Back to Portfolio

Privacy Policy

Last Updated: July 27, 2026 • GDPR (EU/EEA/UK) • CCPA/CPRA (California) • PIPEDA (Canada) • LGPD (Brazil) • Philippine Data Privacy Act (RA 10173)

1. Information We Collect

We collect information you voluntarily provide through the contact form and account security features, including:

  • Full name & email address
  • Messages sent via the contact form or live chat widget
  • Appointment details (preferred date, time, meeting type) when you schedule a consultation
  • CV/resume request submissions
  • Phone number & company name
  • Mailing address & message content
  • CV download requests
  • IP address & browser user-agent (for security and analytics)
  • Recovery email address, for site administrators who enable two-factor authentication

2. How We Use Your Information

Your personal data is used exclusively for:

  • Responding to your inquiry via email
  • Sending your requested CV (upon approval)
  • Improving website performance and user experience
  • Analyzing visitor patterns (aggregated, anonymous)
  • Sending one-time login verification codes, only for the site administrator account when two-factor authentication is enabled

We do NOT sell, rent, or share your personal data with third parties without your explicit consent, except where required by Philippine law or applicable international law.

3. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encrypted database connections (TLS/SSL)
  • Password hashing with bcrypt
  • CSRF token protection on all forms
  • An active security monitoring shield that detects and blocks SQL injection, cross-site scripting, and automated scanning attempts
  • Rate limiting and brute-force login protection
  • Optional two-factor authentication (email verification code) for administrator access
  • Strict access controls and session management

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We encourage you to use strong passwords and keep your devices up to date.

4. Your Rights

Depending on your location, you may have the following rights under the GDPR (EEA residents) and the Philippine Data Privacy Act (RA 10173):

  • Access - request a copy of the data we hold about you
  • Rectification - correct inaccurate personal data
  • Erasure - request deletion of your data ("right to be forgotten")
  • Restriction - limit how we process your data
  • Portability - receive your data in a machine-readable format
  • Objection - object to certain uses of your data

To exercise any of these rights, contact us at macaranasmichaell@gmail.com. We will respond within 30 days.

4a. International & Regional Rights

This website is accessible worldwide. Wherever you are located, by continuing to use this site you acknowledge and agree to this Privacy Policy and the accompanying Terms of Service. In addition to the general rights above, the following region-specific protections apply:

California, USA (CCPA / CPRA)

California residents have the right to know what personal information is collected, to request its deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information. This website does not sell or share your personal information for advertising, and we do not discriminate against you for exercising your rights.

European Union / EEA / United Kingdom (GDPR / UK GDPR)

Our lawful bases for processing are your consent (for optional cookies and contact submissions) and our legitimate interest in securing the site. You may lodge a complaint with your local supervisory authority, and you may withdraw consent at any time without affecting prior lawful processing.

Canada (PIPEDA)

We collect personal information only with your knowledge and consent, use it solely for the purposes stated here, and protect it with appropriate safeguards. You may request access to your information and challenge its accuracy.

Brazil (LGPD)

Data subjects in Brazil have the rights of confirmation, access, correction, anonymization, portability, deletion, and information about with whom data is shared. Processing is based on consent and legitimate interest as permitted under the LGPD.

Philippines (Data Privacy Act, RA 10173)

As a Philippine-based site, we comply with the Data Privacy Act of 2012. You have the rights to be informed, to access, to object, to erasure or blocking, to damages, to rectification, and to data portability, and you may file a complaint with the National Privacy Commission (NPC).

All Other Countries

If your jurisdiction grants data-protection rights not listed above, we honor them to the extent required by applicable law. In all cases, you may contact us to exercise any right available to you locally.

5. Cookies

This website uses the following types of cookies:

  • Essential cookies - required for core functionality (sessions, CSRF protection)
  • Preference cookies - remember your cookie consent choice
  • Analytics cookies - aggregated, anonymized visitor statistics (optional)

You may disable cookies in your browser settings at any time. Note that disabling essential cookies may affect site functionality.

6. Account Security & Two-Factor Authentication

The administrator account for this site may enable email-based two-factor authentication. When enabled:

  • A one-time numeric code is sent to the registered recovery email address on every login attempt
  • Codes expire automatically after 10 minutes and are single-use
  • Password reset links sent to the recovery email expire after 1 hour
  • No SMS or phone number is collected or used for this purpose - verification is email-only

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected. Contact form submissions are retained for up to 2 years. Security event logs (such as blocked intrusion attempts) are retained for operational purposes. You may request earlier deletion of your personal data at any time.

8. Contact Us

For any privacy-related questions, requests, or concerns, please contact the data controller:

Michael Macaranas
Manila, Philippines
macaranasmichaell@gmail.com

© 2026 Michael Macaranas. All rights reserved.

Portfolio Terms & Conditions