About This Policy
The Elevate Works respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit our website, contact us, request a proposal, engage our services or otherwise interact with us.
The Elevate Works is operated by JJ Pama and is based in Roxas City, Philippines. We work with clients worldwide. Our primary privacy framework is Republic Act No. 10173, the Philippine Data Privacy Act of 2012, its implementing rules and relevant issuances of the National Privacy Commission. We also comply with privacy and data protection laws in other locations where they apply to our activities.
In this policy, "personal information" includes information that identifies, relates to, describes or could reasonably be linked with an individual. It also includes "personal data" where that term is used under applicable privacy law.
Business operator: JJ Pama, operating as The Elevate Works
Business location: Roxas City, Philippines
Website: https://www.theelevate.works
Information We Collect
Depending on how you interact with us, we may collect the following categories of information:
• Contact and identity information, such as your name, business name, role, email address, phone number, mailing address and social media details.
• Contact and project information, such as your goals, budget, brief, brand assets, website details, account information, feedback and communications with us.
• Commercial and transaction information, such as proposals, contracts, invoices, payment status and purchased services. Payment card or bank details may be handled directly by a payment provider, and we do not intentionally retain full payment card details.
• Website and device information, such as IP address, browser type, device identifiers, operating system, referring pages, pages viewed, approximate location, session data and cookie identifiers.
• Marketing information, such as newsletter preferences, campaign interactions and records of consent or opt-out requests.
• Client-provided information, including personal information contained in content, customer lists, advertising audiences, account access or other materials supplied so we can provide services.
We do not ask you to provide sensitive personal information unless it is genuinely necessary for an agreed purpose. Please do not send sensitive information through a general website form or ordinary email unless we have specifically asked for it and an appropriate method has been arranged.
How We Collect Information
We may collect personal information:
• directly from you through website forms, email, phone, video meetings, messaging services such as WhatsApp, proposals, contracts and project communications;
• automatically through cookies, server logs, analytics tools, advertising pixels and similar technologies;
• from a person or business that refers you to us or engages us to work with you;
• from service providers and platforms used to operate our business; and
• from publicly available business websites, professional profiles and social media pages where lawful and relevant.
Why We Use Personal Information
We may use personal information to:
• respond to requests, prepare proposals and communicate with you;
• enter into, manage and perform contracts and client projects;
• provide social media, advertising, content, design, website, analytics and related digital services;
• process invoices, payments and business records;
• operate, secure, maintain and improve our website, systems and services;
• measure website use and campaign performance;
• send service updates and, where permitted, marketing communications;
• prevent fraud, misuse, security incidents and unlawful activity
• protect our rights and the rights of clients, users and third parties; and
• comply with legal, regulatory, tax, accounting and dispute-resolution obligations.
We process personal information only where there is a lawful and legitimate purpose. Depending on the circumstances, we rely on consent, performance of a contract, steps taken at your request before entering a contract, compliance with a legal obligation, protection of lawful rights and interests, or legitimate interests that do not override your fundamental rights.
Client-Controlled Information
When a client gives us personal information to process on the client's behalf, the client generally decides why and how that information is used. In that situation, the client generally acts as the personal information controller or data controller, and we act as a personal information processor, service provider, contractor or data processor to the extent required by the applicable agreement and law. We use the information only to provide the agreed services, follow lawful documented instructions, protect the services and meet legal obligations. Requests about information controlled by one of our clients should normally be directed to that client first.
Cookies, Analytics and Advertising Technologies
Our website may use cookies and similar technologies. These may include:
• essential technologies needed for security, forms, site functions and user preferences;
• analytics technologies that help us understand website traffic and performance;
• functional technologies that remember choices or support embedded content; and
• advertising technologies that measure campaigns or support interest-based advertising.
Where required, non-essential technologies will be used only after you have made an available consent choice. You can also manage cookies through your browser. Blocking some cookies may affect website functions.
Some privacy laws treat certain advertising or analytics disclosures as a sale, sharing or targeted advertising even when no money is exchanged. We do not sell personal information for money. Where applicable law gives you an opt-out right, we will provide a method to exercise it and will process legally required opt-out preference signals.
Automation and AI-Assisted Tools
We may use automation or AI-assisted tools to support activities such as drafting, design, analysis, research, administration and quality review. We use these tools under appropriate instructions and controls. We do not use website visitor information to make decisions that have a legal or similarly significant effect on an individual. If this practice changes, we will update this policy and provide any notice or choice required by law.
