PRIVACY POLICY
Company: Weteon Website: https://weteon.com Effective Date: June 13, 2026 Last Updated: June 13, 2026
TABLE OF CONTENTS
- Introduction
- Who We Are
- Scope of This Policy
- Definitions
- Information We Collect
- How We Use Your Information
- Legal Bases for Processing
- Cookies and Tracking Technologies
- Third-Party Services and Disclosures
- International Data Transfers
- Data Retention
- Data Security
- Your Rights
- California Residents — CCPA Rights
- Philippine Data Subjects — RA 10173 Rights
- Children's Privacy
- Changes to This Privacy Policy
- Contact and Complaints
1. Introduction
Weteon ("we," "us," "our," or "the Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data obtained through our website at https://weteon.com (the "Website") and in the course of providing our services.
This Policy is designed to comply with the following applicable laws and regulations:
- Republic Act No. 10173 — Data Privacy Act of 2012 (Philippines) and its Implementing Rules and Regulations
- Regulation (EU) 2016/679 — General Data Protection Regulation (GDPR)
- UK General Data Protection Regulation (UK GDPR) as retained in UK law by the European Union (Withdrawal) Act 2018
- California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA)
Where the laws of different jurisdictions apply simultaneously, we apply the highest applicable standard of protection.
By accessing our Website or engaging our services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Website immediately.
2. Who We Are
Data Controller / Personal Information Controller:
Weteon New San Roque, Pili, Camariner Sur. 4418. Philippines Email: info@weteon.com Website: https://weteon.com
For the purposes of the GDPR and UK GDPR, Weteon acts as the Data Controller with respect to personal data collected through the Website. For the purposes of the Philippine Data Privacy Act of 2012, Weteon acts as the Personal Information Controller (PIC).
Data Protection Officer (DPO) / Privacy Officer:
We have designated a Privacy Officer to oversee compliance with applicable data protection laws. You may contact our Privacy Officer at: info@weteon.com
3. Scope of This Policy
This Privacy Policy applies to:
- All visitors to https://weteon.com
- Prospective clients who submit inquiry, contact, or lead generation forms
- Newsletter and marketing communication subscribers
- Existing and past clients whose personal data we process in connection with service delivery
- Any individual whose personal information is shared with us in the course of a business relationship
This Policy does not apply to third-party websites, applications, or services linked from our Website. We are not responsible for the privacy practices of such third parties.
4. Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
- "Personal Data" / "Personal Information": Any information relating to an identified or identifiable natural person, including but not limited to name, email address, IP address, and usage data.
- "Processing": Any operation performed on personal data, including collection, recording, storage, use, disclosure, and deletion.
- "Data Subject" / "Data Subject": The natural person to whom the personal data relates.
- "Sensitive Personal Information": Personal data about an individual's race, ethnic origin, marital status, age, color, religious or political affiliations, health, education, genetic or sexual life, criminal proceedings, or government-issued identification numbers.
- "Consent": A freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
- "Third Party": Any person or entity other than the data subject, the Company, and persons authorized by the Company to process personal data.
5. Information We Collect
5.1 Information You Provide Directly
We collect personal information that you voluntarily provide when you:
- Complete contact, inquiry, or lead generation forms on our Website
- Subscribe to our newsletter or email marketing communications
- Communicate with us via email, phone, or other channels
- Enter into a service agreement or contractual relationship with us
Categories of information collected include:
| Category | Examples |
|---|---|
| Identification Data | Full name, username |
| Contact Data | Email address, phone number, mailing address |
| Professional Data | Company name, job title, industry |
| Project Data | Project description, budget range, timeline, technical requirements |
| Communication Data | Content of messages, emails, and correspondence |
| Financial Data | Billing name, billing address (payment is processed offline; we do not collect payment card data through our Website) |
5.2 Information Collected Automatically
When you visit our Website, we automatically collect certain technical information, including:
- Device and Browser Data: IP address, browser type and version, operating system, device type, screen resolution
- Usage Data: Pages visited, time and date of visit, time spent on pages, links clicked, referral URLs, exit pages
- Analytics Data: Behavioral data collected by Google Analytics, including session duration, user flow, and conversion events
- Advertising Data: Interaction data collected by Meta/Facebook Pixel for advertising measurement and audience building
5.3 Information from Third-Party Sources
We may receive information about you from third parties, including:
- Social media platforms (e.g., if you interact with our ads on Meta/Facebook)
- Referral sources where a third party recommends our services
- Public business directories for B2B prospecting
We will inform you when we receive such data and obtain your consent where required by applicable law.
