Privacy

Privacy Policy

Last updated: May 2, 2026

This policy explains what personal data TechStone Architectural Coating Systems (“TechStone”, “we”) collects when you use techstone.com.ph, why we collect it, and how we handle it. It applies to visitors, newsletter subscribers, registered account holders, and trade-account applicants.

We comply with the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations issued by the National Privacy Commission.

1. What we collect

• Account & registration data — name, email, company, phone (optional), and, for architects/contractors/dealers requesting verified-role access, evidence such as PRC license number, business permit number, or company URL plus a short attestation.
• Newsletter subscriptions — email address, optional name, optional self-identified role, and the page URL where you subscribed.
• Enquiries & quote requests — name, email, company, phone, project context, and any messages you send.
• Engagement data — pages visited, downloads streamed, links clicked in our emails (so we can attribute interest to the right campaign and team member). Sent via cookies and standard server logs.
• Technical data — IP address, user agent, referrer, and timestamps. We log these for security, abuse prevention, and capacity planning.

We do not ask for, store, or process: payment-card numbers, government identifiers (other than the PRC license number you may voluntarily submit for trade verification), passwords from third parties, or biometric data.

2. Why we collect it

• To provide the service — fulfilling sample requests, processing trade-account applications, granting verified-role access to specifier resources and pricing.
• To communicate — sending the monthly Specifier Insider digest only to subscribers who opted in, replying to enquiries, and following up on quotes.
• To improve — understanding which content, systems, and pages help architects and trade users, so we invest in what is actually useful.
• Legal & security — preventing fraud, enforcing terms, and complying with valid legal requests.

3. Cookies & tracking

We use a small number of first-party cookies:

• Session cookies — keep you signed in; expire when you close the browser.
• Campaign attribution — when you click a tracked link in one of our emails, we set a 30-day cookie so any quote or download you generate is credited to that campaign internally. Anonymous to third parties.
• Analytics — Google Analytics (GA4 measurement ID G-T3R63YBKM8). We do not enable Google Signals or cross-device personalisation. You can opt out via your browser settings or a tool like the Google Analytics Opt-out Add-on.

We do not run third-party advertising trackers, retargeting pixels, or social-media tracking pixels on this site.

4. Email & SMS

Outbound email is sent via Mailjet. We never share email lists with third parties. Newsletter subscriptions use double opt-in — you must click a confirmation link before we send the digest. Every commercial email contains a one-click unsubscribe link, and unsubscribe requests are honored within one business day. Replies to our marketing emails land at [email protected] and are read by a human.

5. Data sharing

We share data only with service providers required to operate the platform:

• Mailjet — email delivery and engagement tracking.
• vTiger — our internal CRM, hosted on infrastructure we control.
• Google Analytics — aggregate site analytics.
• Hosting & security — Cloudflare and our managed Linux hosts.

We do not sell, rent, or trade personal data. We will only disclose data to law-enforcement or regulators when compelled by valid legal process under Philippine law.

6. Retention

• Account records — for the life of the account, plus 24 months after closure.
• Enquiry & quote records — 5 years (commercial-record retention).
• Newsletter subscribers — until you unsubscribe; the row is kept (with unsubscribed_at set) so we don't accidentally re-add you.
• Engagement & analytics events — 26 months.
• Server logs — 90 days unless flagged for security investigation.

7. Your rights

Under the Data Privacy Act you have the right to be informed, to access, to object, to erasure or blocking, to rectify, to data portability, to file a complaint, and to claim damages where applicable. To exercise any of these rights, email [email protected]. We respond within ten (10) business days.

8. Security

Data is encrypted in transit (TLS 1.2+). Passwords are stored as bcrypt hashes — we cannot read them and never email them in plaintext. Access to internal systems is limited to authenticated TechStone staff on a need-to-know basis.

9. Children

The site is intended for professional and commercial use. We do not knowingly collect data from anyone under 18. If you believe we have, contact us and we will delete it.

10. Changes to this policy

We may update this policy as the platform evolves. The "Last updated" date at the top reflects the most recent change. Material changes (new data categories, new providers, retention extensions) are announced via the newsletter or a banner on the site for 30 days.

11. Contact

TechStone Architectural Coating Systems
[email protected]
techstone.com.ph

This is a baseline privacy policy reflecting how the platform actually operates as of May 2, 2026. TechStone Operations should review with counsel before further marketing campaigns and update the "Last updated" date when material changes are deployed.