Privacy Policy
This notice explains what personal data this website handles, why, and the rights you have under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission.
In short: this site has no sign-ups, forms, cookies, analytics or advertising. The only personal data involved is the basic technical information every web server receives, plus anything you choose to send by email.
1. Who is responsible for your data
The personal information controller for this website is Art Yap, an individual based in the Philippines. For any privacy question or request, contact privacy@your-domain.com.
2. What data is handled
When you visit the site
Like any website, the server that delivers these pages automatically receives technical information with each request: your IP address, browser and device type, the page requested, the referring page and the date and time. This is recorded in server logs by the hosting provider (see section 5).
When you email me
If you contact me, I receive your email address, your name if you include it, and the contents of your message.
What this site does not collect
- No cookies, local storage, tracking pixels or device fingerprinting (see the Cookie Policy).
- No analytics, advertising or social media plug-ins, and no third-party scripts.
- No accounts, sign-up forms or payment details.
- No sensitive personal information as defined in Section 3(l) of the Act.
The “Hold to scan this page” feature on the home page runs entirely in your browser. It reads whether this site has set any cookies or storage (it hasn't) and makes one request back to this same website to read its security headers. Nothing is stored or sent anywhere else.
3. Why it is used, and the legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Server log data | Delivering the site, keeping it secure, detecting and preventing abuse | Legitimate interests (Section 12(f) of the Act) |
| Emails you send | Reading and replying to your message, and any work that follows from it | Your request and the steps you ask me to take (Section 12(b)), and legitimate interests (Section 12(f)) |
Your data is not used for profiling, automated decision-making, marketing or advertising, and is never sold.
4. How long it is kept
- Server logs are kept only for the limited period set by the hosting provider, then deleted automatically.
- Emails are kept only as long as needed to handle your message and any resulting engagement, and are deleted or anonymized once no longer needed, or sooner if you ask.
5. Who receives it
This site is hosted by Vercel Inc. (United States), which acts as a personal information processor and handles server logs on my behalf under its own security and privacy commitments. Because Vercel operates outside the Philippines, this involves a cross-border transfer of the limited technical data described above. Your email is handled by my email provider for the same reason.
Personal data is otherwise disclosed only if required by law or a lawful order.
6. How it is protected
The site is served only over HTTPS, uses a strict Content Security Policy and other security headers, loads no third-party code, and keeps no database of visitors. Emails are stored in an access-controlled account.
7. Your rights
Under Sections 16 to 18 of the Data Privacy Act, you have the right to:
- be informed about whether and how your personal data is processed;
- access the personal data held about you;
- object to processing;
- erasure or blocking of your data;
- rectification of inaccurate data;
- data portability, a copy in a commonly used electronic format;
- damages if you are harmed by inaccurate, incomplete or unlawfully obtained data; and
- file a complaint with the National Privacy Commission at privacy.gov.ph.
8. Data deletion and other requests
To request deletion, access, correction or a copy of your data, email privacy@your-domain.com with the subject “Data deletion request” (or “Data access request”, etc.).
Please include:
- what you are asking for (deletion, access, correction or a copy);
- the email address you used to contact me, if any; and
- for server-log data, the approximate date and time of your visit and your IP address, so the records can be found.
I may ask for reasonable information to confirm the request comes from you. I aim to respond within 15 working days. Requests are free of charge.
9. Children
This website is not directed at minors (persons under 18) and does not knowingly collect personal data from them. It has no sign-ups or forms, so no age verification or parental consent is required. If you are a parent or guardian and believe a minor has emailed me personal data, contact privacy@your-domain.com and it will be deleted.
10. Other websites
Links to other websites, such as project sites, are governed by those sites' own privacy policies.
11. Changes to this notice
If this notice changes, for example if analytics or a contact form is added, the updated version will be posted here with a new date, and consent will be requested where the law requires it.