6. How We Use Your Information
We use your personal data for the following purposes:
6.1 Service Delivery and Contract Performance
- Responding to inquiries and project requests
- Providing website development, design, software development, SEO, maintenance, and AI automation services
- Managing client accounts and project communications
- Generating and sending invoices and project deliverables
6.2 Marketing and Communications
- Sending newsletters and updates about our services (with your consent)
- Running targeted advertising campaigns via Meta/Facebook Pixel and Google platforms
- Analyzing the effectiveness of our marketing campaigns
6.3 Website Operation and Improvement
- Monitoring and improving Website performance and user experience
- Conducting analytics to understand user behavior and optimize content
- Detecting, preventing, and resolving technical issues and security threats
6.4 Legal and Compliance Obligations
- Complying with applicable laws, regulations, and regulatory requests
- Establishing, exercising, or defending legal claims
- Maintaining records required by law (e.g., accounting and tax records)
6.5 Legitimate Business Interests
- Conducting business development and client relationship management
- Protecting the security and integrity of our systems
- Preventing fraud and abuse of our services
We will not use your personal data for purposes incompatible with those described in this Policy without obtaining your prior consent.
7. Legal Bases for Processing
We process personal data only where we have a valid legal basis to do so. The applicable legal bases are:
| Processing Activity | Legal Basis (GDPR/UK GDPR) | Legal Basis (DPA 2012) |
|---|---|---|
| Responding to inquiries | Legitimate interests / Pre-contractual steps | Legitimate interests |
| Service delivery | Performance of contract | Fulfillment of contract |
| Invoice and financial records | Legal obligation | Compliance with legal obligation |
| Newsletter and marketing emails | Consent | Consent |
| Google Analytics / Meta Pixel | Legitimate interests / Consent | Legitimate interests / Consent |
| Legal claims and compliance | Legal obligation / Vital interests | Compliance with legal obligation |
Where we rely on legitimate interests as our legal basis, we have conducted a balancing test and determined that our interests do not override your rights and freedoms. You may request a copy of our legitimate interests assessment by contacting us at info@weteon.com.
Where we rely on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to such withdrawal.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies on our Website. Please refer to our Cookie Policy at https://weteon.com/cookie-policy for full details on:
- The types of cookies we use (essential, analytics, marketing)
- The specific cookies set by third-party services
- How to manage and withdraw your consent to non-essential cookies
By continuing to use our Website after being presented with our cookie consent notice, you consent to our use of non-essential cookies in accordance with our Cookie Policy.
9. Third-Party Services and Disclosures
9.1 Service Providers (Data Processors)
We engage the following third-party service providers who may process your personal data on our behalf:
| Service Provider | Purpose | Privacy Policy |
|---|---|---|
| Google LLC | Analytics (Google Analytics), search performance (Google Search Console), advertising | https://policies.google.com/privacy |
| Meta Platforms, Inc. | Advertising measurement and audience targeting (Meta/Facebook Pixel) | https://www.facebook.com/privacy/policy |
| Email Marketing Provider | Sending newsletters and marketing emails (to be disclosed when a provider is selected) | To be updated |
| Web Hosting Provider | Website hosting and infrastructure | To be disclosed |
All third-party processors are contractually bound to:
- Process personal data only on our documented instructions
- Implement appropriate technical and organizational security measures
- Not sub-process without our prior authorization
- Delete or return personal data upon termination of services
9.2 Disclosures to Third Parties
We do not sell your personal data. We may disclose your personal data to:
- Professional advisors: lawyers, accountants, and auditors under duties of confidentiality
- Law enforcement and regulatory authorities: where required by applicable law or legal process
- Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, subject to confidentiality obligations
- With your consent: to any other third party where you have provided explicit consent
9.3 Google Analytics
Our Website uses Google Analytics 4 (GA4), a web analytics service provided by Google LLC. Google Analytics collects information about your use of the Website through cookies and sends this information to Google servers, which may be located in the United States. We have enabled IP anonymization to reduce the identifiability of collected data. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
9.4 Meta/Facebook Pixel
We use the Meta Pixel on our Website. This technology allows Meta Platforms, Inc. to deliver targeted advertising to you on Facebook and Instagram. The Meta Pixel may collect data about your browsing behavior on our Website and match it with your Facebook profile. You may opt out of Meta's targeted advertising through your Facebook Ad Preferences.
