Skip to content

Privacy policy

Your data, plainly.

Last updated

This policy explains what personal data Kristian Bansil collects through kristianbansil.com, why, who it is shared with, how long it is kept and the rights you have. It applies to visitors and clients worldwide; where the law differs, the Philippine Data Privacy Act of 2012 (RA 10173) and, for visitors in the UK and EU, the UK GDPR and EU GDPR apply.

Who is responsible for your data

Kristian Bansil is a freelance web developer based in the Philippines and is the personal information controller for data collected through this website. For anything about your data, email [email protected].

What I collect and why

  • Enquiries and quote requests. Your name, email, company (optional), message, budget and any quote you build with Sidekick. I use them to reply, prepare a proposal and keep a record of our conversation. The basis is taking steps at your request before a contract, and my legitimate interest in responding to enquiries.
  • Checklist sign-ups. Your email, first name (optional), the page you signed up on and whether you asked for occasional tips. I use them to send you the checklist and, only if you ticked the box, occasional practical tips. Tips are based on your consent, which you can withdraw at any time.
  • Sidekick and the AI Lab. The messages and briefs you type are sent to an AI provider to generate a reply, together with a pseudonymous identifier (a salted hash, not your name or IP address) that helps the provider detect abuse. Please don't enter sensitive personal information. Your Sidekick quote and chat are saved in your own browser so they are still there when you return; they are not stored on my server unless you send them to me.
  • Security and abuse prevention. To stop spam and abuse, the site processes your IP address. It is stored only as a salted hash alongside request counters that expire within 24 hours. Forms are protected by Cloudflare Turnstile, which checks that a person, not a bot, is using them. The basis is my legitimate interest in keeping the site secure.
  • Country, for prices. The site reads your country (from Cloudflare) to show local or international prices. It is not stored.
  • Server and network logs. My hosting and network providers process technical data such as your IP address, browser and the pages you request, to deliver and protect the site. They keep these logs for a short period.
  • Cookies and browser storage. Only essential storage is used, and there are no analytics or advertising cookies. Details are in the cookie policy.

Who receives your data

I don't sell your personal data or share it for advertising. It is processed by these service providers, only to run the site and reply to you:

  • Laravel Cloud: website hosting (servers in Singapore)
  • Cloudflare: domain, network security and Turnstile bot protection
  • Upstash: database for checklist sign-ups and security counters (Singapore)
  • Apple (iCloud Mail): sending and receiving email
  • OpenAI and Anthropic: AI replies in Sidekick and the AI Lab
  • An enquiry management tool that receives a copy of each enquiry so I can track and follow it up

International transfers

Some of these providers store or process data outside your country, including in Singapore and the United States. Where data leaves the Philippines, the UK or the EU, I rely on providers that commit to appropriate safeguards, such as contractual data protection terms.

How long I keep it

  • Enquiries and quote requests: up to 2 years after our last contact. If you become a client, project and billing records are kept for as long as tax and contract law requires.
  • Checklist sign-ups: until you unsubscribe or ask me to delete them.
  • Security counters: no more than 24 hours.
  • Your Sidekick quote and chat: in your browser until you clear it or press Reset.
  • Data held by AI and other providers: according to their own retention policies.

Your rights

Under the Philippine Data Privacy Act you have the right to be informed, to access your data, to object, to have it corrected, blocked or erased, to data portability and to claim damages. You can complain to the National Privacy Commission of the Philippines.

If you are in the UK or EU, you also have the rights to access, rectify, erase or restrict your data, to object to processing, to data portability, and to withdraw consent at any time. You can complain to the Information Commissioner's Office (UK) or your local data protection authority.

To use any of these rights, email [email protected]. I'll reply within 30 days. To stop receiving tips, reply "unsubscribe" to any email.

How I protect it

The site is served only over HTTPS, forms are protected against bots and abuse, IP addresses are stored only as salted hashes, access to accounts is restricted, and I use reputable providers. No system is perfectly secure, but I take reasonable measures to protect your data.

Children

This website is meant for businesses and adults. It isn't directed at children under 16, and I don't knowingly collect their data.

Changes to this policy

I'll update this page when the way I handle data changes, and change the date at the top.