Privacy information
Understand what the planned business-inquiry service will collect, why it will be used and the safeguards that must be in place before it is enabled.
Read the noticePersonal information
Business inquiries should use only the information needed for a useful response.
01 / 03 Your inquiry
The planned form asks for your name, organization, business email, telephone number, area of interest and inquiry description. These details support a response to your business requirements.
Do not include passwords, credentials or sensitive personal information.
02 / 03 Safeguards
The inquiry service is designed to use encrypted connections, server-side checks and restricted server configuration. Hosting and email systems will process information only through the arrangements approved for the service.
03 / 03 Your rights
The approved notice will identify the responsible contact, processing basis, recipients and retention arrangements. Your rights under Philippine law remain subject to the circumstances and applicable requirements.
Privacy notice
ARQOZ Solutions Corporation is the organization identified for the planned business-inquiry service. The approved notice must confirm its personal information controller details and provide an official privacy or Data Protection Officer contact before inquiry collection begins. The confirmed contact details will be published with the approved notice before the service is enabled.
The inquiry form is limited to full name, company or organization, business email, mobile or office number, solution or product interest, and the inquiry description. It does not request a birthdate, government identifier, home address or unrelated sensitive information.
The planned purpose is to understand and respond to a business inquiry, clarify requirements and arrange an appropriate follow-up. The applicable lawful basis has not yet been selected or approved for publication. It must be established for the actual processing before collection is enabled. A privacy acknowledgment is not treated as blanket consent.
If consent is the approved basis for a particular activity, the form must provide specific, informed and freely given consent for that purpose. Marketing is not bundled into an inquiry. Any future marketing activity needs its own business approval and, where required, a separate optional consent mechanism.
When enabled, the form will send the approved fields over HTTPS to a server-side inquiry handler. The handler will validate the fields and security controls, then attempt to send an inquiry notification through the configured authenticated email service. A message accepted by an SMTP server is not confirmation that it has reached or been read in the final mailbox.
The website is designed not to retain a database copy of inquiry messages or log their contents. Approved receiving mailboxes may retain messages under the company’s confirmed retention arrangements. A browser may independently retain autofill or form information according to the visitor’s settings.
The approved notice must identify the relevant recipient categories, authorized ARQOZ personnel and the hosting and email providers involved in handling inquiries. Those arrangements, including any foreign-based processing or international transfers, remain subject to company confirmation. The approved notice will identify those arrangements and any applicable transfer safeguards.
A company-approved retention and deletion schedule for inquiry messages, mailbox copies and operational records is required before collection begins. Limited security metadata supports session integrity, request limiting and duplicate prevention; approved retention and scheduled cleanup must be confirmed before service activation.
The implementation is designed to use encrypted production submission, authenticated email transport, field and origin checks, request-forgery protection, spam controls, limited-rate processing and configuration protected outside the public website directory. These technical controls support the service; they are not a claim of complete security or legal certification. Appropriate organizational access controls and operating procedures must also be approved.
Subject to Republic Act No. 10173, its Implementing Rules and Regulations and applicable limitations, data subjects may have rights to be informed, access, object, correct information, request erasure or blocking, data portability, and damages where legally available. The approved notice must explain how to exercise applicable rights through a verified privacy contact and how identity checks and requests will be handled.
The verified ARQOZ privacy-request channel will be provided in the approved notice before inquiry collection starts. General information on rights and complaints is available from the National Privacy Commission.
Fonts, logos and illustrations are served with this website. No third-party advertising or analytics service is included in this implementation. While submission is disabled, the inquiry endpoint does not start an application session. When enabled, it uses an essential security session cookie and short-lived request tokens to help prevent forged or duplicate submissions; these controls are not used for marketing. Hosting providers may separately process normal request information, such as IP addresses and access logs, under their actual configuration.
This draft does not establish a final Privacy Notice effective date. A confirmed notice, its effective date and material changes will be published before the corresponding personal-data processing is activated.