Privacy Policy — GBS

Who is responsible

GBS is fictional. The BLWA is responsible for personal information sent through this demo. Its purpose is to demonstrate request delivery, not to arrange an appointment, reply to demo requests, market to you or build a customer list.

What a request contains

Your name, mobile number, selected service, preferred day, part of the day and optional note. The mobile number is normalized to its international Philippine form. The form asks for no email address. Consent evidence records the policy version and the server time of submission.

You must tick the consent box yourself. Please do not include medical or other sensitive details in the note. For a children's service, the submitting adult gives their own contact details; the form does not ask for a child's name or age and provides no separate guardian-consent system.

Delivery and retention

A request is emailed to The BLWA through Resend. It is used only to demonstrate delivery and briefly investigate delivery problems. No appointment is made and The BLWA does not reply to demo booking requests.

The BLWA's policy is to keep demo booking emails for up to 30 days from receipt, then delete them, including forwarded copies and trash. They are not exported for marketing or a customer database. Mail-provider backup retention and the practical deletion process remain unverified.

Resend's email-data guide, read on 8 October 2026, states a 30-day retention period with flexible Enterprise retention. Its security page separately describes seven-day backups. Provider content, metadata and legal-retention rules are separate from The BLWA's inbox policy; the account's actual settings and deletion behavior remain unverified. This page does not promise that every provider-held copy disappears within 30 days.

What the application keeps

The site code stores no copy of a request. Abuse controls keep a coded IP-address count for up to two hours. The BLWA holds the coding secret, so this is treated as personal information, not anonymous data. Separate daily records contain only a date and sending count.

Application stores and logs are designed to exclude raw IP addresses and request details. That does not mean the hosting provider sees no IP address.

Hosting and the robot check

Cloudflare is the intended host. Its infrastructure processes connection information when serving a page; deployment, hosting-log retention and account settings remain unverified.

Cloudflare Turnstile loads only after you use the form. Its privacy addendum, read on 8 October 2026, describes signals including IP address, browser and connection details, and the site key and origin, used for bot detection and improving detection. Security cookies may be involved; deployed cookie behavior and retention remain unverified. The site adds no analytics or cookie of its own.

Your choices and rights

To ask about access, correction, deletion, a copy of your information or withdrawal of consent, email The BLWA at ccereal1293@gmail.com. Correspondence about your privacy rights is separate from a demo booking request and is used to handle that question.

The National Privacy Commission explains rights under the Data Privacy Act of 2012 (RA 10173), including information, access, correction, erasure or blocking, objection and portability, subject to applicable conditions. You can raise a privacy complaint with the Commission at privacy.gov.ph.

Changes

Substantive changes carry a new date and version. The form's consent version must match the policy in force.