1. Information We Collect

We collect different types of information to provide and improve our services:

• Personal Identifiable Information (PII): Name, email address, phone number, company name, and role — collected when you submit forms, request services, or communicate with us.
• Technical Data: IP address, browser type, operating system, device type, and server logs.
• Usage Data: Pages visited, clicks, time spent on pages, navigation paths, and other interactions.
• Cookies & Tracking Technologies: Data collected through cookies, pixels, and similar tools for analytics, performance tracking, and user preference management.

2. How We Use Your Information

We process your data for the following purposes:

• To provide, operate, and improve our services
• To personalize user experience and respond to inquiries
• To manage user accounts, subscriptions, and billing
• To send marketing communications (only with your consent)
• To comply with legal and regulatory requirements
• To monitor, secure, and enhance website performance

3. Legal Basis for Processing (GDPR)

We process personal data under the following legal bases:

• Consent: When you explicitly agree to receive communications or accept cookies.
• Contract: When data processing is necessary to fulfill contractual obligations.
• Legal Obligation: When processing is required to comply with applicable laws.
• Legitimate Interests: For analytics, service improvement, and website optimization.

4. Sharing and Disclosure

We do not sell your personal data. We may share it with:

• Trusted service providers (e.g., hosting, analytics, email communications) who process data on our behalf under strict confidentiality agreements.
• Regulatory authorities when required by law or to comply with legal processes.
• Legal counsel or law enforcement to protect our rights, investigate fraud, or ensure security.

5. Data Retention

We retain personal data only as long as necessary for the purposes stated in this policy or as required by law. Once no longer needed, data is securely deleted, anonymized, or archived according to industry best practices.

6. Your Data Protection Rights

Under the General Data Protection Regulation (GDPR) and the Philippine Data Privacy Act (PDPA), you have the right to:

• Access and obtain a copy of the data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion (“erasure”) of your personal data
• Restrict or object to certain types of data processing
• Withdraw consent for marketing communications at any time
• File a complaint with the National Privacy Commission (NPC) or an EU supervisory authority

7. Security Measures

We employ industry-standard security measures to protect your data, including:

• SSL/TLS encryption for data transmitted online
• Secure storage and access controls Secure data storage and strict access controls
• Regular security audits and penetration testing
• Employee training on data protection and privacy best practices

8. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices or content. We encourage you to review the privacy policies of any external websites you visit.

9. International Data Transfers

Your personal data may be processed and stored outside your country of residence. In such cases, we ensure that adequate legal and technical safeguards — including standard contractual clauses — are in place to protect your information.

10. Contact Information

If you have questions, concerns, or wish to exercise your data rights, please contact us:

Email: policy@blackfortconsulting.com

Address: Unit 6i Amber Place, 67 Bayani Road, Taguig City, Philippines