Privacy Policy

1. Who is responsible for your data

The personal information controller for this Site is

Vivian Dolor
Independent creator, Puerto Princesa City, Palawan, Philippines
Email us at fernandoviviandolor@gmail.com
Online at iamvivi.com

This is also the contact for all privacy concerns. As an independent creator, Vivian Dolor acts as the point of contact for data protection matters. If a Data Protection Officer is later appointed, we will update this page.

2. The laws we follow

In the Philippines, the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).
In the EU, EEA and UK, the General Data Protection Regulation (GDPR) and the UK GDPR, for visitors located there.
In California, USA, the California Consumer Privacy Act (CCPA/CPRA), to the extent it applies.

We process your data under the principles of transparency, legitimate purpose, and proportionality.

3. What we collect, why, and on what basis

What	When	Why	Lawful basis (RA 10173 / GDPR)
Name, email, company, message, budget range, links you provide	You submit the brand-inquiry form	To reply, assess the collaboration, and prepare a proposal	Consent; steps taken at your request before a contract (Art. 6(1)(b) GDPR); legitimate interest in running a creator business
Email address (and first name if you give it)	You join the newsletter	To send you the newsletter you asked for	Consent (you can withdraw at any time)
Email thread history	You correspond with us	To manage the relationship and keep records	Legitimate interest; contract
Shortened IP network prefix	You submit a form	To limit automated abuse. The complete IP address is not stored in the inquiry record	Legitimate interest in keeping the Site secure
Affiliate click data (which link you clicked, timestamp, order reference where the program shares it)	You click an affiliate link	To attribute commissions	Legitimate interest; the affiliate network's own policy governs their processing
Partnership records such as the contract, invoices, payment details, and tax IDs	We work together on a paid partnership	To deliver the work, invoice, and meet tax and accounting rules	Contract; legal obligation

We do not knowingly collect sensitive personal information (health, religion, government ID numbers, and similar) through the Site. Please do not send it through the inquiry form.

4. Cookies and analytics

The Site does not currently use analytics, advertising trackers, cookies, embedded third-party content, or browser storage. Ordinary links to other sites do not load those sites until you choose them. If this changes, we will update this policy and request consent where the law requires it.

5. Embedded third-party content

Today the Site links out to TikTok and Instagram and embeds nothing. If we add embedded posts or videos from TikTok, Instagram, Facebook, or YouTube, the following applies. When a page with an embed loads, your browser connects directly to that platform. The platform may set cookies, read existing ones, and collect your IP address and browsing behaviour, even if you do not have an account there. We do not control this processing. Their own policies apply.

TikTok at www.tiktok.com/legal/privacy-policy
Instagram and Facebook (Meta) at privacycenter.instagram.com/policy and www.facebook.com/privacy/policy
YouTube (Google) at policies.google.com/privacy

Where possible we use privacy-enhanced embeds (for example YouTube's no-cookie mode) or load embeds only after you click.

6. Affiliate links and disclosure

Some links are affiliate links, including TikTok Shop and Amazon-style programs. If you click one and make a purchase, we may earn a commission at no extra cost to you. The affiliate network places a tracking cookie to attribute the sale. We receive aggregated reports, not your personal purchase details unless the program shares an order reference.

Disclosure. We mark affiliate links and sponsored content clearly ("affiliate link", "#ad", "paid partnership", or similar). We follow the US FTC Endorsement Guides (16 CFR Part 255), the Philippine Department of Trade and Industry's rules on fair advertising, and the Ad Standards Council (ASC) guidelines on influencer marketing. Sponsorship never changes our honest opinion.

You join the newsletter by entering your email and confirming through the link we send (double opt-in where our provider supports it). We use a standard email newsletter service; until one is connected, sign-ups arrive by email and Vivian keeps the list by hand to send it. Each email includes an unsubscribe link. You can also email us to be removed. We may see whether an email was opened or a link clicked; this helps us improve the newsletter. You can opt out of this tracking by unsubscribing or by disabling images in your email client.

We do not send marketing to anyone who did not sign up. We do not add brand-inquiry contacts to the newsletter without a separate opt-in.

We do not sell or rent your personal data. We share it only with

Service providers that host the Site, send email, store files, or process payments (for example hosting, form, newsletter, cloud storage, and payment platforms). They act on our instructions under contract.
Affiliate networks and social platforms, as described above, which process data under their own policies.
Professional advisers (accountant, lawyer) when needed.
Authorities, if the law requires it or to protect our rights.
A brand partner, only for data you gave us in the context of that partnership (for example your own contact details).

9. International transfers

We are based in the Philippines. Our service providers may store data in the United States, the EU, Singapore, or elsewhere. Where we transfer data of EU/UK visitors outside those regions, we rely on adequacy decisions or standard contractual clauses (or the UK equivalent). Under RA 10173, we stay accountable for personal data we transfer to third parties.

10. How long we keep data

Data	Retention
Brand-inquiry records stored by the Site	Automatically deleted from Site storage after 24 months. Related email correspondence may be kept from the last contact as needed to answer the inquiry
Partnership contracts, invoices, and payment records	10 years, as required by Philippine tax and accounting rules (BIR)
Newsletter subscription	Until you unsubscribe; suppression record kept so we do not email you again
Abuse-prevention counters	Automatically deleted after 10 minutes
Hosting-provider security logs	Controlled by the hosting provider under its published retention settings

When data is no longer needed we delete it or anonymise it.

11. Your rights

Under the Philippine Data Privacy Act (RA 10173)

You have the right to

be informed that your data is being collected and processed;
access the personal data we hold about you;
object to processing, including for direct marketing or profiling;
erasure or blocking of data that is incomplete, outdated, false, unlawfully obtained, or no longer necessary;
rectify inaccurate or incomplete data;
data portability, meaning a copy in a commonly used electronic format;
damages for a violation of your rights;
file a complaint with the National Privacy Commission (privacy.gov.ph).

Under the GDPR / UK GDPR (EU, EEA, and UK visitors)

You also have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time without affecting earlier processing. You may lodge a complaint with your local supervisory authority (for the UK, the Information Commissioner's Office).

Under the CCPA/CPRA (California residents)

You have the right to know what personal information we collect, to delete it, to correct it, and to opt out of "sale" or "sharing". We do not sell your personal information. Third-party cookies from embeds and affiliate networks may count as "sharing" for cross-context advertising under California law; you can opt out through your browser settings or a Global Privacy Control signal. We will not discriminate against you for exercising your rights.

How to exercise your rights

Email fernandoviviandolor@gmail.com with the subject line "Privacy request". We may ask you to confirm your identity. We respond within 15 working days for Philippine requests (per NPC guidance) and within one month for GDPR requests, extendable where the law allows. There is no fee unless a request is clearly excessive.

12. Security

We use reasonable organisational, physical, and technical measures to protect your data. These include HTTPS on the Site, password-protected and two-factor-secured accounts, limited access, and reputable providers. No system is perfectly secure. If a breach affects your data and is likely to cause serious harm, we will notify the NPC within 72 hours and inform you, as RA 10173 requires.

13. Children

The Site is not aimed at children. We do not knowingly collect personal data from anyone under 18 (the age of majority in the Philippines) without parental consent. The same applies to anyone under 16 in the EU/UK or under 13 in the USA where parental consent would be needed. If you believe a child has given us personal data, email us and we will delete it.

This page was drafted for Vivian Dolor and is not legal advice. A Philippine lawyer should review it before you rely on it.