Diwatek Privacy Notice

Business Name

Diwatek - Creative Technology

Representative

Shan Marion T. Silveo

Website

https://diwatek.com

Facebook

https://facebook.com/diwatek

Email

hello.diwatek@gmail.com

Mobile

0928 301 8626

Location

Iloilo City, Philippines

For the processing described in this notice, Diwatek may act as a personal information controller when it determines why and how personal information is processed. For some client projects, Diwatek may process information only according to the client's documented instructions, in which case the client may act as the controller and Diwatek as a service provider or personal information processor.

This notice applies to prospective, current, and former clients; client representatives; authorized project and maintenance contacts; suppliers and service providers; website visitors; individuals who submit inquiries; and people whose information is included in client-supplied website content.

This notice does not replace the independent privacy policies of Google, Meta or Facebook, GitHub, Cloudflare, Resend, domain registrars, hosting providers, payment providers, or other third-party services.

Depending on your interaction with Diwatek, the following information may be collected:

• Identity and contact details, including name, position, business or organization, email address, mobile number, Messenger profile, and preferred contact method.
• Project information, including business background, website requirements, requested pages and features, branding and design preferences, schedule, budget range, reference websites, domain, hosting, and integration details.
• Maintenance information, including the affected website, maintenance plan, requested changes, error details, device and browser information, screenshots, desired completion date, approvals, and account-access requirements.
• Content and files supplied for the project, including text, logos, photographs, videos, documents, prices, testimonials, event details, and design assets.
• Transaction and business records, including quotations, agreements, payment requests, payment dates, amounts, transaction references, change approvals, maintenance reports, and turnover records.
• Technical information, including website address, registrar and hosting details, repository information, DNS configuration, deployment details, browser and device type, IP address, form-submission time, error information, and security-event information.
• Communications, including email, Messenger conversations, text messages, project notes, instructions, approvals, revisions, feedback, and support requests.

Diwatek does not need complete card numbers, online-banking passwords, PINs, recovery codes, private keys, or authentication tokens through ordinary website forms, email, or Messenger.

Standard website inquiries, quotations, design projects, and maintenance requests normally do not require sensitive personal information. Do not submit unnecessary health records, government identification numbers, tax records, bank credentials, biometric information, religious or political information, criminal records, or other highly sensitive information.

When higher-risk information is genuinely required for a specific project, Diwatek may require separate authorization, stronger safeguards, or a dedicated data-processing agreement. Unnecessary sensitive information may be removed, restricted, returned, or securely deleted.

Information may be collected:

• Directly from you through website forms, Google Forms, email, Messenger, telephone, meetings, agreements, payments, content submissions, and maintenance requests.
• From an authorized representative, such as a business owner, employer, project manager, family representative, or event organizer.
• From publicly available sources relevant to the inquiry or project, such as an existing website, public business page, directory, or professional profile.
• Automatically through hosting, security, form-delivery, email, and website services that generate technical or diagnostic records.

Diwatek may use personal information to:

• Respond to inquiries and understand the requested service.
• Assess project requirements and prepare recommendations, proposals, or quotations.
• Enter into and perform website design, development, maintenance, and support agreements.
• Onboard clients, organize project files, confirm contacts, and collect required content and access.
• Review and complete maintenance requests, diagnose problems, test changes, and prepare reports.
• Issue payment requests, confirm payments, maintain business records, and resolve billing questions.
• Communicate project updates, request approvals, schedule meetings, and send renewal reminders.
• Protect websites, systems, accounts, clients, users, and service providers against misuse or unauthorized access.
• Improve Diwatek's forms, documentation, workflows, and service quality using appropriately limited or anonymized information.
• Maintain records needed for contractual, security, dispute-resolution, accounting, tax, or legal purposes.

Project information is not automatically used for promotional marketing. Optional marketing messages will be sent only when an appropriate basis exists, and recipients may request that they stop.

Depending on the activity, processing may be based on:

• Steps requested before entering a service agreement, such as reviewing requirements and preparing a quotation.
• Performance of a service agreement, including design, development, deployment, maintenance, support, and billing.
• Consent for optional activities such as marketing, meeting recording, or publication of non-public testimonials.
• Legitimate business interests, including service security, fraud prevention, recordkeeping, quality improvement, and establishing or defending legal claims, subject to the rights of affected individuals.
• Compliance with applicable legal, accounting, tax, court, or regulatory obligations.
• Protection of vital interests in an exceptional emergency.

Diwatek may use Google Forms, Sheets, Drive, Docs, and Gmail for project submissions, lead tracking, client records, content collection, agreements, maintenance requests, and communication. Information submitted through Google Forms may be stored in related Google services.

When you communicate through Facebook or Messenger, Meta processes information under its own policies. Diwatek may retain relevant conversations or screenshots to document project instructions and approvals.

The Diwatek website may use Cloudflare for hosting, delivery, and security functions; Cloudflare Turnstile for spam and automated-abuse protection; and Resend or another provider for form-delivery emails. Projects may also use GitHub, domain registrars, DNS providers, hosting platforms, databases, analytics, payment services, or other client-approved integrations.

