Privacy Policy

This policy explains what personal data we handle across everything we do, why, who we share it with, and your rights under the Philippine Data Privacy Act of 2012 (RA 10173). Depending on the service, we act either as the controller (we decide how data is used) or as a processor (we handle data on a client’s behalf, on their instructions).

1. Our roles by service

• This website and inquiries: controller.
• Agency services (content, SMM, video, photo, talent booking): controller for our own client and talent records; processor when we operate a client’s social accounts or handle their audience’s data on their behalf.
• BookingBot: processor. We operate an AI booking assistant on a Client’s Facebook and Instagram pages; for guests who message that page, the Client is the controller and we process only on their instructions.

2. What we collect

Website visitors and inquiry / lead forms

The details you submit: name, business or page name, email, phone or Messenger link, number of rooms, and your message. We don’t run advertising pixels or third-party analytics and don’t use tracking cookies (a basic session cookie is used only if you sign in to a panel).

Agency / SMMA services

Client business and billing contact details; when we manage a client’s social accounts, the comments, messages, and audience interactions from that client’s followers (handled on the client’s behalf); for content, video, and photo work, images and footage of identifiable people (talent, customers, event guests), for which we rely on the client or talent providing appropriate consent or releases; and for talent booking, talent names, contacts, and rates.

BookingBot

Guest name (and the name or ID provided by Facebook/Instagram), contact number when shared for a booking, message and booking details. Clients provide business info, rates, payment instructions, payment-QR images, and a Facebook Page connection (token stored encrypted). We do not collect card or bank credentials. Deposits are paid by guests directly to the Client’s own GCash, Maya, or bank; we never handle funds.

3. Why we process it

To respond to inquiries and set up services; to deliver the agency and BookingBot services you or our clients engage us for; and to operate, secure, and improve those services. Legal bases under RA 10173 include contract and performance, legitimate interests, and consent where applicable.

4. Who we share it with

• Web3Forms: routes website inquiries to us by email.
• Meta (Facebook/Instagram) and other social platforms: where our SMM work and BookingBot operate.
• Anthropic: AI provider used to generate BookingBot replies.
• Our hosting provider.
• The relevant client: when we process data on their behalf.

We do not sell personal data or share it for third-party advertising.

5. International transfers

Some providers (e.g. Meta, Anthropic, Web3Forms, hosting) may process data outside the Philippines. Where they do, we rely on their contractual and technical safeguards to keep protection consistent with RA 10173.

6. AI and automated processing

BookingBot uses AI to generate replies from the information provided. It does not make solely-automated decisions producing legal effects about you; a person confirms bookings and any payment.

7. Security and breaches

Access tokens are encrypted at rest; client data is isolated; access is role-restricted with audit logging and least-privilege staff access. We apply reasonable organizational, physical, and technical safeguards under RA 10173. If a personal-data breach likely to cause harm occurs, we will notify the affected parties and the National Privacy Commission as required.

8. Retention

We keep personal data only as long as needed to provide the service and meet legal and operational requirements, then delete or anonymize it. Clients may request deletion of data we process for them at any time.

9. Your rights

Under RA 10173 you may access, correct, object to, or request deletion of your personal data, and be informed how it’s processed. Email support@uprisemedia.co or see our Data Deletion instructions. If we process your data on a client’s behalf, you may also contact that client.

10. Children

Our services are not directed at children under 18; we do not knowingly collect their data.

11. Changes and governing law

We may update this policy; the “last updated” date will change and material changes will be posted here. This policy is governed by the laws of the Republic of the Philippines.

12. Contact

Questions or complaints: support@uprisemedia.co. You may also contact the National Privacy Commission (privacy.gov.ph).