Privacy Policy

.ppl Solutions, Inc. (The Company) takes your privacy seriously and we are determined to fully protect the security of your personal data in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA).

We will provide details on how we process your personal data and provide a separate privacy notice in an appropriate format and manner whenever we collect personal data through other channels (e.g., publicly facing data processing systems implemented, notices posted at the reception area of our offices where visitors’ personal data is collected through login sheets or security record when personal data is collected according to our corporate policy).

In all instances, we assure you that processing your personal data will strictly follow the provisions of the DPA, especially the general data privacy principles of Transparency, Legitimate Purpose, and Proportionality.

We collect the following personal data from you when you manually or electronically submit to us your inquiries or requests:

• Name
• Email Address
• Contact Number
• Designation
• Company Name

These forms are used by the data subject to submit inquiries, concerns, or register to .ppl Solutions, Inc.

In most cases, your consent is solicited to process your personal data, we may also process personal data without your consent when processing is allowed under Section 12 or 13 of the DPA.

In these instances, your personal data is utilized for the following purposes:

• For documentation and processing of inquiries and requests with Company to enable it and its authorized representatives to properly address them and forward them to the appropriate department for action.
• To solicit feedback for the services we provide.
• To provide you with the appropriate updates and advisories in an appropriate format and orderly and timely manner.
• To comply with a legal obligation to which the Company is subject.
• To be able to provide the appropriate action that a data subject may require concerning their data privacy rights.

Moreover, we may collect other personal data that are relevant and necessary to provide data subject assistance.

The Company uses its own first-party, cookieless analytics to understand website traffic and improve our services. We record an approximate location (country and city) derived from your IP address at the network edge; we do not store your IP address. This first-party analysis uses no cookies, and the data it produces is not disclosed to any other entity.

In addition, and only if you accept our cookie banner, we use Google Analytics 4 to measure website traffic. Google Analytics sets cookies on your device and processes your data on our behalf as a third-party service provider, which may involve transferring it outside the Philippines. It does not load at all unless you accept, and declining leaves the rest of this website fully functional. You may change your mind at any time using the “Cookie settings” link in our website footer, which withdraws your consent and deletes the cookies concerned.

Also only if you accept our cookie banner, we use Apollo.io’s website visitor tracking. Apollo matches technical information about your visit, including your IP address, against its own business database in order to identify the organization you are visiting from, so that we can understand which companies are interested in our services. Apollo processes this data on our behalf as a third-party service provider, which may involve transferring it outside the Philippines. Like Google Analytics, it does not load at all unless you accept, and declining leaves the rest of this website fully functional. Withdrawing your consent using the “Cookie settings” link in our website footer stops it and deletes the data it stored on your device.

Also only if you accept our cookie banner, we use Microsoft Clarity to record how this website is used. Clarity captures a replay of your visit — the pages you view, your clicks, scrolling and mouse movement — and combines these into heat maps, so that we can see where visitors encounter difficulty. Text you type into forms is masked and is not captured. Microsoft processes this data on our behalf as a third-party service provider, which may involve transferring it outside the Philippines. We instruct Clarity not to store advertising data, so it is not used to target ads to you. Like the services above, it does not load at all unless you accept, and declining leaves the rest of this website fully functional. Withdrawing your consent using the “Cookie settings” link in our website footer stops the recording and deletes the cookies concerned.

The following web traffic data are processed for this purpose:

• Your IP address (used transiently at the network edge to derive approximate location; not stored by our own analytics)
• The pages and internal links accessed on our site
• The date and time you visited the site
• Geolocation
• The referring site or platform (if any) through which you accessed this site
• Your operating system
• Web browser type

Personal data processed by the Company is not shared with any other party, except for the service providers described in this Policy who process data on our behalf to operate and secure this website, or unless such disclosure is legally allowed under Section 12 or 13 of the DPA which in some instances require court orders.

Risk refers to the potential of an incident to result in harm or danger to a data subject or organization. Risks may lead to the unauthorized collection, use, disclosure, or access to personal data. It includes risks involving the confidentiality, integrity, and availability of personal data or the risk that processing will violate the general data privacy principles and the rights of data subjects.

The Company ensures that adequate physical, technical, and organizational security measures are in place to protect personal information’s confidentiality, integrity, and availability. However, this does not guarantee absolute protection against certain risks involving the processing of personal data, such as when systems are exposed to targeted cyberattacks, malware, ransomware, and computer viruses or when manual records are accessed without authority.

However, adequate policies are in place to ensure appropriate security incident management in line with existing Company policies, memorandums, and other resolutions.

We are committed to ensuring the confidentiality, integrity, and availability of your personal information by maintaining a combination of organizational, physical, and technical security measures based on generally accepted data privacy and information security standards. Among the measures we implement are the following:

• Policies on access control in both digital and physical infrastructures to prevent unauthorized access to personal information.
• Acceptable use policies.
• End-to-end encryption and data classification whenever suitable.
• Security measures against natural disasters, power disturbances, external access, and similar threats.
• Technical measures to protect our computers and databases against accidental, unlawful, or unauthorized usage, interference, or access.
• Third-party services contracted to support data security and infrastructure.
• We use Cloudflare Turnstile to protect our online forms from automated abuse. When you submit a form, Cloudflare receives technical information about your browser and connection solely to distinguish human visitors from automated traffic. Turnstile does not use cookies and is not used to track you across websites.

The Company stores files containing personal information in our computers and servers, which are kept in a secure environment. We may also store your personal information with cloud-based third-party data storage providers. We shall ensure that proper measures are adopted to protect your information.

Personal data shall be stored in a database for two (2) years after inquiries and requests are acted upon. After which, records shall be disposed of securely.

Other categories of data may be kept longer than two (2) years when its retention period is determined by other relevant laws and regulations.

Physical records shall be disposed of through shredding, while digital files shall be anonymized. In all instances, our manner of disposal shall ensure that the personal information shall no longer be retrieved, processed, or accessed by unauthorized persons.

Under the DPA, you have the right to be informed regarding processing the personal information we hold about you.

Further, you may be entitled to request:

• Access to personal data we process about you. It is your right to obtain confirmation on whether or not data relating to you are being processed;
• Rectification of your personal data. This is your right to have your personal data corrected if it is inaccurate or incomplete;
• Erasure or order blocking of your personal data whenever warranted;
• The right to object if the personal data processing involved is based on consent or on legitimate interest;
• The right to data portability through which you may obtain and electronically move, copy, or transfer your data securely for further use.

Should you think that your personal information has been misused, maliciously disclosed, or improperly disposed of, or that your data privacy rights have been violated, you have a right to file a complaint with the Company.

The Company reserves the right to update or revise this privacy notice at any time and will provide a new privacy notice whenever there are substantial changes. Prior versions of the privacy notice shall be retained by the Commission and shall be provided to data subjects upon request.

If you have suggestions or comments regarding our privacy statement and notice or for any issues concerning the Company’s data privacy practices, you may reach us through: