Privacy Policy

1. Who We Are

Chatbot and FB Ads Digital Advertising Services is a business registered in the Republic of the Philippines, providing done-for-you digital advertising, chatbot automation, funnel, and web development services. For the personal information described in this Policy, we act as the Personal Information Controller. Where we handle data inside a client's own advertising or chatbot systems on their instruction, we act as a Personal Information Processor for that client, on the terms of the written outsourcing agreement contained in Section 15 of our Terms and Conditions.

2. Information We Collect

We collect only what we need to respond to you, deliver the service you paid for, and run our business lawfully.

We do not collect or store your full card number. Card and account details entered at checkout go directly to our licensed payment gateway provider, which is responsible for processing and securing them. What we receive back is limited to confirmation of payment, the amount, the reference number, and the last digits and card brand for reconciliation.

3. How We Collect It

• Directly from you — when you fill out a form, register for our free training, message our chatbot or Page, request a quotation, or send materials for your project.
• Automatically — through cookies and similar technologies on our pages, and through analytics and advertising pixels.
• From platforms and processors — payment confirmations from our gateway provider, and lead or messaging data from Meta platforms when you interact with our ads or Pages.

4. Why We Use It and Our Lawful Basis

We do not sell personal information. We do not rent or trade contact lists. We do not use your data for any purpose that is incompatible with the one for which it was collected.

5. Who We Share It With

We share personal information only where it is necessary, and only with parties bound to protect it:

• Payment gateway and banking partners — to process and reconcile your payment and to respond to disputes.
• Technology providers — hosting, email, CRM, chatbot, form, and analytics platforms used to operate our services.
• Advertising platforms — Meta and similar platforms, for campaign delivery and measurement.
• Our own team and consultants — limited to the personnel who need the information to deliver your project.
• Government authorities — where disclosure is required by law, regulation, subpoena, or lawful order.

Some of these providers operate servers outside the Philippines. Where personal information is transferred abroad, we take reasonable steps to ensure it remains protected at a standard consistent with RA 10173.

6. Cookies and Tracking

Our pages use cookies and similar technologies to keep the site working, remember your form progress, measure page performance, and attribute advertising results. You can block or delete cookies through your browser settings, and you can manage advertising preferences through your Facebook and Google account settings. Blocking cookies may stop some parts of our pages from working properly.

7. How Long We Keep It

• Inquiry and lead records — kept while there is an active interest and for a reasonable period afterward, then deleted or anonymized.
• Client and project records — kept for the duration of the engagement and for as long as needed to answer disputes, warranty questions, or legal claims.
• Financial and tax records — kept for the retention period required by Philippine tax and accounting rules.
• Account credentials you shared — removed from our working systems after turnover; you are responsible for changing passwords upon handover.

8. How We Protect It

We apply organizational, physical, and technical measures appropriate to the size of our operation: access limited to personnel who need it, password-protected and where available multi-factor-secured accounts, encrypted connections on our pages and forms, secure storage of client files, prompt removal of access when it is no longer required, and confidentiality obligations on everyone who works on your project. No system is completely secure, but we take reasonable steps to protect your information and where a breach occurs that the law requires us to report, we notify the National Privacy Commission and the affected individuals within seventy-two (72) hours of knowledge of the breach, as required by RA 10173 and its Implementing Rules.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the right to:

1. Be informed that your personal information is being collected and processed, and for what purpose.
2. Access the personal information we hold about you and receive a copy of it.
3. Object to processing, including direct marketing and profiling, and to withdraw consent at any time.
4. Rectify information that is inaccurate, outdated, or incomplete.
5. Erasure or blocking of your information where it is unlawfully obtained, no longer necessary, or where you have withdrawn consent, subject to records we are required to keep.
6. Data portability — to obtain your information in a commonly used electronic format.
7. Damages — to be indemnified for damage caused by inaccurate, incomplete, unlawfully obtained, or unauthorized use of your information.
8. File a complaint with the National Privacy Commission.

To exercise any of these rights, contact us using the details in Section 12. We respond within a reasonable period and may ask you to verify your identity before acting on the request.

10. Marketing Messages

If you gave your details to receive our training, updates, or offers, we may contact you by email, SMS, call, or messaging apps. Every marketing email carries an unsubscribe option, and you can ask us to stop at any time by replying to any message or contacting us directly. Withdrawing marketing consent does not affect messages we need to send about a service you have already purchased.

11. Children and Third-Party Links

Our services are directed at business owners and professionals. We do not knowingly collect personal information from anyone under eighteen (18) years of age; if we learn that we have, we delete it. Our pages may link to third-party websites and platforms that operate under their own privacy policies. We are not responsible for their practices, and we encourage you to read their policies before submitting information to them.

12. Contact Us

The Agency has designated a data protection contact responsible for privacy matters, reachable through the details below. Send any question, request, or complaint about this Policy or your personal information there, marked for the attention of the Data Protection Officer:

If you are not satisfied with our response, you may bring the matter to the National Privacy Commission of the Philippines, which accepts complaints from data subjects under RA 10173.

We may update this Privacy Policy as our services, tools, or legal obligations change. The version published on bossdoneforyou.com at the time you submit your information is the version that applies to you. By submitting your details through our forms, chatbot, or checkout pages, you confirm that you have read and understood this Policy.

Chatbot and FB Ads Digital Advertising Services · BOSS Advertising Agency · JEM Digital Advertising Agency