PRIVACY POLICY

Last updated: [DATE]

This Privacy Policy describes how Venge Studio ("we," "us," "our") collects, uses, and protects your personal information when you visit vengecredecks.com or engage our services.

Venge Studio is a business registered in the Republic of the Philippines and operated by Alexis Macaso. We comply with:

- The Philippines Data Privacy Act of 2012 (Republic Act No. 10173), enforced by the National Privacy Commission (NPC), and

- The EU General Data Protection Regulation (GDPR), to the extent it applies to data subjects in the European Economic Area.

We also act consistently with the principles of the California Consumer Privacy Act (CCPA) for California residents.

1. INFORMATION WE COLLECT

a) Information you provide directly

- Name, email, company, and phone number submitted via contact forms or consultation bookings

- Project details, deal information, branding assets, and any data you submit through Bloom.io or by email for the purpose of designing your deck

- Billing information processed via our payment provider

b) Information collected automatically

- IP address, browser type, device information, referring URL, pages visited, time on site

- Cookie data (see our Cookie Policy)

c) Information from third parties

- Squarespace and Google Analytics data

- Engagement information from social platforms (e.g., LinkedIn, Pinterest) where you've interacted with us

2. HOW WE USE YOUR INFORMATION

We use personal data to:

- Respond to inquiries and consultations

- Deliver design services you've contracted us for

- Process payments and issue invoices

- Send service-related communications (project updates, deliveries)

- Improve our website and services

- Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

3. LEGAL BASIS FOR PROCESSING

Under the Philippines DPA and GDPR, we process personal data on the following bases:

- Performance of a contract — delivering services you've engaged us for

- Legitimate interest — running our business, responding to inquiries, improving our services

- Consent — where you've opted in to marketing emails or non-essential cookies

- Legal obligation — tax, accounting, regulatory compliance

4. WHO WE SHARE INFORMATION WITH

We share personal data only with:

- Squarespace (website hosting, analytics)

- Bloom.io (client portal, contracts, project management)

- Payment processors (invoicing and payment)

- Our email service provider

- Tax and legal advisors (where required)

- Authorities (where legally required)

All third parties are bound by data processing

agreements or equivalent contractual protections.

5. INTERNATIONAL DATA TRANSFERS

Some third-party providers (Squarespace, Bloom.io,

Google Analytics) are based in the United States or

other jurisdictions. Where data is transferred outside

the Philippines or the EEA, we rely on appropriate

contractual safeguards, including Standard Contractual

Clauses where required by GDPR.

6. HOW LONG WE KEEP YOUR DATA

- Inquiry and lead data: up to 24 months after last

contact

- Client project files: up to 7 years (legal and tax

purposes)

- Marketing email subscribers: until you unsubscribe

- Analytics data: as per provider defaults (typically

14–26 months)

7. YOUR RIGHTS

Under the Philippines DPA you have the right to:

- Be informed

- Object to processing

- Access your personal data

- Correct inaccurate data

- Erase or block processing

- Damages (in the event of inaccurate or unauthorized

processing)

- Data portability

- File a complaint with the National Privacy Commission (https://privacy.gov.ph)

Under GDPR, EEA residents additionally have rights to restrict processing, withdraw consent at any time, and file a complaint with a relevant EU data protection authority. To exercise any of these rights, email info@vengecredecks.com. We respond within 30 days.

8. SECURITY

We use reasonable technical and organizational measures to protect your data, in line with the Philippines DPA and GDPR standards. No method of transmission over the internet is fully secure — we encourage use of secure channels when sharing sensitive information.

9. CHILDREN'S DATA

Our services are not directed to individuals under 18, and we do not knowingly collect personal data from minors.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Continued use of our website after changes constitutes acceptance.

11. CONTACT

Data Privacy Officer / Contact Person:

Alexis Macaso

Venge Studio

info@vengecredecks.com

You may also contact:

- National Privacy Commission (Philippines):

‍ ‍https://privacy.gov.ph

- Your local EU data protection authority (for EEA residents)