Privacy Policy

Who we are

Webkinn is a trading name for a website design, development, hosting and infrastructure-maintenance business. We are an online-only business based in the Philippines and we work with businesses worldwide. In this policy, “Webkinn”, “we”, “us” and “our” refer to that business.

For the purposes of the Philippines Data Privacy Act of 2012 (DPA), and where applicable the EU General Data Protection Regulation (GDPR) and UK GDPR, Webkinn is the controller of the personal data described in this policy.

Webkinn is the trading name used for these services. We provide the business details required by applicable law in invoices, written confirmations and on request from clients or regulators. We do not publish a street address because we do not operate a public office or receive visitors. This is explained further in the section “Contact and complaints”.

Scope of this policy

This policy covers personal data we handle through webkinn.com, our enquiry and project forms, email correspondence, and the delivery of client projects. It does not cover third-party websites or services we link to, including payment pages, domain registrars and hosting control panels. Those services have their own privacy notices.

Websites we design or host for clients are operated for those clients. Their own privacy notices govern the personal data collected through those sites, and our client-data terms apply to the processing we perform on the client's behalf.

Our services are intended for businesses. We do not knowingly offer services to children, and we ask that you do not submit information about children. We also ask you not to send sensitive personal data, such as government identification numbers, health information, financial account details, passwords or card numbers. The forms are not designed for that kind of information.

Personal data we collect

We try to collect only what we need to answer an enquiry or deliver a project.

Information you give us

• Contact details: your name, email address and, if you provide it, your business name.
• Project details: your current website, the service you want, the number of pages, domain status, launch timing, goals, and links to logos, images or content that you choose to share.
• Correspondence: the content of emails and messages you send us, including any attachments or links.
• Client records: the scope, quote, invoices, payment status, delivery notes and approvals needed to manage a project.

Information created when you use the site

• Form metadata: the page you submitted from, the time of submission, a generated reference number, and consent status. This helps us find your enquiry and keep an audit trail.
• Technical data: our hosting provider processes standard server-log information such as IP address, browser type, requested page, referring page and timestamps for security, fraud prevention and service delivery. We do not use this data to build advertising profiles.

Payment information

We do not collect or store card numbers on this website. When a project is ready to launch, we send an invoice or a payment link through a payment provider. That provider processes your payment details under its own terms and privacy notice. We receive limited information such as your name, email address, invoice amount, payment status and transaction reference. We do not receive your full card number.

What we do not collect

We do not run analytics, advertising pixels, session recording, heatmaps or cross-site tracking on this site. We do not buy contact lists. We do not ask for passwords, card details, government IDs or sensitive personal data through the forms. If you send sensitive data by email anyway, we will delete it where practicable and ask you to use a safer method.

Why we use it and our lawful bases

We use personal data for the following purposes:

• To respond to your enquiry and decide whether a project is a fit. This is based on our legitimate interests in running and developing our business, and on steps you ask us to take before entering a contract.
• To prepare a quote and deliver a project, including reviewing scope, building the site, corresponding with you, invoicing and launching. This is based on performing our contract with you or taking steps at your request before a contract.
• To keep business and tax records, prevent fraud, resolve disputes and comply with legal obligations. This is based on our legitimate interests and on legal obligations that apply to us.
• To keep the site and our systems secure, including investigating abuse or security incidents. This is based on our legitimate interests in protecting our business, clients and users.
• To publish a project in our portfolio, but only with your separate permission. This is based on consent, which you can withdraw for future use at any time.
• To send service messages about an active project or plan. These are not marketing messages. We do not run a newsletter or add enquiry contacts to a marketing list.

Where we rely on consent, you can withdraw it at any time by emailing webkinnemail@gmail.com. Withdrawal does not affect processing carried out before the withdrawal, or processing based on another lawful basis.

Cookies and tracking

At the time of publication, this website does not set first-party cookies, does not use analytics or advertising pixels, and does not use local storage or similar tracking technologies. Because there are no non-essential cookies, there is no cookie-consent banner.

Our hosting provider may process technical request data in server logs as described above. That is not a cookie. If you follow a link to a payment provider or another third-party site, that site may use its own cookies and tracking technologies. Those are governed by its policies, not ours.

If we introduce analytics, embedded media or other tools that set non-essential cookies, we will update the Cookie Policy and ask for consent where the law requires it before those tools load.

Who we share data with

We do not sell personal data. We do not share it for cross-context behavioural advertising. We share it only with service providers who help us operate the business, or where the law requires it.

We may also disclose information to professional advisers, insurers, auditors, or authorities when we are legally required to do so, or when it is necessary to establish, exercise or defend a legal claim. If we sell or transfer the business, relevant records may be transferred as part of that transaction, subject to appropriate confidentiality protections.

We do not authorise service providers to use your data for their own marketing. They process it for the purposes above and under their own terms and data-protection commitments.

International transfers

Webkinn is based in the Philippines, and the service providers we use may process data in other countries, including the United States and the European Union. Data protection laws in those countries may differ from the laws where you live.

