TheOrangeDesign Digital Marketing Services, doing business as TheOrange.Design (“TheOrange.Design,” “we,” “us,” or “our”), respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in connection with our websites, digital marketing and web-development services, client projects, online forms, business communications, and related services.
WhatsApp notice: Incoming WhatsApp messages and attachments may be forwarded to a restricted Discord channel so authorized members of our team can respond. See Section 5.
Contents
1. Scope
This policy applies when you visit a website or page we own or operate; contact us, request a quotation, subscribe, or become a client; communicate with us by email, telephone, social media, WhatsApp, or another channel; submit information through a form, booking interface, registration page, survey, or other digital experience we operate; or interact with another service that links to this policy.
We also design and operate websites and forms for clients, including hotels and other hospitality businesses. Where a client determines why and how information is collected, that client is the personal information controller and we process information on its behalf. The client’s privacy notice also applies and should be reviewed. This policy describes our own practices and our role as a service provider.
Third-party platforms and websites have their own privacy practices. This policy does not replace the privacy policies of Meta, WhatsApp, Discord, payment providers, hotels, or other independent organizations.
2. Personal information we may collect
Information you provide
- Identity and contact information, including name, business, job title, email, telephone number, address, and messaging identifiers.
- Inquiry and project information, including messages, requirements, budgets, preferences, proposals, contracts, approvals, and supplied files.
- Account and transaction information, including billing contacts, invoices, payment status, and transaction references. Payment-card information is ordinarily collected directly by a payment provider.
- Communications and attachments sent by email, telephone, social media, or WhatsApp.
- Marketing preferences, surveys, testimonials, feedback, and other information you voluntarily provide.
Hotel, accommodation, event, and client-operated forms
A client form may collect guest or attendee names and contact details; arrival and departure dates; room, venue, dining, event, accessibility, or package preferences; guest counts; booking references; special requests; and payment status or transaction references. The form should identify the client receiving the information.
Please do not put passport numbers, government identifiers, health details, full payment-card information, or other sensitive information in an open-text field unless specifically requested through an appropriate secure method.
Information collected automatically
Websites may collect IP address, approximate location derived from it, device and browser details, referring pages, page activity, dates and times, session data, cookie identifiers, and diagnostic or security logs.
Information from other sources
We may receive information from clients, business partners, public sources, social-media platforms, analytics and advertising platforms, payment providers, and other service providers, subject to their policies and applicable law.
3. Purposes of processing
We process information to respond to inquiries and prepare quotations; enter into and perform contracts; deliver design, development, marketing, hosting, support, and related services; route booking requests, registrations, and client form submissions; maintain and secure websites and integrations; prevent fraud and misuse; manage invoices, payments, and business records; measure service performance; send requested service messages and permitted marketing; maintain evidence of instructions and transactions; comply with law; and establish, exercise, or defend claims.
We do not sell personal information. We do not use private WhatsApp messages or client form submissions to train artificial-intelligence models.
4. Basis for processing
Depending on the circumstances, we process information with consent; to take steps at your request or perform a contract; to comply with law; to protect vital interests; to pursue legitimate interests such as responding to inquiries, securing services, preventing fraud, and maintaining necessary records when those interests are not overridden by your rights; or on another basis permitted by applicable law.
Providing information is generally voluntary, but we may be unable to respond, complete a request, or deliver a service without required information. Consent may be withdrawn where it is the basis of processing, without affecting earlier lawful processing.
5. WhatsApp communications and Discord relay
When you contact our WhatsApp Business number, we may receive your name or profile name, telephone number, WhatsApp identifiers, message content, attachments, and message or delivery metadata.
To alert authorized team members and respond efficiently, incoming WhatsApp messages and attachments may be automatically forwarded to a private Discord channel controlled by TheOrange.Design. The relay may include the sender’s name, telephone number, message, attachment, and timestamp. Access is restricted to personnel who need the information for inquiry handling, service delivery, support, security, or administration.
Messages are not made public by the relay. Meta, WhatsApp, and Discord also process information under their own terms and privacy policies.
