Dispatch Ordering

A visitor may provide:

• name;
• phone number;
• optional email;
• delivery address; and
• delivery location information.

Dispatch Tracking

A valid tracking link may display:

• recipient name; and
• a summarized delivery address.

Tracking links are designed to use a random token and currently expire 14 days after the scheduled delivery date.

Anyone who receives a valid tracking link may potentially view the information made available through that link. Customers should therefore treat tracking links as confidential.

Public Property Listings and Inquiries

A BizPH customer that uses Property may publish a public page of its properties for sale. A visitor who sends an inquiry through that page may provide contact details and a message. The inquiry is delivered to the customer that owns the page, which is responsible for how it handles that information. BizPH may also use limited technical information to protect public forms from abuse.

11. Files and Electronic Signatures

BizPH Files uses organization-scoped storage and access controls.

Documents are accessed through authenticated and authorized requests.

Files do not currently provide a public-link sharing feature.

Where a file is downloaded, BizPH may issue a short-lived signed storage URL after authorization. The current signed download URL expires after approximately five minutes.

Electronic signature requests may involve a drawn signature image.

When a signature process is completed, BizPH may generate a separate signed PDF containing the applicable signatures.

12. Security

BizPH uses organizational and technical controls intended to protect personal information and business data.

These controls include, depending on the applicable feature:

• authentication;
• organization-level tenant isolation;
• role and permission controls;
• server-side authorization;
• audit logging;
• access-controlled file storage;
• short-lived signed file URLs;
• validation of submitted data;
• generic handling of unexpected server errors;
• protection of sensitive fields from application logs; and
• security reviews and testing.

No method of transmitting or storing information can be guaranteed to be completely secure.

Customers are also responsible for protecting their account credentials and controlling access to their organization.

13. Data Retention

BizPH does not currently publish a fixed universal retention period for all categories of personal information.

Personal information may be retained for as long as reasonably necessary for purposes including:

• providing and concluding the services;
• maintaining customer accounts;
• maintaining appropriate business and transaction records;
• complying with legal, tax, accounting, or regulatory obligations;
• resolving disputes;
• establishing or defending legal claims;
• enforcing agreements;
• protecting the security and integrity of the service; and
• other lawful purposes.

When personal information is no longer reasonably necessary for applicable purposes, BizPH may delete, anonymize, or otherwise dispose of it, subject to applicable legal requirements.

Because BizPH currently does not provide automatic customer account or organization deletion, cancellation or suspension of an account does not necessarily result in immediate deletion of stored information.

14. Data Storage

BizPH uses cloud-based infrastructure for application, database, authentication, and file-storage services.

Depending on the service involved, information may be processed or stored through third-party infrastructure providers and may be processed outside the Philippines.

BizPH will take reasonable steps to use appropriate contractual and technical arrangements for applicable service providers.

15. Data Subject Rights

Subject to applicable law and any applicable limitations, individuals may have rights including:

• the right to be informed;
• the right to access personal information;
• the right to correct inaccurate information;
• the right to object to certain processing;
• the right to request erasure or blocking where legally applicable;
• the right to data portability where applicable;
• the right to file a complaint; and
• other rights provided by the Philippine Data Privacy Act and applicable regulations.

The National Privacy Commission identifies these rights under the Data Privacy Act.

Requests should include enough information for BizPH to identify the relevant account, organization, or processing activity.

Where information is controlled by a BizPH customer rather than BizPH itself, we may direct the request to the relevant customer or assist the customer as appropriate.

16. How to Exercise Your Privacy Rights

Privacy requests or questions may be submitted through:

We may request reasonable information necessary to verify the identity of the person making a request and to protect personal information from unauthorized disclosure.

We will respond to valid requests within the period required by applicable law.

17. Privacy Contact

For privacy questions, concerns, or requests, contact:

BizPH may designate or update a formal Data Protection Officer or other privacy compliance contact as its operations develop.

18. Personal Data Breaches

BizPH maintains procedures intended to identify, assess, contain, investigate, and respond to personal-data security incidents.

Where applicable law requires notification of a personal data breach, BizPH will follow the notification requirements of the National Privacy Commission and other applicable authorities.

Where required, affected data subjects will also be notified using appropriate communication methods.

Philippine privacy rules impose specific notification requirements for qualifying personal-data breaches, including applicable 72-hour notification requirements.

19. Children's Privacy

BizPH is a business software service and is not directed toward children.

BizPH does not knowingly seek to collect personal information from children through its marketing website.

If you believe that a child has provided personal information to BizPH without appropriate authorization, please contact us.

20. International Processing

Because BizPH uses cloud-based service providers, personal information may be processed or stored in jurisdictions outside the Philippines.

Where applicable, BizPH will take reasonable measures to ensure that personal information is processed in accordance with applicable privacy requirements and appropriate contractual or organizational safeguards.

21. Changes to This Privacy Policy

BizPH may update this Privacy Policy when its services, technology, business practices, or legal requirements change.

The updated version will be published on the BizPH website with a revised “Last Updated” date.

Where appropriate, BizPH may provide additional notice of material changes.

22. Contact Us

For questions, privacy requests, or concerns regarding this Privacy Policy: