Privacy Notice

1. Who we are

Cybernest Solutions is a Philippine technology company providing workflow automation, queueing, and digital transformation products to private businesses and government offices. We operate this website at www.cybernestsolution.com.

2. What we collect

We collect only what is necessary for the purpose you provided it. Specifically:

• Contact form: your name, email address, and the message you send us.
• Booking / consultation form: your name, email, phone number, company (optional), address (where relevant to the engagement), appointment date and time, and any notes you include.
• Technical data: your IP address, browser type, device, and pages visited — collected via standard server logs and privacy-respecting analytics.

We do not knowingly collect information from children under 18 and do not process sensitive personal information (as defined in the Act) through this website.

3. Why we collect it (purposes)

• To respond to your inquiries and schedule consultations.
• To prepare proposals, quotations, and contracts when you engage our services.
• To improve the site's performance, security, and content.
• To comply with applicable laws, regulations, and lawful requests from public authorities.

4. Lawful basis

We process your personal information on the basis of your consent (given when you submit a form) and our legitimate interests in operating and securing the website. Where a contract is formed, processing is also necessary for the performance of that contract.

5. How we share it

We do not sell your personal information. We share it only with:

• Service providers that help us operate the site (hosting on Vercel; email; cloud infrastructure on Microsoft Azure). These providers are bound by confidentiality and data-protection obligations.
• Authorities when required by law, court order, or to protect our rights and the safety of others.

6. Where your data is stored (data locations)

We process and store your personal information with the following providers and regions:

• Application backend: Microsoft Azure Container Apps, Southeast Asia region (Singapore).
• Website & serverless functions: Vercel edge network, with primary egress serving Philippine visitors from APAC points of presence.
• Analytics: Google Analytics 4 (Google LLC, United States), with IP anonymisation enabled.

Cross-border transfers are protected by our providers' standard contractual clauses and data-processing addenda. If your engagement requires in-country data residency (e.g., Philippine-government procurement requirements), contact us — we can scope a Philippines-resident deployment option.

7. How long we keep it

• Contact inquiries: up to 24 months from last contact, then deleted.
• Booking records: up to 5 years, aligned with Philippine tax and contract-retention rules.
• Technical logs: up to 12 months for security and debugging.

We may retain information longer where required by law or to resolve disputes.

8. How we protect it

We use TLS (HTTPS) for all site traffic, restrict access to personal information on a need-to-know basis, and host our systems on providers that maintain industry-standard security certifications. No system is perfectly secure; if we become aware of a breach affecting you, we will notify you and the National Privacy Commission as required by law.

9. Your rights under RA 10173

Subject to the limits of the Act, you have the right to:

• Be informed about how your data is processed.
• Access a copy of the personal data we hold about you.
• Correct inaccurate or outdated information.
• Object to processing, or request erasure or blocking of data that is incomplete, outdated, unlawfully obtained, or no longer necessary.
• Request data portability in a commonly used electronic format.
• Lodge a complaint with the National Privacy Commission.

To exercise any of these rights, contact us using the details below. We will respond within a reasonable period, and in any case within the timeframes required by law.

10. Cookies and analytics

We use Google Analytics 4 to understand how the site is used. Analytics cookies are denied by default and are only set after you accept through our cookie notice. When accepted, measurement runs with IP anonymisation enabled and without advertising or personalisation signals. You can change your preference at any time on our Cookie Policy page, or by clearing this site's storage in your browser.

11. Changes to this notice

We may update this notice from time to time. The "last updated" date at the top reflects the most recent revision. Continued use of the site after an update means you accept the revised notice.