Where required, we rely on the transfer safeguards offered by our providers, such as standard contractual clauses, and on legal exceptions available to us. Because our providers and their infrastructure can change, we do not list a fixed data-centre location in this policy. You can ask us for more information about the providers used for your project by emailing webkinnemail@gmail.com.

If you are in the EU or UK and have concerns about a transfer, you can contact us and also complain to your local supervisory authority.

How long we keep data

We keep personal data only as long as we need it for the purpose we collected it, or as long as the law requires.

• Enquiries that do not become projects: normally up to 24 months from the last meaningful contact, so we can pick up a conversation if you return. You can ask us to delete an enquiry sooner.
• Client and project records: normally up to six years after the end of the project or the final renewal, to meet accounting, tax and contract-record needs and to handle disputes.
• Invoices and payment records: kept for the period required by applicable tax and accounting law, which may be longer than six years.
• Server logs: retained by our hosting provider for a short operational period under its settings and policies. We do not maintain a separate copy of raw server logs.
• Portfolio material: kept while it is published, and removed within a reasonable period after you withdraw permission.

When data is no longer needed, we delete it or anonymise it. Some data may remain in backups for a limited period before those backups are overwritten or deleted under the provider's schedule.

How we protect data

We use technical and organisational measures that are reasonable for a small online business. These include encrypted connections (HTTPS) across the site, access controls and multi-factor authentication on the accounts we use, keeping software and dependencies updated, collecting only the information we need, and limiting who can access project records.

No method of transmission or storage is completely secure. We cannot promise that a breach will never happen. If a personal-data breach occurs and the law requires notification, we will notify the relevant authority and affected individuals without undue delay.

If you believe you have found a security issue, please email webkinnemail@gmail.com with “Security” in the subject line. Please do not test the site in a way that could disrupt it or access other people's data.

Your rights

Depending on where you live and which law applies, you may have some or all of the following rights:

• Access: ask whether we hold your personal data and receive a copy.
• Correction: ask us to correct inaccurate or incomplete data.
• Deletion: ask us to delete data we no longer need or are not required to keep.
• Restriction: ask us to limit how we use data while a concern is investigated.
• Objection: object to processing based on our legitimate interests.
• Portability: ask for data you provided in a structured, commonly used format where the law provides that right.
• Withdraw consent: withdraw consent for portfolio publication or any other consent-based processing at any time.
• Complain: complain to us or to a data-protection authority.

To exercise a right, email webkinnemail@gmail.com with “Privacy request” in the subject line. Tell us what you want and enough information to identify the records. We may ask you to verify your identity before we act, so that we do not disclose data to the wrong person.

We aim to respond within 30 days for requests under the Philippines DPA and within one month for requests under the GDPR or UK GDPR. If a request is complex, we may extend the period where the law allows and will tell you why. There is normally no fee, unless a request is manifestly unfounded or excessive and the law permits a charge.

If you are a client, deleting all data may mean we cannot continue to provide the service or keep the records we are legally required to keep.

California privacy rights

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, may give you the right to know what personal information we collect, use and disclose; to request deletion; to correct inaccurate information; to opt out of the sale or sharing of personal information; to limit the use of sensitive personal information; and to be free from discrimination for exercising those rights.

We do not sell personal information. We do not share personal information for cross-context behavioural advertising. We do not knowingly collect or sell the personal information of consumers under 16. We do not use sensitive personal information to infer characteristics about you.

The categories of information we collect and the purposes are described in the sections above. To make a request, email webkinnemail@gmail.com with “California privacy request” in the subject line. You may use an authorised agent, but we may ask for proof of authorisation and may still need to verify your identity directly. We will respond within the time required by law.

Because we do not sell or share personal information for advertising, we do not have a “Do Not Sell or Share My Personal Information” opt-out mechanism that collects additional data. You can still contact us using the link in the footer or the email above.

Marketing and automated decisions

We do not run a newsletter, send marketing campaigns, or use automated decision-making or profiling that produces legal or similarly significant effects. We do not use your data to train third-party advertising models.

If we introduce marketing in future, we will provide a clear opt-in, explain what you will receive, and include an unsubscribe route. We will not treat a project enquiry as marketing consent.

Changes to this policy

We may update this policy when our practices, providers or legal obligations change. The version at the top of this page shows when it was last updated. If a change materially affects how we use data we already hold, we will take reasonable steps to tell affected clients by email where appropriate.

The latest version is always published at webkinn.com/privacy/.

Contact and complaints

Questions, requests and complaints can be sent to webkinnemail@gmail.com. Please use a clear subject line such as “Privacy request”, “Data deletion” or “Privacy complaint”. We will review the issue and respond by email.

If you are not satisfied with our response, you may complain to a supervisory authority. In the Philippines, that is the National Privacy Commission (privacy.gov.ph). If you are in the EU or UK, you can complain to your local data-protection authority. In the UK, that is the Information Commissioner's Office (ico.org.uk).

We would appreciate the chance to resolve your concern first.