Privacy Policy

Aptissimus is an IT services and cybersecurity consultancy serving businesses and institutions in the Philippines. We are the Personal Information Controller for the data described here, meaning we decide the purposes and means of processing.

• Registered entity: Aptissimus
• Location: Purok Mangga 2 Tayud Liloan, Cebu PH 6002
• Data Protection Officer: reachable through our contact page

Our full business address is available on request from our Data Protection Officer.

When you submit the contact form we collect your name, the organization you represent, the contact details you give us so we can reply, the service you are interested in, and whatever you choose to write in your message.

We use this only to respond to your inquiry and follow up about our services. We process it because you asked us to get in touch — it is what we need to reply and take the steps you have asked for. We do not sell your data and we do not pass it to third parties for their own marketing.

Please do not send passwords, personal health or financial details, or specifics of an active security incident through this form. If you are dealing with a live incident, call us instead and we will set up a secure channel. Any sensitive personal information we receive unprompted is deleted.

We do not collect payment details or government identifiers through this site.

This site sets no cookies. Not first-party, not third-party, none for analytics or advertising. There is nothing here to consent to, which is why you will not see a cookie banner.

Your browser does keep a few small functional items on your own device: your light or dark theme choice, a draft of anything you have typed into the contact form, and the page position and form state the site uses to move between pages smoothly. None of these is a cookie, and none of them is ever sent to our servers. The contact-form draft deliberately leaves out your email address and phone number.

Your theme choice stays until you clear your browser data; the rest is cleared when you close the tab. You can remove all of it at any time through your browser's site-data settings. Our traffic and performance analytics are cookieless and do not profile individual visitors.

To stop spam and automated abuse, we check where each contact-form submission comes from and limit how often the form can be sent from the same place. We do not keep your IP address in our own records, and whatever we do keep is short-lived and gone within 24 hours.

Your IP address also appears in the standard web-server logs our hosting provider keeps as part of running the site securely. We never use IP addresses for marketing or profiling, or for anything beyond protecting the form and our infrastructure. That protection is our legitimate interest as the operator of this site.

We use a small number of service providers to run this site and to get your inquiry to us. Each of them acts only on our instructions, and none of them uses your information for their own purposes. They fall into these categories:

• Website hosting and delivery — serving this site, keeping standard server request logs, and providing cookieless traffic and performance analytics.
• Email delivery — passing your inquiry to our team and sending you an acknowledgment.
• Bot protection and abuse prevention — the challenge that runs on the contact form, and the limits described in section 4.

All of them operate outside the Philippines. We do not sell your data, and we do not pass it to anyone for their own marketing. If you would like to know which specific providers we use, ask our Data Protection Officer through our contact page and we will tell you.

Because the providers above operate outside the Philippines, your personal data is transferred to and processed in other jurisdictions, primarily the United States. Under RA 10173 we remain accountable for personal data we transfer for processing, wherever that processing happens. We choose established providers that publish a data processing agreement and their security practices, and that do not use inquiry data for their own independent purposes. If you want detail on a specific provider, ask our Data Protection Officer through our contact page.

• Contact-form inquiries: kept only as long as we need them to answer you, follow up about our services, and meet our legal obligations — and no longer than 24 months from receipt, after which they are deleted. You may ask us to delete yours sooner at any time.
• Abuse-prevention data: short-lived, and expires within 24 hours.
• Hosting request logs: retained per our hosting provider's standard log retention, for security and troubleshooting.
• Browser storage: stays on your device; the form draft clears when you close the tab.

We may keep data longer only where necessary to comply with a legal obligation or resolve a dispute.

As a data subject under RA 10173 you have the right to be informed that your personal data is being processed and why, to access it, to have it corrected, to have it erased or blocked, to object to processing, to obtain it in a portable electronic format where technically feasible, and to be indemnified for damages caused by inaccurate, false, or unlawfully obtained data.

To exercise any of these, reach our Data Protection Officer through our contact page. We will respond within a reasonable time and in line with NPC guidance. If you believe your rights have been violated, you may also lodge a complaint with the National Privacy Commission at privacy.gov.ph.

We maintain reasonable and appropriate organizational, physical, and technical security measures as the Data Privacy Act requires, and will notify you and the National Privacy Commission of a personal data breach where the Act requires it.

We may update this page to reflect changes in our practices, the providers we use, or legal requirements. The "last updated" date above shows when it was last revised.

Questions, requests, or concerns about this policy or how we handle personal data:

• Aptissimus
• Purok Mangga 2 Tayud Liloan, Cebu PH 6002

You can reach us — including our Data Protection Officer — through our contact page, which lists the usual ways to get in touch.