Who we are
Aarkledger (“we”, “us”) is the controller of the personal data described here. Under the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) that makes us the “controller”. Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) we are the “personal information controller”.
For any privacy question or request, email corporate@aarkledger.com.
What this website does not collect
- No cookies or browser storage. The website sets no cookies and stores nothing on your device, in local storage or anywhere else.
- No analytics, advertising or tracking. There are no tracking pixels, tag managers, session recording or third-party scripts.
- No accounts, sign-ups, uploads or payments.
- No outside font or image services. Our fonts and images are served from this website's own domain, so loading a page doesn't contact Google or any other outside service.
- Nothing you type is submitted to or stored on the website. This includes the enquiry form.
What we do receive
You don't have to give us any personal data. It isn't a legal or contractual requirement, but without your contact details we can't reply to your enquiry.
When you use the enquiry form.
The form doesn't send anything to us. It opens your own email app with a draft addressed to us, and nothing reaches us unless you press send. If you do, we receive the email: your name, your email address, your company (if given), the package you're interested in (if picked), your message, and anything else you put in it. Please leave out sensitive personal details or other people's financial information until we've agreed how to handle them.
When you email, call, text or message us on LinkedIn.
We receive your contact details and whatever you tell us. Emails pass through your email provider and ours. Calls and texts leave your number and a call log on our phone. Messages on LinkedIn are covered by LinkedIn's own privacy policy as well as this notice.
When you load any page.
Like every website, ours has to receive a request from your browser before it can show you a page. Our hosting provider processes basic technical data to deliver and protect the site: your IP address, your browser and device type (user agent), the page you asked for, the referring page and the time. We don't use this data to identify you or build a profile.
Why we use it, and on what legal basis
| Purpose | GDPR (Art. 6(1)) | RA 10173 (Sec. 12) |
|---|---|---|
| Replying to your enquiry and taking steps you ask for before an engagement, such as a proposal or a call | (b) steps before entering a contract | (b) steps before entering a contract |
| Running and securing the website, and keeping a record of business correspondence | (f) our legitimate interests | (f) our legitimate interests |
| Keeping records when the law requires it | (c) legal obligation | (c) legal obligation |
Your right to object. Where we rely on our legitimate interests, you can object at any time. Email corporate@aarkledger.com or use the request form.
We don't use your data for automated decision-making or profiling, and we don't send marketing you haven't asked for.
Clients. This notice covers our website and enquiries only. It doesn't cover personal data we handle for clients during an engagement, such as payroll or tax records. If you become a client, we'll agree with you how that data is handled as part of the engagement.
Who else sees it
- Our hosting provider (Vercel) processes the technical request data described above.
- Our email service provider stores and delivers the emails you send us.
- Professional advisers, regulators or authorities, only where the law requires it or where we need to protect our legal rights.
We never sell or rent personal data, and we don't share it for advertising.
International transfers
Our service providers may process data outside the Philippines and the European Economic Area, for example in the United States. Where the GDPR requires a safeguard for such a transfer, we rely on the transfer terms in our providers' data processing agreements, such as the European Commission's Standard Contractual Clauses, or on an EU adequacy decision where one covers the provider. Under RA 10173 we remain responsible for personal data our providers process for us, and we use contractual or other reasonable means to keep it protected to a comparable standard.
To ask which safeguard applies to a transfer, or for a copy of it, email corporate@aarkledger.com.
How long we keep it
We keep enquiry emails, call records and messages only as long as we need them to reply and follow up, or for as long as a law or contract requires. After that we delete them. Our hosting provider keeps technical request logs for a limited period under its own retention schedule.
Your rights
Wherever you are, you can ask us to:
- Tell you what personal data we hold about you and how we use it
- Send you a copy of it, in a commonly used electronic format where that applies (portability)
- Correct anything inaccurate or incomplete
- Delete it, or block it from further processing
- Restrict how we use it while a concern is resolved
- Stop using it or contacting you (objection)
You can also:
- Withdraw consent at any time, if we ever rely on it
- Complain to a regulator. In the Philippines that is the National Privacy Commission (privacy.gov.ph). In the EU/EEA it is your local data protection supervisory authority.
Which law gives which right.
- GDPR
- Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21), and the right not to be subject to decisions based solely on automated processing (Art. 22). We make no such decisions.
- RA 10173
- Sec. 16 (and Sec. 34 of its Implementing Rules): the rights to be informed, to object, to access, to rectification, to erasure or blocking, and to damages
- Sec. 17: your lawful heirs and assigns may exercise these rights after your death, or if you are incapacitated or unable to exercise them
- Sec. 18: data portability
- You can also file a complaint with the National Privacy Commission.
How to use your rights
Use the request form below, or email corporate@aarkledger.com.
- We may need to confirm your identity before acting, usually by replying to the email address you contacted us from. This keeps your data from going to the wrong person.
- We reply promptly. We acknowledge requests as soon as we can and respond within the time the law that applies to you allows. Under the GDPR that is within one month of receiving your request. For complex or numerous requests it can be extended by up to two further months, and if so we'll tell you why within the first month. For requests under the Philippine Data Privacy Act, we follow the timelines set by the National Privacy Commission.
- There is no fee for reasonable requests.
- What deletion covers. We delete your emails, messages, call records and contact details from our systems. We can only keep what a law or a signed contract requires, and we'll tell you if that applies. Technical request logs held by our hosting provider expire on their own schedule.
Security
The website is served over an encrypted HTTPS connection. Because it stores nothing you type into it, a breach of the website can't expose your enquiries. We limit access to enquiry emails to the people who need them to respond to you.
Children
This website and our services are for businesses. They aren't directed at children, and we don't knowingly collect personal data from anyone under 18.
Links to other sites
Our LinkedIn links open LinkedIn in a new tab without passing on which of our pages you came from. Once you're on LinkedIn, its own privacy policy and cookies apply.
Changes to this notice
If how we handle personal data changes, we'll update this page and the “Last updated” date at the top.