1. Who is responsible
Tinkobox operates this website and is responsible for personal information collected through it. Tinkobox determines why and how this information is processed and acts as the personal information controller.
The individual accountable for Tinkobox privacy compliance can be contacted through the email address in section 10 and will be identified to a data subject upon request.
2. Information we collect
When you submit the contact form or communicate with Tinkobox, we may collect your name, email address, phone number, company, service interest, indicative budget, project details and later business correspondence. Please do not send government identification numbers, payment-card details, health information or other sensitive personal information unless specifically requested through an appropriate secure process.
The hosting environment may create technical and security logs containing information such as IP address, browser type, requested pages, timestamps, referring page and detected security events.
If you accept analytics, Google Analytics may collect visited pages, general device and browser characteristics, referral source, interactions and approximate location. Contact-form field values are not intentionally sent to Google Analytics. We do not use this website to make decisions about you solely by automated means.
3. Purposes and lawful bases
- To respond to enquiries, take steps you request before a possible contract and assess whether Tinkobox can help.
- To prepare proposals, deliver agreed services and manage client relationships and payments.
- To operate, secure, troubleshoot and improve the website and business.
- To keep necessary business records, enforce agreements, resolve disputes and comply with legal, accounting and security obligations.
Depending on the activity, processing is based on your consent, steps taken at your request before entering a contract, performance of a contract, compliance with law, or Tinkobox’s legitimate interests in responding to enquiries, protecting the website and operating its business where those interests are not overridden by your rights. Optional analytics is based on consent and remains off unless you accept it.
4. Retention
Unsuccessful or inactive enquiry records are ordinarily deleted or anonymised within 24 months after the last meaningful contact. Client, contract, invoice and project records are ordinarily kept for the relationship and for up to five years afterward, unless a longer period is required by law or reasonably needed for a legal claim. Routine technical logs are normally retained for no longer than 90 days unless they are needed to investigate a security incident. Consent-based analytics data is kept for no longer than 14 months under Tinkobox’s intended retention limit. Data is securely deleted or anonymised when it is no longer needed.
5. Sharing, service providers and transfers
Tinkobox does not sell or rent personal information. Information is shared only when reasonably necessary with authorised people and service providers, including Hostinger for website hosting and related infrastructure, email and security providers, Google Analytics after consent, and professional legal or accounting advisers when needed. Information may also be disclosed when required by law or reasonably necessary to protect rights, safety or legal claims.
Some providers may process information outside the Philippines. Tinkobox remains accountable for personal information under its control and uses providers subject to contractual terms, confidentiality duties and appropriate safeguards. Provider privacy practices also apply to their own processing.
6. Cookies and analytics choices
The website uses storage that is necessary for security, administration and remembering your privacy choice. Google Analytics remains off unless you select “Accept analytics” in the privacy prompt. If accepted, Google Analytics may set measurement cookies used to distinguish visits and understand site performance. Advertising storage and ad-personalisation signals are disabled.
Your browser remembers the choice so the prompt does not appear again on every page or refresh. You can withdraw analytics consent by clearing the stored site data for tinkobox.com in your browser settings; the privacy prompt will appear again on your next visit. Withdrawal does not affect processing that took place before withdrawal.
7. Your privacy rights
Subject to applicable law, you may request information about processing, access to your personal information, correction of inaccurate information, objection to or restriction of processing, withdrawal of consent, erasure or blocking, and a portable copy where applicable. You may also have rights to damages and to lodge a complaint with the Philippine National Privacy Commission.
To protect you, Tinkobox may request reasonable information to verify your identity before acting on a request. Some requests may be limited where continued processing is required by law, necessary for a contract or needed to establish, exercise or defend a legal claim. Learn about data-subject rights or how to file a complaint with the NPC.
8. Security and data breaches
Tinkobox uses reasonable and appropriate organisational, physical and technical safeguards designed to protect personal information, including restricted access, secure connections, software maintenance and security monitoring appropriate to the size and nature of the website. No internet service can guarantee absolute security.
Suspected privacy or security incidents are assessed and contained, and affected individuals and the National Privacy Commission will be notified when required by applicable law.
9. Children
This website is directed to businesses and is not intended for children. Tinkobox does not knowingly collect personal information from anyone under 18 through this website. A parent or guardian who believes a child submitted information may contact Tinkobox to request its deletion.
10. Contact and policy changes
Privacy questions, requests, objections or concerns can be sent to the person accountable for Tinkobox privacy at: hello@tinkobox.com. Please use the subject “Privacy Request” so the message can be identified promptly.
Tinkobox may update this policy when the website, providers, services or legal requirements change. Material changes will be reflected by a new effective date and, when appropriate, an additional notice. Changes do not reduce rights already provided by applicable law.