Privacy Policy

Who we are

JPARCON LAW OFFICE (“the firm”, “we”, “us”) is the personal information controller for the information described in this policy. We are based at Salvador St., Labangon, Cebu City, Cebu, Philippines.

This policy explains what personal information we collect through jparcon.law and the client portal, why we collect it, and what we do with it. It is issued under the Data Privacy Act of 2012 (Republic Act No. 10173).

Privacy questions and data-subject requests go to Jparcon.ibp@gmail.com.

What we collect

From visitors, and from anyone who contacts us:

• Your name and your email address. A phone number is optional on the consultation form, but you must give one to book a consultation, so that the firm can reach you about the appointment.
• The message you write to us.
• A cookie that keeps you signed in, if you log in. The public pages use no other cookie.

From clients, once engaged:

• Your name, email address and phone number, and how you came to the firm.
• Information about your matter, including the documents you upload to the portal.
• Billing records: the invoices issued to you and the payments made against them.

We do not collect more than we need, and we do not buy personal information.

Why we collect it, and our lawful bases

• To reply to your enquiry and arrange a consultation — your consent, and our legitimate interest in answering people who contact us.
• To provide the legal services you have engaged us for — our engagement with you.
• To issue invoices and process payments — our engagement with you, and our legal obligation to keep accounting records.
• To keep records of the work as the law and our professional obligations require — our legal obligations.

We do not use your information for marketing, and we do not sell or trade it.

Client matters and privilege

Information about a client’s matter, and the documents the client gives us, are held in confidence and protected by attorney-client privilege. They are visible only to the lawyers and staff of the firm who need them to do the work, and to the service providers listed below strictly to the extent needed to run the service. We disclose them to no one else unless you instruct us to or the law compels us to.

If you are a client, this policy applies alongside the confidentiality obligations in your engagement retainer.

Who we share it with

We share personal information only with the providers that run this service:

• A cloud database and hosting provider, which holds our database, your client login, and the records of the files we hold.
• Xendit — our payment processor. When you pay an invoice you are taken to Xendit’s own checkout, and Xendit’s privacy policy governs what you enter there. We do not receive or store your full card details.
• An email delivery service, which sends the firm’s transactional email.
• An SMS provider, for text messages about consultation bookings.
• A calendar provider, which the firm consults to check its availability when you book.
• A document storage provider, which holds the files you upload to the portal.
• A rate-limiting service, which processes your IP address briefly when you submit a form, to block automated abuse.

We do not sell your personal information, and we do not share it for anyone else’s marketing.

Where your information goes

Some of these providers hold data outside the Philippines. Our database, hosting and document storage run on international cloud infrastructure, and Xendit processes payments in the region. Where information is transferred out of the Philippines we keep it protected by our agreement with the provider and by the provider’s own security obligations. We remain responsible for your information under the Data Privacy Act when it is transferred.

How long we keep it

We keep information about your matter for as long as your engagement is active, and afterwards for the period that Philippine law and the firm’s professional obligations require us to keep it. Billing and accounting records are kept for the period the law requires. An enquiry that does not become an engagement is kept only as long as we need it to deal with the enquiry.

When information is no longer needed, we delete it or remove what identifies you.

Cookies

The site uses a session cookie to keep you signed in to the client portal. It is created when you log in. We do not use cookies for advertising, and we do not run analytics or tracking scripts anywhere on the site.

Your rights under RA 10173

Under the Data Privacy Act of 2012 you have the right to:

• be told whether we hold personal information about you, and to have it described;
• have information that is inaccurate corrected;
• object to how we process your information, and in some cases ask us to stop;
• ask us to remove or destroy information that is no longer needed, or that we are holding unlawfully;
• ask for a copy of the information you gave us, in a form you can use;
• be compensated for damage caused by unlawful processing; and
• complain to the National Privacy Commission.

To exercise any of these, email Jparcon.ibp@gmail.com. We may need to confirm who you are before we act. Some of these rights have limits: we cannot delete records the law requires us to keep, and information covered by attorney-client privilege may be withheld from someone who is not the client.

If you are not satisfied with our response you may complain to the National Privacy Commission at privacy.gov.ph.

Security

Access to information mirrors who is entitled to see it: a client’s information is available to that client and to the firm’s staff, and to the providers listed above only as far as running the service requires. Documents are held in a private store and served only through links that expire within a minute. Payments are handled by Xendit and the firm does not store card details. The portal is reached through individual logins.

No system is perfectly secure. If a breach affects your personal information we will notify you and the National Privacy Commission as the law requires.

Changes to this policy

If we change this policy we will update the effective date at the top of the page. Material changes will be brought to the attention of clients.