Website Privacy Notice
How personal information submitted through this website is handled.
Last updated:
This notice covers personal information handled when you browse this website, use its inquiry form, or correspond about a website inquiry. It is guided by Republic Act No. 10173 (the Data Privacy Act of 2012), its implementing rules, and applicable National Privacy Commission (NPC) issuances. Information handled for an accepted legal engagement may be covered by additional notices and professional confidentiality duties.
Who is responsible for your information
Delgado & Bolos Law Offices is the personal information controller: it determines why and how personal information is processed for website inquiries. You may contact the firm at either office:
- Bohol office: Unit 4, Bolos Building, A. Fonacier Circumferential Road, Brgy. Dao, Dauis, Panglao Island, Bohol.
- Cebu office: Red Global Building, A. Bonifacio St. corner A.S. Fortuna St., Bakilid, Mandaue City, Cebu.
For privacy questions or requests, email [email protected], addressed to the person responsible for data privacy, or call +63 969 633 0264.
Information collected
- Inquiry details: your name, email address, short message, and optional telephone number, provided directly by you. Replies and follow-up correspondence may become part of the inquiry record.
- Connection and security information: your IP address, browser and device signals, requested pages, and related request metadata processed by the hosting and security services.
- Form verification: an anti-spam verification token and a submission identifier used to validate requests and prevent duplicate email delivery.
Name, email, a brief message, and successful anti-spam verification are needed to send the form. Providing a phone number is optional. If you prefer not to use the form, you may contact the firm directly; the information you provide will still need an appropriate lawful basis for processing.
Purposes and lawful bases
- Responding and considering an engagement: handling your request and taking necessary steps toward a possible engagement at your request, under Section 12(b) of the Act. Other introductory correspondence may be handled on a necessary and proportionate legitimate-interest basis under Section 12(f).
- Conflict screening and website security: necessary checks to consider an inquiry responsibly, prevent spam or abuse, and keep the website operating. Reliance on legitimate interests under Section 12(f) requires assessment of the purpose, necessity, and effect on your fundamental rights; those rights must not be overridden.
- Legal obligations: processing necessary to comply with a specific legal or professional obligation, under Section 12(c), where applicable.
- Consent: where a processing activity requires consent, it must be specific, informed, and freely given. Reading this notice or visiting the website is not blanket consent to additional purposes.
These bases concern ordinary personal information. Sensitive personal information and privileged information require an applicable ground under Section 13 and any relevant confidentiality rules. An unsolicited message containing such information is not permission for unrestricted use.
Recipients and service providers
The website validates a submission, checks its anti-spam verification, and sends the inquiry by email to the firm. Authorized personnel handling inquiries may access the information. The following services also process data:
- Cloudflare: website hosting and Turnstile anti-spam verification. Turnstile processes connection and browser signals; its verification request includes the token and IP address, not the inquiry message. Cloudflare also describes separate processing to improve bot detection in its Turnstile Privacy Addendum.
- Resend: delivery of the inquiry email, including the name, email, message, optional phone number, and delivery metadata. See its Privacy Policy.
- Email services: the firm's mailbox provider processes delivered inquiries and subsequent correspondence.
Disclosures to authorities or other recipients must have a lawful basis and respect confidentiality requirements. The website has no advertising analytics or mailing-list subscription, and submitting an inquiry does not enrol you in marketing.
Processing outside the Philippines
Service providers may process information outside the Philippines. Resend identifies the United States as its primary processing location; Cloudflare operates international services. The firm remains accountable for data under its control, including outsourced processing, and must use appropriate contractual or other safeguards under Philippine law. Contact the privacy email above for information about the applicable provider and transfer arrangements.
Browser technologies and automated checks
The website does not use advertising trackers or store inquiry drafts in browser local storage. Loading the Contact page connects to Cloudflare Turnstile before you submit the form. Security services may use browser technologies described in their notices. Browser restrictions may affect verification; you can contact the firm directly if the form is unavailable.
Automated checks validate form fields, detect bots, limit abusive requests, and prevent duplicate delivery. They may reject a submission, but they do not assess the legal merits of your concern or decide whether the firm accepts an engagement.
Google Maps
The Bohol office map on the Home and Contact pages loads only if you select “Load Google Map.” Your browser then connects directly to Google, which receives connection information such as your IP address, browser details, and this website's origin. Google may use cookies or similar technologies. Google describes its handling of this information in its Privacy Policy (opens in a new tab). You can read the office addresses without loading the map. Information entered in the consultation form is not sent to Google Maps.
Confidential and sensitive information
Use the form only for a short introductory summary. Do not include confidential documents, passwords, government identification numbers, medical records, detailed financial information, or detailed allegations about criminal proceedings. Avoid unnecessary information about other people. Ask the firm to confirm an appropriate channel before sharing sensitive material.
An initial inquiry does not, by itself, engage the firm. Applicable duties toward prospective clients remain in place even if no engagement follows; this notice does not waive confidentiality or privilege. See the Legal Disclaimer.
Retention
The firm's records of inquiries that do not become client matters are kept for up to 12 months after the last correspondence, then securely deleted, unless a longer period is necessary for a legal obligation or to establish, exercise, or defend a legal claim. Data should not be kept merely for possible future use. If an engagement begins, the resulting matter records follow the firm's separate retention requirements.
Service-provider delivery records, security logs, and backups can have different retention schedules, limited to necessary service, security, recovery, or legal purposes. Deleting a message from the firm's mailbox does not necessarily immediately remove those copies. You may ask the firm about those schedules and request erasure or blocking where applicable; the firm remains responsible for appropriate handling by processors acting on its behalf.
Your data privacy rights
Subject to the conditions and exceptions in Philippine law, you may:
- Be informed about processing and request access to your information and relevant processing details.
- Request correction of inaccurate or incomplete information.
- Object to processing where applicable, or withdraw consent where consent is the basis.
- Request erasure or blocking when the legal conditions are met.
- Request data portability where the statutory requirements apply.
- Seek compensation through the appropriate process for damage from unlawful processing, and lodge a complaint with the NPC.
Withdrawal of consent does not make earlier lawful processing unlawful. Erasure, objection, or withdrawal may not end processing that remains necessary under another applicable legal ground, including lawful retention for legal claims. Any continued processing must have an identified basis.
How to make a privacy request
Email [email protected] with the subject “Privacy request,” your requested action, and enough information to locate the relevant inquiry, such as the email address used and an approximate date. Do not send an identification document or sensitive case material in your initial request.
Reasonable identity or authority verification may be needed before records are disclosed or changed. Any additional information requested should be proportionate. Requests will be assessed under applicable law, including protection of other people's information and privileged material. If a request cannot be granted in full, the firm should explain the reason and available next steps.
You may also use the NPC's complaint process. Contacting the firm does not waive your right to approach the Commission.
Security and data breaches
Reasonable organizational, physical, and technical safeguards are required to protect personal information. The website uses server-side validation and anti-spam verification; its inquiry handler does not write message contents to application logs. These controls do not eliminate all risks, so keep submissions limited to what is needed.
Where a personal data breach meets the legal notification requirements, the firm must notify the NPC and affected individuals within the applicable period, generally 72 hours from knowledge of or reasonable belief that a notifiable breach occurred, subject to lawful exceptions. This notice does not reduce those obligations.
Changes to this notice
This notice may be revised when the form, providers, legal requirements, or handling practices change. The revision date will be updated, and material changes will be communicated as required by law. An updated notice does not by itself supply consent for a new purpose; any additional processing must have an appropriate lawful basis.