Privacy policy
This policy describes what personal data WriteLift (operating as Palconit Digital Marketing Services, a Philippines-registered business) collects, how it is processed, how long it is retained, and your rights as a data subject. If anything below is unclear, email [email protected] with "Privacy" in the subject line and we will respond within seven days.
Data controller
Who runs this site.
Palconit Digital Marketing Services (trading as WriteLift) is the data controller for any personal information collected through writelift.ph. Registered place of business: Quezon City, Metro Manila, Philippines.
For privacy-related inquiries, contact [email protected].
What we collect
Only what the contact form captures.
We collect the following personal data only when you voluntarily submit the contact form:
- Name — required field
- Email address — required field
- Brand / company name — optional
- Store URL — optional
- Platform, service, budget range, timeline — optional dropdown selections
- Project brief — required, free-text field
We do not collect: IP addresses (beyond what Cloudflare logs at the edge for routing and abuse prevention), browsing history, device fingerprints, analytics cookies, marketing-tracking cookies, or any data you have not voluntarily entered.
How submissions are processed
The technical path of your message.
When you submit the contact form, the following happens:
- Your form data is sent over HTTPS from your browser to a Cloudflare Worker hosted on Cloudflare's edge network.
- The Worker validates the data (basic field checks, honeypot anti-spam) and forwards it to Brevo (an email-relay service operated by Sendinblue SAS, headquartered in France).
- Brevo delivers the message as an email to [email protected], which is hosted on a separate email provider (DreamHost).
- Karen reads the message and replies directly from her inbox. The original submission lives in the inbox; no separate database or CRM stores your data.
This pipeline is documented for transparency. The Cloudflare Worker source code is available in the WriteLift project repository.
Third-party processors
Companies that touch your data.
- Cloudflare, Inc. — hosts the website and the form-relay Worker. Cloudflare may log connection metadata (IP address, user agent) at the edge for routing and abuse prevention. Cloudflare's privacy policy.
- Brevo (Sendinblue SAS) — relays form submissions as email. Brevo is GDPR-compliant and stores message content only briefly to deliver. Brevo's privacy policy.
- DreamHost — email hosting for [email protected]. Standard email retention applies.
We do not use Google Analytics, Google Tag Manager, Meta Pixel, Hotjar, or any tracking-tag service.
Cookies and analytics
What we use, what we don't.
WriteLift uses Cloudflare Web Analytics, which is cookieless and does not track individual visitors across sites. It collects aggregate page-view data only.
The site sets one optional cookie if you submit the contact form: a session-scoped cookie to prevent duplicate submissions. It expires when you close your browser tab.
No marketing cookies. No advertising cookies. No third-party tracking pixels. If you set "Do Not Track" in your browser, the site honors it (there is nothing to disable; nothing is tracking you to begin with).
Retention
How long we keep your data.
Form submissions and email correspondence are retained for 12 months from the date of last contact, after which they are deleted from the inbox. Active client relationships extend retention for the duration of the engagement plus 12 months for tax and warranty purposes (Philippines Bureau of Internal Revenue requires 10-year retention for invoices; that retention applies only to invoice records, not to project-brief content).
If you would like your data deleted earlier than 12 months, see the rights section below.
Your rights
Under RA 10173, GDPR, and CCPA.
WriteLift complies with the Philippines Data Privacy Act of 2012 (RA 10173), the EU and UK General Data Protection Regulation (GDPR) for visitors from the European Economic Area and United Kingdom, and the California Consumer Privacy Act (CCPA) basics for California residents. As a data subject, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correct — ask us to fix inaccurate data
- Delete — ask us to erase your data (subject to legal retention requirements)
- Portability — request your data in a portable format (CSV or plain-text email)
- Object — object to processing for a specific purpose
- Withdraw consent — for any processing based on consent
- Lodge a complaint — with the Philippines National Privacy Commission (NPC), the Information Commissioner's Office (UK), or your EU member state\'s supervisory authority
To exercise any of these rights, email [email protected] with the subject line "Data Subject Request." We will respond within 15 business days (RA 10173 standard) or 30 days (GDPR standard), whichever applies to your jurisdiction.
Legal bases (GDPR)
Why we process your data.
For visitors covered by GDPR, our legal bases for processing are:
- Consent — you submitted the contact form voluntarily
- Legitimate interest — responding to your inquiry and providing copywriting services
- Contract — for active client engagements, processing is necessary to fulfill the agreed work
- Legal obligation — invoice retention as required by Philippines tax law
International transfers
Where data goes.
Your data may be processed in jurisdictions outside the Philippines, including the United States (Cloudflare\'s edge network) and France (Brevo headquarters). All third-party processors named in this policy maintain GDPR-equivalent safeguards. We do not transfer data to jurisdictions without adequate protection.
Children's privacy
We do not knowingly collect data from minors.
WriteLift is a B2B service for eCommerce brand owners. The site is not directed at children under 16. If we discover we have inadvertently collected data from a minor, we will delete it immediately. Parents or guardians can contact [email protected] to request deletion.
Changes to this policy
When the policy is updated.
We may update this policy as services, processors, or legal requirements change. The "Last updated" date below reflects the most recent change. Material changes will be flagged on the homepage for at least 30 days before taking effect.
Last updated: