Privacy notice
Last updated: 26 October 2026
This notice explains how I, Christian Ibaoc, a freelance web developer in Taguig, Philippines, handle personal information. It covers this website (ibaocchristian.com), the concept sites linked from it, and messages you send me.
The concept sites are fictional businesses I built as samples. Any privacy page on a concept site is part of the sample; this notice is the one that applies to them.
I work under my own name. I have not yet registered a business name. When I do, I will update this notice.
1. Who I am and how to reach me
- Responsible for your information: Christian Ibaoc, Taguig, Philippines
- Email: ChristianIbaoc.Sites@gmail.com
Send privacy questions and requests to that address. I handle them myself.
2. What I collect
When you visit this website or a concept site. The web server keeps a log of each request: your IP address, the date and time, the page or file requested, the response, the referring page and your browser’s user-agent string. I use no analytics, no tracking and no advertising. The sites load no third-party scripts or fonts.
When you email me. Your email address, your name, and whatever you write, including any files you attach.
The contact form on this site is not connected yet. It sends nothing. What you type stays in your browser.
If you message me on a freelance platform (Upwork, Contra or Fiverr), the platform also processes your message under its own privacy notice.
If we start working together, I will tell you in writing what else I need from you and why, before I collect it.
Please do not send me sensitive personal information, such as health details or government ID numbers.
3. Why I use it and on what basis
| Purpose | Basis under the Data Privacy Act (RA 10173, Sec. 12) |
|---|---|
| Replying to your message and preparing a quote you asked for | Steps you asked for before a contract (Sec. 12(b)) |
| Keeping the websites running and secure, and finding faults and abuse | My legitimate interest (Sec. 12(f)) |
I do not sell personal information, and I do not use it for advertising.
4. Who handles it for me
- DigitalOcean hosts the web server, in Singapore. The server logs are stored there.
- Google (Gmail) hosts my email. Google stores email in its data centres, which are mostly outside the Philippines.
- Cloudflare runs the domain’s DNS. It answers lookups for the domain name but does not carry your visits to the websites.
I share personal information with authorities only if the law or a lawful order requires it.
5. How long I keep it
| Information | How long |
|---|---|
| Server logs | Deleted automatically. A log file is closed when it reaches 20 MB, and closed files are deleted 30 days later. On a quiet site a file can take several months to fill, so a log entry can be kept that long. Logs are not included in backups. |
| Emails that do not lead to work | Deleted within 12 months after our last exchange |
6. How I protect it
Connections to these sites are encrypted (HTTPS). The server accepts administrator logins only by key, over a private network. My accounts use two-factor authentication. If a breach is likely to cause you serious harm, I will notify you and the National Privacy Commission as the law requires.
7. Cookies and storage on your device
These sites set no cookies. If you change the colour theme, your browser stores that choice (local storage). If you close a notice or pause a moving strip, your browser remembers it until you close the tab (session storage). None of this is sent to me.
On the Homes concept site (homes.ibaocchristian.com), the listings you save are stored in your browser (local storage). They stay until you remove them or clear the site’s data in your browser. When you open the Saved page, your browser asks the server for those listings’ details, so the server log for that request records which listings you saved, with your IP address. The listings are fictional.
8. Your rights
Under the Data Privacy Act you can:
- be told whether and how I process your information;
- get a copy of it, in a common electronic format;
- have it corrected;
- object to its processing, or have it blocked or deleted where the law allows;
- claim damages for harm caused by unlawful processing; and
- complain to the National Privacy Commission (privacy.gov.ph).
Email me to use these rights. I reply within 15 days. I may ask you to confirm who you are first.
9. Children
This site is for businesses and the people who run them. I do not knowingly collect information from anyone under 18.
10. Changes
I will update this notice when what I do changes, for example when I register my business or connect the contact form. The date at the top shows the latest version.