10. International Data Transfers
Weteon is based in the Philippines. When you access our Website or submit information, your personal data may be transferred to and stored in countries outside your country of residence, including the United States, the European Union, and other countries where our service providers operate.
Where such transfers involve personal data of EU/UK residents, we ensure that appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- UK International Data Transfer Agreements (IDTAs) for UK data
- Transfers to countries with adequate data protection as determined by the European Commission or UK Secretary of State
For transfers involving data of Philippine residents, we comply with the cross-border data flow requirements under Section 21 of the Data Privacy Act of 2012 and NPC Advisory Opinion No. 2017-049.
You may obtain a copy of the applicable transfer mechanisms by contacting us at info@weteon.com.
11. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law.
| Data Category | Retention Period | Basis |
|---|---|---|
| Client project files and communications | 7 years after project completion | Tax, legal, and regulatory obligations |
| Invoice and financial records | 10 years | Philippine accounting and tax law; BIR requirements |
| Contact and inquiry form submissions | 2 years from submission | Legitimate business interests |
| Newsletter subscription data | Until unsubscription + 30 days | Consent |
| Website analytics data | 26 months (GA4 default) | Legitimate interests |
| Legal dispute-related data | Until final resolution + applicable limitation period | Legal obligation |
| Security and access logs | 12 months | Security and fraud prevention |
When personal data is no longer required, we securely delete or anonymize it in a manner that makes re-identification impossible.
12. Data Security
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
- Encryption: Data in transit is protected using Transport Layer Security (TLS/HTTPS); sensitive data at rest is encrypted
- Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis
- Secure Development: Our software development follows secure coding practices and OWASP guidelines
- Vendor Assessment: Third-party processors are assessed for data security compliance before engagement
- Incident Response: We maintain a data breach response procedure in accordance with applicable notification requirements
Data Breach Notification: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. We will also notify affected data subjects where the breach is likely to result in a high risk to their rights, in accordance with:
- Article 33 and 34 of the GDPR / UK GDPR
- Section 38 of the Philippine DPA IRR and NPC Circular No. 16-03
Despite our security measures, no transmission over the internet or electronic storage method is 100% secure. We cannot guarantee absolute security of your data.
13. Your Rights
13.1 Rights Under GDPR and UK GDPR
If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights:
- Right of Access (Article 15 GDPR): The right to obtain confirmation that we process your data and to receive a copy of that data.
- Right to Rectification (Article 16 GDPR): The right to have inaccurate or incomplete personal data corrected.
- Right to Erasure / "Right to be Forgotten" (Article 17 GDPR): The right to request deletion of your personal data where it is no longer necessary, where you withdraw consent, or where processing is unlawful.
- Right to Restriction of Processing (Article 18 GDPR): The right to limit how we use your data in certain circumstances.
- Right to Data Portability (Article 20 GDPR): The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
- Right to Object (Article 21 GDPR): The right to object to processing based on legitimate interests or for direct marketing purposes.
- Rights Related to Automated Decision-Making (Article 22 GDPR): The right not to be subject to purely automated decisions that produce legal or similarly significant effects.
- Right to Withdraw Consent: Where processing is based on consent, the right to withdraw consent at any time without detriment.
Supervisory Authority: EEA residents have the right to lodge a complaint with their national data protection authority. UK residents may lodge a complaint with the Information Commissioner's Office (ICO).
13.2 How to Exercise Your Rights
To exercise any of the above rights, please submit a written request to:
Email: info@weteon.com Subject line: "Data Subject Rights Request"
We will respond to your request within 30 days of receipt. We may need to verify your identity before processing your request. In complex cases, we may extend this period by a further two months and will notify you accordingly.
