Privacy Policy

Who We Are

Nino IT Services, trading as NinoTech Labs, is the Personal Information Controller for all personal data collected through this website and our services.

Data Protection Officer

As required under Section 21 of the Data Privacy Act of 2012, NinoTech Labs has designated a Data Protection Officer. The Owner of Nino IT Services currently acts as the Data Protection Officer and can be reached at ninotechlabs@gmail.com for all data privacy concerns.

What Data We Collect

We collect the following:

• Name and contact information submitted through our contact forms or during service onboarding
• Business information provided during a service engagement
• Website usage data collected automatically through cookies and analytics tools
• Payment reference information only (we do not collect or store credit card or bank account numbers directly)

Why We Collect It

We process personal data for the following purposes:

• To fulfill service contracts and deliver agreed work (contractual necessity)
• To respond to inquiries and provide support (legitimate interest)
• To send project updates and relevant communications (consent or contractual necessity)
• To comply with Philippine tax and legal obligations including Bureau of Internal Revenue requirements (legal obligation)
• To improve our services using anonymized data only (legitimate interest)

Cookies and Website Tracking

Our website uses the following:

• Cloudflare Turnstile: Bot protection that processes browser signals to verify human visitors. No personal data is stored by NinoTech Labs from this process.
• Analytics tools (if enabled): Collects anonymized data such as pages visited and general location. No personally identifiable information is collected.
• Contact form submissions: Data entered in contact forms is stored in our systems for follow-up purposes only.

You may disable cookies through your browser settings. This will not prevent you from using the website.

Third-Party Services

We use the following third-party services that may process personal data on our behalf:

• Supabase (database and authentication) -- servers may be located outside the Philippines
• Vercel (web application hosting) -- servers may be located outside the Philippines
• Cloudflare (Domain Name System, security, and bot protection)
• Google (email communications)
• PayMongo or Xendit (payment processing, where applicable)

We do not sell, rent, or trade your personal data to any third party for marketing purposes. When working with sub-contractors, we require a Data Sharing Agreement before sharing any client data, as required by National Privacy Commission Circular No. 16-03.

Cross-Border Data Transfers

Some of our third-party processors store and process data on servers outside the Philippines. By using our services, you acknowledge this. We ensure all processors maintain security standards comparable to those required by Philippine law.

How Long We Keep Your Data

• Client project data: 5 years after project completion (Bureau of Internal Revenue compliance)
• Contact inquiries that did not result in a project: Deleted or anonymized within 12 months
• Financial records and invoices: 10 years (Bureau of Internal Revenue requirement)
• Website analytics: Up to 24 months in anonymized form

Your Rights

Under the Data Privacy Act of 2012, you have the right to:

• Be informed about how your data is used
• Access a copy of your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data
• Move your data (data portability)
• Object to automated processing
• File a complaint with the NPC

To exercise any of these rights, email ninotechlabs@gmail.com. We will respond within 15 business days.

Data Breach Notification

If a personal data breach occurs, NinoTech Labs will notify affected data subjects and the National Privacy Commission within 72 hours of discovery where the breach is likely to cause serious harm. This complies with National Privacy Commission Circular No. 16-03.

How To File A Complaint

If you believe your data privacy rights have been violated:

1. Contact us first at ninotechlabs@gmail.com. We will respond within 15 business days.
2. If unresolved, file a complaint with the National Privacy Commission:

   Website: privacy.gov.ph

   Email: complaints@privacy.gov.ph

   Address: 5th Floor, Delegation Building, Philippine International Convention Center Complex, Roxas Boulevard, Pasay City, Metro Manila