1. Information We Collect

We collect the following types of information:

• Personal Identifiable Information (PII): Name, email address, phone number, company name, and role when you submit forms or request services.
• Technical Data: IP address, browser type, operating system, device type, and log data.
• Usage Data: Pages visited, clicks, time spent on pages, and other interactions
• Cookies and Tracking: Information collected via cookies, pixels, or similar technologies for analytics, performance, and preferences.

2. How We Use Your Information

We use your information to:

• Provide, personalize, and improve our services
• Respond to inquiries and requests
• Manage accounts and billing
• Send marketing communications (with consent)
• Comply with legal obligations
• Monitor and enhance website performance and security

3. Legal Basis for Processing (GDPR)

• Consent: When you provide explicit consent for communications or cookies
• Contract: To fulfill contractual obligations with clients
• Legal Obligation: To comply with applicable laws
• Legitimate Interests: For website optimization, analytics, and service improvement

4. Sharing and Disclosure

We do not sell personal information. We may share information with:

• Trusted service providers (hosting, analytics, email communications)
• Regulatory authorities as required by law
• Legal advisors to protect rights and prevent fraud

5. Data Retention

We retain personal data only as long as necessary for the purposes outlined, or as required by law. Data no longer needed is securely deleted or anonymized.

6. Data Subject Rights

You may exercise the following rights under GDPR and PDPA:

• Access and obtain a copy of your data
• Rectify inaccurate or incomplete data
• Request erasure of personal data
• Restrict or object to processing
• Withdraw consent for marketing communications
• Lodge a complaint with the National Privacy Commission or relevant EU authority

7. Security Measures

We implement technical, administrative, and organizational measures to protect data:

• SSL/TLS encryption for data in transit
• Secure storage and access controls
• Regular security audits and penetration testing
• Employee privacy and security training

8. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices.

9. International Data Transfers

Personal data may be processed or stored in countries outside your residence. Transfers are subject to legal safeguards to protect your privacy.

10. Contact Information

For questions or concerns, or to exercise your rights:

Email: policy@blackfortconsulting.com

Address: Unit 6i Amber Place, 67 Bayani Road, Taguig City, Philippines