Legal
Privacy Policy
Effective: June 2026
1. Introduction
Wonderweb Inc. ("Wonderweb", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, engage our services, or interact with WonderCard business profiles.
This policy is designed to comply with the EU General Data Protection Regulation (GDPR), the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), and the regulations of the National Privacy Commission (NPC) of the Philippines.
2. Data Controller
Wonderweb Inc., 2nd Floor Building C, Metrowalk Commercial Complex, Meralco Avenue, Pasig, Philippines (TIN: 621 729 253 00000), is the data controller for personal data processed through our Philippine operations.
For EU clients, our Czech entity acts as joint controller for Eurozone invoicing and EU-facing engagements. Data processing agreements (DPAs) and Standard Contractual Clauses (SCCs) are available upon request.
3. Information We Collect
We collect the following categories of personal data:
- Contact details (name, email address, phone number, company).
- Project briefs and communications you submit through forms or email.
- Billing details for invoicing (company name, address, VAT/TIN).
- Technical data (IP address, browser type, device, pages visited).
- Cookies and analytics data (see Section 10).
4. Legal Bases for Processing
We process personal data under one or more of the following GDPR Art. 6 legal bases:
- Performance of a contract (delivering services you've engaged us for).
- Legitimate interests (running and improving our business).
- Legal obligation (tax, accounting, regulatory requirements).
- Your consent (newsletter sign-ups, optional analytics).
Under the Philippine DPA, processing is conducted lawfully and fairly, with consent or under other lawful criteria recognized by Section 12 of the Act.
5. How We Use Your Data
We use personal data to:
- Respond to enquiries and provide quotes.
- Deliver, support, and maintain engaged services.
- Issue invoices and comply with tax obligations.
- Improve our website, products, and client experience.
- Send service updates and, with consent, occasional newsletters.
6. Sharing and Subprocessors
We share personal data only with vetted subprocessors who support our operations, including cloud hosting (Cloudflare), email delivery, payment processing, and accounting providers. A current list of subprocessors is available upon request.
We do not sell personal data, and we do not share data for advertising purposes.
7. International Transfers
Where personal data is transferred outside the European Economic Area or the Philippines, we rely on Standard Contractual Clauses (SCCs), adequacy decisions, or equivalent safeguards recognized by applicable law.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Contractual records are typically retained for ten (10) years to satisfy Philippine and EU tax obligations.
9. Your Rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion ("right to be forgotten") where applicable.
- Object to or restrict certain processing activities.
- Withdraw consent at any time, without affecting prior lawful processing.
- Lodge a complaint with a supervisory authority (EU DPA or the NPC of the Philippines).
To exercise any of these rights, contact us at hello@wonderweb.site.
10. Cookies
We use a minimal set of first-party cookies for session continuity and anonymous analytics. We do not set advertising or cross-site tracking cookies. You can manage cookie preferences in your browser settings.
11. Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, including encryption in transit, access controls, and regular review of our security posture.
12. Children
Our services are intended for businesses and adults. We do not knowingly collect personal data from children under 16.
13. Updates to this Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised effective date.
14. Contact
Wonderweb Inc. — 2nd Floor Building C, Metrowalk Commercial Complex, Meralco Avenue, Pasig, Philippines.
Email: hello@wonderweb.site