We will not charge a fee for responding to requests unless they are manifestly unfounded or excessive.
14. California Residents — CCPA Rights
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, grants you the following rights:
14.1 Right to Know
You have the right to request that we disclose:
- The categories and specific pieces of personal information we have collected about you
- The categories of sources from which personal information was collected
- The business or commercial purpose for collecting personal information
- The categories of third parties with whom we share personal information
14.2 Right to Delete
You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
14.3 Right to Correct
You have the right to request correction of inaccurate personal information.
14.4 Right to Opt Out of Sale or Sharing
We do not sell your personal information as defined under the CCPA. We do not share personal information for cross-context behavioral advertising. If this changes, we will update this Policy and provide a "Do Not Sell or Share My Personal Information" link.
14.5 Right to Non-Discrimination
We will not discriminate against you for exercising any CCPA rights. You will not receive a different quality or price of services as a result of exercising your rights.
14.6 Categories of Personal Information Collected (CCPA)
| CCPA Category | Collected | Examples |
|---|---|---|
| Identifiers | Yes | Name, email, IP address |
| Personal information categories (Cal. Civ. Code § 1798.80(e)) | Yes | Name, address, phone |
| Commercial information | Yes | Service history |
| Internet/electronic network activity | Yes | Browsing data, analytics |
| Geolocation data | Limited | Approximate IP-based location |
| Professional/employment information | Yes (B2B) | Job title, company |
| Sensitive personal information | No | Not collected |
14.7 How to Submit a CCPA Request
To submit a verifiable consumer request: Email: info@weteon.com with the subject line "CCPA Rights Request." We will respond within 45 days (extendable by a further 45 days with notice).
15. Philippine Data Subjects — RA 10173 Rights
If you are a data subject in the Philippines, Republic Act No. 10173 (Data Privacy Act of 2012) grants you the following rights:
- Right to be Informed: The right to be informed about the collection and processing of your personal data before it is collected.
- Right to Access: The right to access your personal data that we hold and to know the scope and manner of processing.
- Right to Correct: The right to dispute and have corrected inaccurate, incomplete, outdated, false, or unlawfully obtained personal data.
- Right to Erasure / Blocking: The right to suspend, withdraw, or order the blocking, removal, or destruction of personal data where it is incomplete, outdated, false, unlawfully obtained, or no longer necessary.
- Right to Object: The right to object to the processing of your personal data, including for direct marketing purposes and profiling.
- Right to Data Portability: The right to obtain a copy of your personal data in a structured, commonly used, and machine-readable format.
- Right to Damages: The right to be indemnified for any damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data.
- Right to File a Complaint: The right to file a complaint with the National Privacy Commission (NPC) at https://www.privacy.gov.ph/.
To exercise these rights, please contact: info@weteon.com
16. Children's Privacy
Our Website and services are not directed to children under the age of 18 years (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal data from minors.
If you are a parent or guardian and believe we have collected personal data from a child, please contact us immediately at info@weteon.com. We will take prompt steps to delete such information from our records.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last Updated" date at the top of this Policy
- Post a notice on our Website
- Where required by law, notify affected data subjects directly
We encourage you to review this Policy periodically. Your continued use of the Website after any changes constitutes your acceptance of the updated Policy.
Previous versions of this Privacy Policy are available upon request by contacting info@weteon.com.
18. Contact and Complaints
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:
Weteon — Privacy / Legal Email: info@weteon.com Website: https://weteon.com Address: [REGISTERED ADDRESS, PHILIPPINES]
We aim to resolve all privacy concerns promptly and in good faith. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority:
- Philippines: National Privacy Commission — https://www.privacy.gov.ph/
- European Union: Your local national data protection authority
- United Kingdom: Information Commissioner's Office (ICO) — https://ico.org.uk/
- California, USA: California Privacy Protection Agency (CPPA) — https://cppa.ca.gov/
This Privacy Policy was prepared for informational purposes and constitutes a legally binding document between Weteon and its Website visitors and clients. Weteon reserves the right to amend this Policy at any time in accordance with applicable law.