Privacy Policy

1. About this policy

Infosoft Consulting Corporation (“Infosoft”, “we”, “us”) respects your privacy. This policy explains what personal data we collect through infosoft.com.ph, our forms, events and official social media pages, why we collect it, and how you can exercise your rights under the Data Privacy Act of 2012 (Republic Act No. 10173).

Infosoft is the personal information controller for the data described here. Our office is at 285 Haig St., Brgy. Daang Bakal, Mandaluyong City 1550, Philippines.

We process personal data in line with the principles of transparency, legitimate purpose and proportionality, and we collect only what we need for the purposes below. This policy does not cover data we process for clients while implementing or supporting their ERP systems; our client contracts govern that processing.

2. Personal data we collect

• Inquiry, consultation, demo and “learn more” forms: name, company, job title, business email, phone number, industry, products of interest and your message.
• Event and webinar registrations: name, company, job title, contact details, attendance and answers to registration questions.
• Job applications (careers form and emailed CVs): name, email, phone number, position applied for, and your CV with its education and work history.
• Emails and calls with our team: your contact details and what you tell us.
• Newsletter and marketing sign-ups: name, email address and your communication preferences.
• Automatically, when you browse the site: IP address, browser and device type, pages visited, referring site and cookie identifiers (see Section 5).
• Our social media pages: your public profile name and what you post, comment or message on our Facebook, LinkedIn and YouTube pages.

We do not ask for sensitive personal information, such as government ID numbers, health information, religion or political affiliation, through our website. Please do not include it in your messages. CVs may contain some sensitive information, such as your age and education; we use it only to assess your application.

If you give us details about someone else, such as a colleague, please make sure they know and agree.

3. How we use your data and why

• Answering your inquiry, scheduling a demo or consultation, and preparing a proposal — to take the steps you asked for before entering a contract, and our legitimate interest in responding to business inquiries.
• Registering you for events and webinars and sending related reminders — your consent, given when you register.
• Sending newsletters, product updates and event invitations — your consent, which you can withdraw at any time.
• Following up with business contacts about related Infosoft services — our legitimate interest, which you can object to at any time.
• Assessing job applications and contacting applicants — to take the steps you asked for before an employment contract, and your consent.
• Keeping the website secure, fixing errors and understanding how visitors use it — our legitimate interest in running a secure, useful website, and your consent for non-essential cookies.
• Managing our social media pages and replying to comments and messages — our legitimate interest in communicating with our audience.
• Meeting legal, tax and regulatory duties, and establishing or defending legal claims — legal obligation and legitimate interest.

We do not sell your personal data, and we do not make decisions about you based solely on automated processing. Where we rely on legitimate interest, we have weighed it against your rights; you can ask us for details or object at any time.

4. Who we share it with

• Service providers that host our website and forms (Webflow), provide analytics and advertising (Google), and run our email, marketing and webinar tools. They act only on our instructions under contracts that require confidentiality and security.
• Software publishers and partners, such as Acumatica, when your inquiry concerns their products and their involvement is needed to answer it.
• Professional advisers, such as auditors and lawyers, under duties of confidentiality.
• Government authorities, when the law or a lawful order requires it.

Some of these providers store data on servers outside the Philippines, such as in the United States or Singapore. Infosoft remains responsible for your data wherever it is processed, and we use contracts and other reasonable means to make sure it gets a level of protection comparable to the Data Privacy Act.

5. Cookies and analytics

Cookies are small files your browser stores when you visit a website. We use:

• Essential cookies that make the site and its forms work and keep them secure. These are always on.
• Analytics cookies (Google Analytics 4) that count visits and show which pages are used, so we can improve the site.
• Advertising cookies (Google Ads) that measure whether our ads lead to visits and inquiries, and help show our ads to people who visited the site.

Analytics and advertising cookies are only set if you click Accept on our cookie banner. Rejecting them does not stop you from using the site. You can change your choice at any time through Cookie settings at the bottom of every page, or by clearing cookies in your browser. Embedded content, such as YouTube videos, may set its own cookies under the provider’s privacy policy.

6. How long we keep it and how we protect it

We keep personal data only as long as we need it for the purpose it was collected for, to meet legal requirements, or to establish or defend legal claims:

• Inquiries and demo requests that don’t lead to a client relationship: 3 years after our last contact.
• Marketing and newsletter list: until you unsubscribe or withdraw consent.
• Event and webinar registrations: 2 years after the event.
• Job applications not hired: 1 year after the position is filled.
• Client and contract records: for the life of the contract, then as required by tax and corporate laws.
• Website analytics: 14 months.

After that, we securely delete or anonymize the data. We protect personal data with reasonable organizational, physical and technical measures, including access limited to staff who need it, confidentiality obligations, encrypted (HTTPS) connections, and security controls at our service providers.

If a personal data breach is likely to put you at real risk of serious harm, we will notify you and the National Privacy Commission within 72 hours of learning about it, as the law requires.

7. Your rights

Under the Data Privacy Act, you have the right to:

• Be informed whether and how your personal data is being processed.
• Access your personal data, including how we got it, who received it and why.
• Object to processing, including direct marketing and profiling.
• Withdraw consent at any time, as easily as you gave it — for example, by clicking “unsubscribe” in any email. This does not affect processing done before you withdrew.
• Correct inaccurate or outdated data.
• Have data erased or blocked when it is no longer needed, was unlawfully obtained, or is used for unauthorized purposes.
• Data portability: get a copy of your data in a commonly used electronic format.
• Damages for harm caused by inaccurate, unlawfully obtained or unauthorized use of your data.
• File a complaint with the National Privacy Commission.

Your lawful heirs and assigns may exercise these rights if you die or become incapacitated.

To exercise any of these rights, email our Data Protection Officer at chris.patong@infosoft.com.ph. We may ask you to verify your identity first. We will respond within 15 working days, and requests are free unless they are clearly excessive or repeated. If you are not satisfied with our response, you can contact the National Privacy Commission at privacy.gov.ph.

8. Other things to know

Children

Our website and services are meant for businesses. We do not knowingly collect personal data from anyone under 18.

Other websites

Our site links to other websites and platforms, such as Acumatica, Facebook, LinkedIn and YouTube. Their own privacy policies apply when you use them.

Changes to this policy

We may update this policy when our practices or the law change, and we will post the new version here with a new “Last updated” date. If a change is significant, we will tell you more prominently and ask for your consent again where the law requires it.

9. Contact us