These independent providers may process limited information needed to perform their services and may operate infrastructure outside the Philippines.

Diwatek does not sell personal information.

Information may be shared only when reasonably necessary with:

• The relevant client and its authorized representatives.
• Diwatek personnel or specifically authorized assistants.
• Google, Meta, Cloudflare, Resend, GitHub, hosting, domain, DNS, email, analytics, payment, and other project service providers.
• Accountants, legal advisers, or professional consultants when reasonably necessary.
• A replacement provider authorized by the client.
• Courts, government bodies, regulators, or authorities acting under lawful authority.

Only information reasonably necessary for the applicable purpose should be shared.

A client may determine what visitor or customer information its own website collects, such as inquiries, bookings, accounts, orders, newsletter subscriptions, event registrations, or support messages.

The client is generally responsible for defining the purpose of collection, providing an appropriate privacy notice, limiting the information requested, deciding retention and access rules, and obtaining any necessary authority. Diwatek will process such information only as reasonably necessary to provide the agreed technical service. A separate data-processing agreement may be required for higher-risk, sensitive, or ongoing processing.

The Diwatek Privacy Notice does not replace a client's own privacy notice.

Diwatek keeps personal information only for as long as reasonably necessary for the original purpose and relevant contractual, security, dispute-resolution, accounting, tax, or legal requirements.

The intended default periods are:

• General inquiries that do not become projects: up to 12 months after the last meaningful communication.
• Requirements, quotations, and related records for projects that do not proceed: up to 24 months after the quotation expires or the inquiry becomes inactive.
• Agreements, approvals, change requests, delivery records, payment records, and important project communications: generally up to 5 years after project completion or termination.
• Maintenance agreements, requests, reports, access records, and related approvals: generally up to 5 years after the maintenance relationship ends.
• Technical and security logs: according to the applicable provider's settings or the reasonable period needed for troubleshooting, security, and service operation.

Information relevant to an active dispute, complaint, security incident, investigation, or legal proceeding may be retained until the matter is resolved. Deleted information may remain temporarily in backups until those backups are overwritten or expire.

Diwatek aims to use reasonable organizational, physical, and technical safeguards appropriate to the information and risks involved. These may include strong passwords, multi-factor authentication, restricted access, secure cloud platforms, updated software, HTTPS, private repositories, protected environment variables, backups, access reviews, and incident documentation.

No website, cloud service, device, storage system, or communication method can be guaranteed to be completely secure. Do not send passwords, recovery codes, private keys, payment credentials, or other secrets through ordinary forms, email, or Messenger.

When Diwatek becomes aware of a suspected loss, unauthorized access, accidental disclosure, compromised account, exposed credential, or other personal data incident, Diwatek will reasonably assess and contain the issue, protect affected systems, preserve relevant evidence, coordinate with relevant clients and providers, take corrective action, and make notifications when required.

Report a suspected incident promptly through hello.diwatek@gmail.com.

Subject to applicable conditions and limitations, you may request to:

• Be informed about the processing of your personal information.
• Access personal information held about you.
• Correct inaccurate, incomplete, outdated, false, or misleading information.
• Object to certain processing.
• Request erasure, removal, or blocking where appropriate.
• Receive portable data where applicable.
• Withdraw consent for processing based on consent.
• File a complaint or seek remedies available under applicable law.

Withdrawing consent does not affect processing that occurred lawfully before withdrawal and does not require deletion when another lawful and necessary basis applies.

Send a request to:

Privacy Contact

Shan Marion T. Silveo

Business

Diwatek - Creative Technology

Email

hello.diwatek@gmail.com

Subject

Privacy Request

Mobile

0928 301 8626

Include your name, contact details, relationship with Diwatek, the project or form involved, the right you wish to exercise, and a clear description of the information concerned. Do not send unnecessary identification documents. Diwatek may request reasonable verification to prevent unauthorized disclosure or deletion.

Some requests may be limited when information remains necessary for contract performance, legal compliance, accounting or tax records, security, fraud prevention, dispute resolution, legal claims, or protection of another person's rights.

Diwatek's general business website and project forms are not intentionally directed toward children. A person below the applicable age of legal capacity should submit contractual or project information through a parent, guardian, or properly authorized adult.

For family, school, birthday, wedding, or event websites involving children, the client must provide appropriate authorization, limit public information, and review location, schedule, contact, image, and safety risks. Diwatek may refuse or remove content when appropriate authority cannot be confirmed.

Diwatek websites and client projects may link to external services. Diwatek does not control the privacy, content, availability, or security practices of independently operated third parties. Review the external provider's privacy information before submitting personal information.

Diwatek may update this notice when services, forms, providers, security practices, retention arrangements, or legal requirements change. The current version, effective date, and last updated date will be shown on this page. Material changes may also be communicated through the website, email, Messenger, or another reasonable channel.

For questions, access requests, correction requests, objections, deletion requests, complaints, or suspected incidents, contact:

Use the email subject Privacy Request.