Privacy Policy
Effective September 7, 2026 · BlinkLoop, Mandaue City, Cebu, Philippines
BlinkLoop builds and hosts websites, and runs Loop Builder, an in-browser website editor. This policy explains what personal information we collect, why, where it goes, how long we keep it, and what you can ask us to do with it. We process personal information under the Data Privacy Act of 2012 (Republic Act 10173), its implementing rules, and the issuances of the National Privacy Commission.
Who is responsible. BlinkLoop, BLOQ SOHO Lofts, Mandaue City, 6014 Cebu, Philippines, is the personal information controller. For anything about your data, email info@blinkloopph.com with the subject "Data Privacy". A founder handles these requests personally.
1. What we collect, why, and for how long
When you send an inquiry
- What: your name, email, business name if you give it, what you need, your message, and a record that you ticked the consent box and when.
- Why: to reply to you and prepare a quote.
- Legal basis: your consent, which you give by ticking the box before sending.
- Kept: up to 24 months after our last exchange, then deleted, unless you become a client.
When you become a client
- What: contact details, billing details, payment confirmations, the content and images for your website, account access you give us to do the work, and our correspondence.
- Why: to build, host and support your website, to invoice you, and to keep the records the law requires.
- Legal basis: performing our contract with you, and legal obligations for accounting and tax records.
- Kept: project files and website content for as long as you are a client and for a reasonable period afterwards so you can come back. Invoices and payment records for as long as Philippine tax law requires, currently ten years.
When you visit this website
- What: our hosting provider records technical logs (IP address, browser type, pages requested, timestamps) to run and protect the service. Your browser stores your light or dark theme choice locally.
- Why: security, reliability and diagnosing problems.
- Legal basis: our legitimate interest in operating a safe website. The logs are not used to profile you.
- Kept: for the short retention period set by the hosting provider.
Analytics (only if you accept)
- We may use Google Analytics 4 to see which pages help visitors. It runs only after you choose "Accept analytics" in the banner, with IP addresses shortened. You can withdraw at any time through "Cookie settings" in the footer. Details are in the Cookie Policy.
Payment confirmations
- When you pay by GCash, Maya or bank transfer, we see the details those services show us, such as your name and a reference number, to confirm your payment. We never see or store card numbers, wallet balances or banking credentials, and we never ask for them.
Website content you upload
- Images and text you add through Loop Builder as a client are stored on our hosting infrastructure so they can appear on your website. Anything you publish on a website is, by nature, public.
- If you try Loop Builder without a client code, your draft is saved in your own browser only. It never reaches our servers unless you send it to us.
Access codes and the BlinkLoop team
- Client and staff access codes contain a short name and an expiry date and nothing else. Our internal team tools store staff presence, chat messages and, where a staff member turns them on, push notification subscriptions. These belong to our own team, not to visitors or clients.
2. What we do not do
- We do not sell personal information. To anyone. Ever.
- We do not send marketing messages unless you asked for them, and you can stop them any time.
- We do not read or use your website content for anything other than building and hosting your site.
- We do not run advertising trackers or social media pixels on our own pages.
3. Who else sees your information
We use a small number of service providers, each bound by their own contracts and privacy commitments, and each receiving only what its job requires:
- Vercel (United States, with our functions running in Singapore) hosts this website, our serverless functions, and uploaded website images.
- Supabase (Singapore) stores our internal team chat.
- Google provides our info@blinkloopph.com mailbox and the script that delivers contact form messages to it, and, only if you consent, analytics.
- GCash, Maya and banks process payments; we only receive confirmations.
Some of these providers store data outside the Philippines. When that happens we remain accountable for it under the Data Privacy Act, and we rely on the providers' contractual and security commitments to protect it. We disclose personal information to authorities only when the law requires.
4. Websites we build for clients
Websites created for clients may include features the client chooses, such as contact forms, chat buttons (WhatsApp, Messenger, Viber), analytics or payment details. For those websites, the client is the controller of the data their site collects and BlinkLoop acts as builder and host. Loop Builder can generate a starter privacy section for client sites, which clients should review and adapt to how they actually operate.
5. How we protect it
- All pages and tools run over HTTPS.
- Access to systems and data is limited to the three BlinkLoop founders. Internal tools require a signed access code.
- Credentials and keys live in our hosting provider's protected settings, never in code.
- If a personal data breach is likely to cause real harm, we notify the National Privacy Commission and the people affected within 72 hours of learning about it, as the law requires.
6. Your rights
Under the Data Privacy Act you have the right to:
- be informed about how your personal information is processed;
- access a copy of what we hold about you;
- have inaccurate or incomplete information corrected;
- object to processing, including any direct marketing;
- have your information erased or blocked when there is no longer a lawful reason to keep it;
- receive your information in a portable format where processing is electronic;
- be indemnified for damages caused by inaccurate, incomplete or unlawfully obtained information; and
- lodge a complaint with the National Privacy Commission.
To use any of these rights, email info@blinkloopph.com. We may ask you to confirm your identity first. We respond within 15 business days. There is no form, no fee, and no drama.
7. Children
Our services are for businesses and adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us information, tell us and we will delete it.
8. Cookies
What this website stores in your browser, and how to change your analytics choice, is in the Cookie Policy.
9. Changes
If we change this policy, we update this page and the effective date above. For changes that matter to existing clients, we also email you.
10. Talk to us
Questions about privacy, or any request about your data: email info@blinkloopph.com, or use the contact form. Our address is BLOQ SOHO Lofts, Mandaue City, 6014 Cebu, Philippines.