Privacy Policy

1. Who We Are

This Privacy Policy applies to builtbymiguel.net, operated by Miguel Umbac (“built by Miguel,” “we,” “us,” or “our”), a sole proprietorship based in Dumaguete City, Philippines, providing SEO, web design, and automation services to clients worldwide.

2. Information We Collect

When you interact with our website or submit an audit, demo, or contact form, we may collect the following information:

• Contact Information: Your name, email address, phone number, and business name.
• Business Details: Your website URL, target service areas, and local market goals.
• Client Account Data: If you become a client, information processed through your CRM, automation tools, and client portal, including business operational data you provide us access to (e.g. lead records, scheduling data, review information).
• Diagnostic Analytics: Technical data such as browser type, device type, referring URL, and approximate geolocation (derived from IP address), used to understand website performance and visitor behavior.
• Cookies and Similar Technologies: See our Cookie Policy for full details on what's used and how to control it.

3. How We Use Your Information

Your information is used solely to provide our core services, including:

• Recording and delivering your requested video visibility audit or website demo.
• Responding directly to project discovery inquiries and scheduling consultations.
• Configuring client portal access and operational automation engines for active clients.
• Sending service notifications, performance reports, and, if you're an active client, project updates.
• Improving website performance and user experience based on aggregated, non-identifying analytics.

We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not use your contact or business information for third-party advertising or resell it to data brokers.

4. Legal Basis for Processing (For Visitors in the EU/EEA/UK)

If you're located in the European Union, European Economic Area, or United Kingdom, our legal basis for processing your personal data depends on the interaction:

• Contract performance: processing needed to deliver a service you've requested or engaged us for.
• Consent: where you've voluntarily submitted a form (e.g. the free audit request).
• Legitimate interests: basic website analytics and security monitoring, balanced against your rights.

This section is included as a precaution given the “worldwide” scope of our services; it applies only if you're actually located in the EU/EEA/UK and has no effect otherwise.

5. How Long We Keep Your Information

Contact form submissions (audit/demo requests that don't convert to a client engagement) are retained for 12 months, then deleted.

Active client data is retained for the duration of the engagement, and for 3 years afterward, in line with standard accounting and recordkeeping practices. You may request earlier deletion at any time, see Section 9.

6. Data Security & Storage

We deploy TLS/SSL encryption across all network requests. Form submission data is processed via secure serverless functions and transmitted directly to encrypted client pipelines. We do not maintain unencrypted public database endpoints. No method of transmission or storage is 100% secure, and while we take reasonable technical and organizational measures to protect your data, we cannot guarantee absolute security.

7. Third-Party Service Providers

We work with trusted infrastructure providers to operate our services, including cloud hosting providers, email delivery services, SMS/communication routing services, and payment processors. These providers only receive the information necessary to perform their specific function, are bound by their own data protection obligations, and are prohibited from using your information for their own independent marketing purposes.

8. International Data Transfers

We are based in the Philippines and serve clients in the United States, Canada, Australia, and other countries. Your information may be processed and stored on servers located outside your own country, including in the Philippines and in countries where our third-party service providers operate. By using our services, you consent to this transfer.

9. Your Data Rights

Depending on where you live, you may have some or all of the following rights regarding your personal data. We work with clients worldwide, not just the jurisdictions named below, they're listed as common examples, not an exhaustive or exclusive list:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your personal data, subject to legal or contractual retention requirements.
• Objection/Restriction: object to or request restriction of certain processing (where applicable, e.g. under GDPR).
• Portability: request your data in a portable format (where applicable, e.g. under GDPR).
• California residents (CCPA/CPRA): the right to know what personal information is collected, request deletion, and opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as defined under the CCPA/CPRA.
• Canada residents (PIPEDA): the rights above, plus the right to file a complaint with the Office of the Privacy Commissioner of Canada.
• Australia residents (Privacy Act 1988): the rights above, plus the right to complain to the Office of the Australian Information Commissioner (OAIC).
• Philippines residents (Data Privacy Act of 2012): the rights above, plus the right to be informed and the right to file a complaint with the National Privacy Commission.
• Wherever you're located: if the law of your country or region grants you data protection rights beyond what's listed above, we will honor those rights to the extent required by applicable law. Contact us using the details below and we'll address your request based on where you live, even if your specific country isn't named above.

To exercise any of these rights, contact us at umbacmi@gmail.com. We will respond within 30 days of a verified request, extendable by an additional 30 days where necessary due to the complexity or volume of the request, and will notify you if an extension is needed.

10. Children's Privacy

Our services are not directed to individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at umbacmi@gmail.com and we will delete it.

11. Third-Party Links

Our website may contain links to third-party websites, including social media profiles, blog references, or resources. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices or content of any third-party site, and we encourage you to review the privacy policy of any site you visit.

12. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify affected individuals and relevant authorities as required by applicable law, without undue delay.

13. Limitation of Liability

To the maximum extent permitted by applicable law, built by Miguel is not liable for any indirect, incidental, or consequential damages arising from unauthorized access to or use of your personal data resulting from circumstances beyond our reasonable control, including but not limited to third-party service provider failures, security breaches despite reasonable safeguards, or acts of third parties. This Privacy Policy does not create any contractual rights beyond what is expressly stated here.

14. Severability and No Waiver

If any provision of this Privacy Policy is found unenforceable, the remaining provisions remain in full force and effect. Our failure to enforce any provision of this Policy does not constitute a waiver of that provision.

15. Governing Law and Dispute Resolution

This Privacy Policy is governed by the laws of the Republic of the Philippines, without regard to conflict of law principles. Any dispute arising from or relating to this Privacy Policy or our data practices will first be addressed through good-faith informal negotiation between the parties. If a dispute cannot be resolved informally within 30 days, it will be subject to the exclusive jurisdiction of the courts of Dumaguete City, Negros Oriental, Philippines.

This governing-law choice does not limit our services to clients in the Philippines, we work with clients worldwide, and this clause exists solely to establish a single, consistent jurisdiction for resolving disputes. It does not override any mandatory consumer protection or data protection rights you may be entitled to under the law of your own country of residence, to the extent such rights cannot be validly waived by agreement.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last Updated” date at the top of this page. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.