Privacy Policy
Last updated October 22, 2026.
Important notice
This Privacy Policy explains how DATAL Projects handles personal information when you use this website, create an account, contact the team, apply as a developer, or work with us on a project.
We will update this page when our systems or processing practices change. The date above shows the latest revision. A signed project agreement or a separate data processing agreement might add terms for a specific engagement.
1. Who we are
DATAL Projects is a small independent development studio. References to "DATAL Projects", "we", "us", and "our" mean the individuals who operate the studio and the developers who work on an engagement. We do not state that the studio is a corporation, partnership, or other separate juridical entity.
For privacy questions or requests, contact us at admin@datalprojects.com. This email is the first privacy contact for the website.
2. Scope of this policy
This policy covers information collected through:
- The public website and its pages.
- Account creation, login, and the user dashboard.
- Project inquiries, support messages, and developer applications.
- Inquiry ticket pages, email replies, and related notifications.
- Files submitted through the contact form or another approved project channel.
This policy does not cover websites, platforms, payment providers, hosting services, or other products operated by third parties. Their own policies apply to their processing.
3. Information you provide
Depending on how you use the site, we might receive:
- Your name, email address, country, and contact details.
- Your selected audience, such as client or developer.
- Project type, timeline, budget range, project description, and requirements.
- Developer skills, role preference, portfolio details, and work history.
- Messages, replies, support requests, and information you choose to send.
- Project scope files in PDF, DOCX, TXT, or another accepted format.
- Account information and information you add to your dashboard.
Do not place passwords, secret keys, access tokens, full payment card numbers, government identification numbers, health information, or unrelated confidential information in an inquiry or attachment. If we need sensitive information for a specific engagement, we will identify the approved channel and the required security steps in the project agreement.
4. Account and dashboard information
If you create an account, our systems process the information needed to create and secure your account, such as your email address, authentication records, account status, and timestamps. If you use the dashboard, we process the projects, files, order details, and other records you or an authorized team member add there.
Keep your login details private. Tell us promptly if you believe someone accessed your account without permission. You are responsible for activity performed through your account unless applicable law says otherwise.
5. Inquiry tickets and email links
After an inquiry, we might send a private ticket link by email. The link helps you review the inquiry status and reply to the team. Anyone who obtains the link might be able to view the information available through it. Do not forward it to an unauthorized person. Contact us if the link was exposed or sent to the wrong address.
We process email addresses and message history to receive inquiries, reply to them, provide updates, and keep a reliable record of project communication. Email delivery is subject to the security and availability of the providers involved.
6. Technical and security information
When you visit or use the site, our hosting and security systems might record technical information such as an IP address, browser and device details, requested pages, timestamps, referral information, approximate location inferred from an IP address, and error details.
We use IP addresses and related signals to protect the site, limit repeated inquiry submissions, reduce spam, detect abuse, enforce security controls, investigate incidents, and keep the service available. A rate limit might prevent another request from the same network for a period of time. This measure does not decide whether a project is accepted.
We might use verification, validation, and automated security checks. These checks support abuse prevention. They do not guarantee that every abusive request will be detected or blocked.
8. How we use information
We use information for specific purposes, including:
- Responding to project requests, support messages, and applications.
- Reviewing a project scope and preparing an evaluation or proposal.
- Creating and managing accounts, tickets, dashboards, and project records.
- Sending confirmations, replies, security notices, and service updates.
- Providing contracted development, support, warranty, and handover services.
- Preventing spam, fraud, unauthorized access, and other misuse.
- Maintaining, debugging, testing, and securing our systems.
- Keeping records for accounting, dispute handling, and legal compliance.
- Protecting the rights, safety, property, and systems of the team and users.
We do not sell personal information. We do not use inquiry information to send unrelated marketing unless we have a lawful basis and any consent required by law.
9. Legal basis and consent
Where Philippine privacy law applies, we process personal information under the basis that fits the activity. This might include consent, steps requested before entering a contract, performance of a contract, a legal obligation, protection of rights or safety, or a legitimate purpose allowed by law.
When we rely on consent, you can withdraw it by contacting us. Withdrawal does not affect processing completed before withdrawal. We might keep information when another lawful basis or a legal retention duty applies.
The Philippine Data Privacy Act describes transparency, legitimate purpose, proportionality, accountability, and data subject rights as core requirements. Read the National Privacy Commission reference to Republic Act No. 10173.
