Privacy Policy

ID8, Inc. ("ID8," "we," "us," or "our") respects your privacy and is committed to protecting personal information in accordance with Republic Act No. 10173, or the Data Privacy Act of 2012, its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission.

This Privacy Policy explains how ID8 collects, uses, stores, shares, and protects personal information when you visit or interact with the ID8 website. We process personal information in accordance with the principles of transparency, legitimate purpose, and proportionality.

By using this website, you acknowledge that you have read this Privacy Policy. Where your consent is required by law, we will obtain it before processing personal information for the relevant purpose.

1. Who We Are

ID8, Inc. is the Personal Information Controller responsible for personal information collected through this website.

For privacy-related concerns, requests, or complaints, you may contact ID8 using the details in the Contact Us section below.

2. What Personal Information Do We Collect?

You may browse most areas of the ID8 website without creating an account or directly providing personal information. We may collect personal information when you voluntarily submit an inquiry or contact form, request information about our services, communicate with us by email, apply for employment, subscribe to updates where available, interact with our social media accounts or website features, or otherwise communicate or transact with ID8.

We do not intentionally collect sensitive personal information through this website unless it is necessary, lawful, and appropriately protected for a specific purpose. Please avoid submitting sensitive personal information through website forms unless it is specifically requested and necessary for the relevant transaction or service.

• name, email address, telephone or mobile number, company or organization, and job title or professional information;
• information contained in an inquiry, message, job application, or résumé; and
• other information that you voluntarily provide to us.

3. Information Collected Automatically

When you visit our website, certain technical and usage information may be collected automatically through our website infrastructure, analytics tools, cookies, and similar technologies. This information may be collected in aggregated or statistical form to understand website performance, improve user experience, maintain website security, and understand how visitors use our website.

We do not use this information to identify you personally unless permitted by law or reasonably necessary for a specific purpose.

• IP address, browser type and version, device type, operating system, and approximate geographic location derived from technical information;
• pages visited, date and time of visits, referring website or source; and
• information about how you interact with our website.

4. How We Use Personal Information

We process personal information only for declared, specified, and legitimate purposes.

• respond to inquiries submitted through contact forms, email, or other communication channels;
• evaluate, discuss, provide, administer, and improve services requested from ID8;
• communicate with you about an inquiry, transaction, service, request, or other communication you initiated;
• send business-development, marketing, and communications about ID8 services, events, news, or updates where permitted by law;
• understand website traffic, visitor behavior, website performance, and user interests to improve our website, content, services, and digital experience;
• detect, prevent, investigate, and address security incidents, fraud, abuse, unauthorized access, and other security concerns; and
• comply with applicable laws, regulations, lawful orders, legal processes, or regulatory requirements, or establish, exercise, or defend legal claims.

5. Lawful Basis for Processing

Under the Data Privacy Act, personal information may be processed when at least one lawful basis applies. The applicable lawful basis depends on the specific processing activity.

Consent is not necessarily required for every instance of processing. Where processing relies on consent, you may withdraw your consent, subject to applicable legal limitations and the consequences of doing so.

• consent;
• contractual necessity;
• legal obligation;
• protection of vital interests;
• public authority or public interest, where applicable; and
• legitimate interests, provided the interests or fundamental rights and freedoms of the data subject are not overridden.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies to provide essential website functions, remember preferences, understand website usage, measure performance, and, where applicable, support marketing or advertising activities. Cookies may be placed by ID8 or by third-party service providers whose technologies are integrated into our website.

Where required, non-essential cookies or similar technologies will only be activated after obtaining the appropriate consent. You may also manage or disable cookies through your browser settings, although disabling certain cookies may affect website functionality.

Third-party services integrated into our website may independently collect or process information in accordance with their own privacy policies and terms. Please review the privacy policies of these providers before providing them with personal information.

7. Who May Receive Your Personal Information?

We may disclose or provide access to personal information to third parties when necessary and lawful for the purposes described in this Privacy Policy. Where third parties process personal information on our behalf, we take reasonable steps to ensure appropriate contractual, organizational, physical, and technical safeguards are in place.

We do not sell your personal information. Any sharing or disclosure is limited to what is necessary and appropriate for the applicable purpose and lawful basis.

• technology, website-hosting, cloud, analytics, communications, email, IT, and cybersecurity service providers;
• professional advisers and consultants;
• payment or transaction service providers, where applicable;
• government agencies, regulators, courts, or law-enforcement authorities when required or authorized by law; and
• other parties where you have provided appropriate consent or where disclosure is otherwise permitted by law.

8. International Data Transfers

Some service providers or technology platforms may store or process information outside the Philippines. Where personal information is transferred to another country or processed through an international service provider, ID8 will take reasonable steps to ensure appropriate privacy and security safeguards are implemented and that processing remains consistent with applicable Philippine data protection requirements.

9. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, establish or defend legal claims, or for other legitimate and lawful purposes. The applicable retention period may vary depending on the type of information and the purpose for which it was collected.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy, anonymize, or otherwise dispose of it in accordance with applicable laws, regulations, and our data-retention policies.

10. How We Protect Your Personal Information

ID8 implements reasonable and appropriate organizational, physical, and technical measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, destruction, misuse, and other unlawful processing. No method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

• access controls, authorization procedures, confidentiality obligations, and appropriate authentication controls;
• data privacy and security training, secure systems and infrastructure, monitoring, and incident-response procedures; and
• secure storage, backup procedures, and vendor and third-party security controls.

11. Data Breach and Security Incidents

ID8 maintains procedures for identifying, responding to, investigating, and managing personal data breaches and security incidents. Where a breach is subject to mandatory notification under applicable law or National Privacy Commission regulations, ID8 will notify the National Privacy Commission and affected data subjects within the required period and in accordance with applicable requirements.

12. Your Rights as a Data Subject

Subject to the conditions and limitations provided by law, you have rights under the Data Privacy Act, including the right to:

• be informed about whether and how your personal information is being processed;
• access and correct or rectify your personal information;
• object to certain processing, withdraw consent where processing is based on consent, or request erasure or blocking where legally applicable;
• data portability, where applicable;
• lodge a complaint with the National Privacy Commission; and
• claim damages where provided by applicable law.

13. How to Exercise Your Rights

To exercise your rights or raise a privacy concern, please contact us using the details below. To protect your information, we may need to verify your identity before processing certain requests. We will evaluate and respond to requests in accordance with applicable law; some requests may be subject to legal or other legitimate limitations.

If you are not satisfied with our response or believe that your privacy rights have been violated, you may lodge a complaint with the National Privacy Commission.

14. Children’s Privacy

Our website is not directed to children under 18 years of age, and we do not knowingly collect personal information from children through the website. If you believe that a child has provided personal information to ID8 without appropriate authorization or consent, please contact us. If we determine that we have collected personal information in circumstances where collection is not permitted, we will take reasonable steps to delete or otherwise appropriately handle it in accordance with applicable law.

15. Third-Party Websites and Services

Our website may contain links to third-party websites, social media platforms, or other online services. These third parties operate independently from ID8 and have their own privacy policies and terms. ID8 is not responsible for the privacy practices, content, security, or policies of third-party websites or services. We encourage you to review their privacy notices before providing personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, website, data-processing activities, technology, applicable laws, regulations, or privacy practices. When we make material changes, we will provide an appropriate notice and update the Last Updated date at the beginning of this Privacy Policy. The current version will always be made available on this page.