1. About This Page
This page explains your rights under the Philippines Data Privacy Act of 2012 (Republic Act No. 10173). We take your privacy seriously and want you to know exactly how your data is handled.
2. Data Controller
The data controller for this website is harmexcry.com.
Address: 112 Bonifacio Street, Cebu City, Cebu, 6000, Philippines
Contact email: support@harmexcry.com
As the data controller, we decide how and why your personal data is processed. We are responsible for making sure your data is handled lawfully and safely.
3. Your GDPR Rights in Detail
3.1 Right of Access
You have the right to ask us for a copy of all personal data we hold about you. This is called a Subject Access Request (SAR). We will provide this information free of charge within 30 days. The data will be sent in a clear, readable format.
To make a request, email support@harmexcry.com with the subject line "Data Access Request". We may ask you to verify your identity before we release any data.
3.2 Right to Correction (Rectification)
If any personal data we hold about you is wrong or incomplete, you have the right to ask us to fix it. We will correct the data within 30 days of your request.
Send your correction request to support@harmexcry.com with details of what needs to be changed.
3.3 Right to Deletion (Right to Be Forgotten)
You can ask us to delete your personal data. We will do so unless we have a legal reason to keep it. Valid reasons for deletion include:
- The data is no longer needed for its original purpose.
- You withdraw your consent and there is no other legal basis for processing.
- You object to the processing and there are no overriding legitimate grounds.
- The data has been processed unlawfully.
We will complete deletion within 30 days. We will also tell any third parties who received your data to delete it.
3.4 Right to Restriction of Processing
You can ask us to limit how we use your data. This means we will store your data but not process it further. You can request restriction when:
- You contest the accuracy of your data (while we verify it).
- The processing is unlawful but you prefer restriction over deletion.
- We no longer need the data but you need it for legal claims.
- You have objected to processing (while we consider your objection).
3.5 Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format. You can also ask us to send this data directly to another controller where technically possible.
This right applies to data you have provided to us, processed based on your consent or a contract, and processed by automated means.
3.6 Right to Object
You have the right to object to our processing of your personal data when we process it based on legitimate interests. Once you object, we will stop processing unless we can show compelling legitimate grounds that override your interests.
You can also object to processing for direct marketing at any time. We will stop immediately.
4. How to Exercise Your Rights
To use any of the rights listed above:
- Send an email to support@harmexcry.com.
- State clearly which right you wish to use.
- Provide enough information so we can identify you (such as the email address you used on our site).
- We will respond within 30 days.
There is no fee for most requests. If a request is clearly unfounded or excessive, we may charge a reasonable fee or refuse to act on it. We will explain our reasons if this happens.
5. Consent and How to Withdraw It
Where we process your data based on consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that happened before you withdrew it.
How to withdraw consent:
- Newsletter: Click the "unsubscribe" link in any newsletter email, or email us at support@harmexcry.com.
- Cookies: Use the cookie settings on our website. You can also clear cookies through your browser settings. See instructions below.
- Contact data: Email us to ask that we delete any data you have sent through our contact form.
6. Managing Cookies
When you first visit our site, a cookie banner asks for your consent. You can change your choice at any time.
To manage cookies in your browser:
- Chrome: Settings > Privacy and Security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions > Manage and delete cookies
Blocking all cookies may affect how some parts of our website work.
7. Data We Collect
For a full list of data we collect and how we use it, please see our Privacy Policy. In summary, we may collect:
- Name and email (from contact form or newsletter sign-up)
- Usage data (pages visited, browser, device)
- IP address
- Cookie data
8. Data Security
We use SSL encryption, secure servers, and access controls to protect your data. Only authorised team members can access personal data, and only when needed for their work.
9. Complaints
If you are not satisfied with how we handle your data or respond to your request, you have the right to complain to the Philippines' data protection authority:
National Privacy Commission (NPC)
Website: privacy.gov.ph
Phone: (02) 8234-2228
We encourage you to contact us first so we can try to resolve your concern directly.
10. Changes to This Page
We may update this GDPR information from time to time. The date at the top shows when it was last changed. Please check back regularly.
11. Contact Us
For any GDPR-related questions or requests:
- Email: support@harmexcry.com
- Address: 112 Bonifacio Street, Cebu City, Cebu, 6000, Philippines