10. Project scopes and attachments
A project scope explains the problem, users, required features, expected deliverables, technical limits, content, integrations, target platform, timeline, and other facts needed to evaluate work. A clear scope helps us prepare a more reliable breakdown, price, contract, and timeline.
We might store a submitted file with the related inquiry so the team can review it, prepare a proposal, perform the agreed work, answer questions, and keep a project record. You confirm that you have the right to share the file and authorize this use. Remove information unrelated to the project before sending it.
We might reject, quarantine, or remove files that appear unsafe, unlawful, corrupted, unrelated, or too large for the service. File delivery through the site does not guarantee backup, preservation, confidentiality against every threat, or successful delivery to every recipient.
11. Service providers and disclosures
We share information only for a stated business purpose and with people or providers who need it for that purpose. Depending on the feature in use, recipients might include:
- Hosting, database, authentication, and file storage providers.
- Email delivery and mailbox providers used to send and receive messages.
- Security, verification, rate-limit, monitoring, and error-reporting providers.
- Developers or contractors assigned to review or deliver the work.
- Professional advisers, insurers, auditors, or records providers.
- Courts, regulators, law enforcement, or other authorities when required or allowed.
We do not give providers permission to use your project information for unrelated purposes. Providers might process information in another country under their own security and privacy terms. We take reasonable steps to select providers and protect information, but no online service removes every security risk.
12. Client data processed during a project
A client might give us personal information about its customers, staff, users, or other people. The client remains responsible for identifying a lawful purpose, providing required notices, obtaining required permissions, and giving us only the data needed for the agreed work.
The project agreement should state each party's role, instructions, security duties, retention period, deletion process, incident process, and approved providers. A separate data processing agreement might be required. We will follow documented project instructions unless a legal duty requires another action.
13. Retention
We keep information for as long as needed for the purpose collected, the related project or account, security records, dispute handling, tax and accounting records, legal claims, or another lawful purpose. Retention varies by record.
- Inquiry and application records stay while we review or respond to them.
- Project records stay for the engagement, warranty, support, and dispute period.
- Account records stay while the account is open or while a legal need applies.
- Security and rate-limit records stay for a limited period needed for protection.
- Backups might retain deleted records until the backup cycle replaces them.
When the applicable period ends, we delete, anonymize, or securely dispose of the information. Legal holds, unresolved disputes, fraud investigations, and legal duties might delay deletion.
14. Security
We use reasonable administrative, physical, and technical safeguards suited to the information and the system. Measures might include access controls, authentication, limited permissions, encrypted connections, provider security settings, backups, logging, rate limits, validation, and incident response procedures.
Security is a shared responsibility. No website, email service, storage system, or internet transmission is guaranteed to be secure or available at all times. You must use a secure email address, protect account credentials, review recipients, and avoid sending secrets through an unapproved channel.
15. Security incidents
If we identify an incident, we will investigate, contain, document, and remediate it based on its nature and applicable requirements. We might contact affected users, clients, providers, regulators, or authorities when required or appropriate.
For processing covered by Philippine law, the National Privacy Commission describes conditions for breach notification and a 72-hour notification period for covered breaches. The applicable facts and legal requirements control. See the NPC breach reporting guidance.
16. Your privacy rights
Subject to applicable law and its limits, you might have rights to be informed, access your personal information, correct inaccurate information, object to certain processing, request erasure or blocking, request data portability, withdraw consent, and file a complaint.
Send a request to admin@datalprojects.com. Include the email address used with us, the request, and enough detail for us to locate the record. We might ask for reasonable proof of identity. We use this step to protect your information from an unauthorized request.
We will review and respond within the period required by applicable law. We might refuse or limit a request when a legal exception applies, when fulfilling it would affect another person's rights, or when we need to preserve evidence. We will explain the reason where the law allows us to do so.
If you believe your rights were violated, you might contact the National Privacy Commission complaint channel.
17. Children
The site is intended for people who have legal capacity to use the service. Do not submit a child's personal information unless you are the parent, guardian, or authorized representative and have the required authority. If you believe a child submitted information without proper authority, contact us so we can review and remove it when required.
18. Changes and contact
We might revise this policy to reflect new services, providers, legal requirements, or security practices. The updated version takes effect when posted unless a later date appears in the notice. Material changes might also be shared through the email address linked to an account or inquiry when appropriate.
Questions, requests, and privacy concerns belong at admin@datalprojects.com.