6. Cookies, analytics, and advertising
Websites may use necessary cookies for security, sessions, forms, and core operation; preference cookies; analytics technologies; and advertising or social-media technologies if disclosed and enabled for the site. Exact technologies vary by website or client project.
You can usually block or delete cookies in your browser, although necessary features may stop working. Where applicable law requires consent for non-essential cookies or similar tracking, the site should present an appropriate choice and more specific cookie information.
7. Disclosure of information
We may disclose information as reasonably necessary to the client for whom a website, form, campaign, or booking interface is operated; authorized personnel and contractors; hosting, cloud, email, communication, analytics, security, support, payment, accounting, and technical providers; Meta, WhatsApp, and Discord for the communications described above; professional advisers, auditors, insurers, and financial institutions; government authorities and courts where permitted or required by law; and relevant parties to a business transfer.
We require service providers to use information only for authorized purposes and apply appropriate protection to the extent required by law and our agreements.
8. International processing
Some providers, clients, or recipients may process or store information outside the Philippines. Privacy laws may differ in those locations. We take reasonable steps required by applicable law, such as contractual protection, access limitation, and provider security review.
9. Retention
We retain information only as long as reasonably necessary for the stated purpose, contractual and operational needs, legal or accounting requirements, security, dispute resolution, and legal claims.
- Unsuccessful inquiries and routine communications are periodically reviewed and deleted when no longer useful or required.
- Client, transaction, contract, invoice, and tax records may be retained for legally required periods.
- Client-operated form submissions are retained according to the client’s instructions, the contract, and the form’s purpose.
- WhatsApp messages and attachments relayed to Discord may remain in the restricted channel until no longer required for inquiry handling, service delivery, security, or recordkeeping.
- Security logs and backups may remain for limited operational cycles before deletion or overwrite.
When retention is no longer justified, we delete, anonymize, or securely dispose of information, subject to technical limitations and legal holds.
10. Security
We use reasonable organizational, physical, and technical measures designed to protect information. These may include restricted access, authentication and credential controls, encrypted transmission, provider security controls, backups, monitoring, staff confidentiality requirements, and incident-response procedures.
No system is completely secure. Please avoid unnecessary sensitive information in ordinary email, messaging, or open-text forms.
11. Your rights
Subject to the Philippine Data Privacy Act of 2012 and other applicable law, you may have the right to be informed; object or withdraw consent where applicable; request access and information about processing; request correction; request erasure or blocking where permitted; obtain data portability where applicable; seek indemnification for damage caused by a violation; and complain to the National Privacy Commission.
Contact us to exercise a right. We may verify your identity and authority. Rights remain subject to lawful exceptions, including record-retention duties and other people’s rights. If a request concerns a hotel, booking, event, or another client-operated form, we may refer it to the client controlling the information and assist that client as appropriate.
12. Marketing choices
You may use an unsubscribe link or contact us to stop marketing. We may still send non-promotional communications needed for an inquiry, transaction, contract, security matter, or legal obligation.
13. Children and information about other people
Our business services are not directed to children, and we do not knowingly collect children’s information without appropriate authority. Hotel or event forms may include accompanying guests or minors when supplied by an authorized adult and necessary for the requested service.
If you provide information about another person, you confirm that you are authorized to do so and have given them any notice required by law.
14. Third-party websites and services
Websites and client projects may link to or embed independent services. Their privacy practices are governed by their own notices. We are not responsible for an independent third party’s content, security, or privacy practices.
15. Changes to this policy
We may update this policy when our practices, technology, services, or legal obligations change. We will post the revised policy with a new “Last updated” date and provide additional notice when required. Material changes will apply prospectively unless otherwise permitted by law.
16. Contact and complaints
TheOrangeDesign Digital Marketing Services
Doing business as TheOrange.Design
Philippines
Contact form: https://theorange.design/contact
Please use the subject or opening phrase “Privacy Request” and describe the relevant website, form, booking, message, or client project. We will respond within the period required by applicable law.
You may also contact the National Privacy Commission of the Philippines.