When We Disclose Information
We may disclose personal information to the following categories of recipients where reasonably necessary:
• website hosting, domain, security and technical support providers;
• email, messaging, video meeting, customer relationship, project management and cloud storage providers;
• analytics, advertising and social media platforms;
• payment, bookkeeping, accounting and professional advisory providers;
• contractors and collaborators who help deliver services and are subject to appropriate confidentiality or data-handling obligations;
• a buyer, successor or professional consultant in connection with a proposed or completed business transaction; and
• courts, regulators, law enforcement or other parties where required by law or reasonably necessary to protect rights, safety and security.
We do not disclose personal information to third parties for their own unrelated marketing unless you have consented or the disclosure is otherwise permitted by law.
International Data Handling
We are based in the Philippines, work with clients worldwide and use providers that may store or process information in other countries. Likely processing locations include the Philippines, Australia and the United States, as well as countries where a client or relevant service provider operates. Privacy and data protection laws in those locations may differ from the laws where you live.
Where required, we use contractual or other reasonable measures intended to provide an appropriate and comparable level of protection for international transfers or disclosures. The specific locations and providers involved may depend on the project and services used.
Data Retention
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain business and tax records, resolve disputes, enforce agreements, meet legal obligations and manage security. Retention periods depend on the type of information, the relationship, contractual commitments, legal requirements and risk. When information is no longer required, we take reasonable steps to delete, destroy or de-identify it, unless the law requires or permits continued retention.
Data Security
We use reasonable administrative, technical and operational safeguards designed to protect personal information against loss, misuse, interference, access without permission, modification or disclosure. These measures may include access controls, strong authentication, secure providers, backups, updates and staff or contractor confidentiality requirements. No website, transmission or storage system can be guaranteed to be completely secure. If you believe your information may be at risk, contact us promptly.
Your Privacy Rights
Depending on where you live and which law applies, you may have rights to:
• request access to or a copy of personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of personal information, subject to lawful exceptions;
• receive certain information in a portable format;
• withdraw consent where processing is based on consent;
• object to or restrict certain processing;
• opt out of direct marketing, sale or sharing of personal information, or targeted advertising where those rights apply;
• limit certain uses of sensitive personal information where applicable; and
• exercise your rights without unlawful discrimination or retaliation.
We may need to verify your identity before completing a request. You may use an agent acting for you where applicable law allows. We may decline or limit a request where the law permits, and we will explain the decision where required. If applicable law provides an appeal process, you may appeal by replying to our decision or contacting us using the details below.
Philippine Privacy Rights and Complaints
Under the Philippine Data Privacy Act, you may have rights to be informed, object to certain processing, access your personal information, request correction, request erasure or blocking in appropriate circumstances, obtain data portability where applicable, and claim damages for violations of your rights. You may withdraw consent where consent is the basis for processing, subject to legal and contractual consequences.
Please contact us first so we can review and respond to your request or complaint. If you are not satisfied, you may lodge a complaint with the National Privacy Commission through https://privacy.gov.ph.
Australian Privacy Requests and Complaints
If Australian privacy law applies, you may ask to access or correct personal information we hold about you. You may also complain about how we have handled your information. Please send enough information for us to understand and investigate the request. We will acknowledge and respond within a reasonable period. If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner at https://www.oaic.gov.au
United States Privacy Disclosures
If a United States state privacy law applies to us and to your information, the categories described in this policy explain the personal information we collect, the sources, purposes and categories of recipients. We do not sell personal information for money. Certain analytics or advertising activities may be treated as sale, sharing or targeted advertising under some state laws, in which case eligible residents may opt out. We do not use or disclose sensitive personal information for purposes that require a separate right to limit unless we provide the required notice and choice.
Marketing Communications
We send marketing communications only where permitted by applicable law. You can unsubscribe at any time by using the link in an email or contacting us. We will process the request within the period required by law. We may still send non-promotional communications about a request, contract, project, invoice, security matter or legal notice.
Children's Privacy
Our website and services are intended for businesses and adults and are not directed to children under 13. We do not knowingly collect personal information online from a child under 13. If you believe a child has provided personal information to us, contact us so we can review and take appropriate action.
Third-Party Sites and Platforms
Our website may link to or embed third-party sites, social media platforms and tools. Their privacy practices are controlled by their own policies. We encourage you to review those policies before providing information to them.
Changes to This Policy
We may update this policy to reflect changes in our practices, services, technology or legal obligations. The updated version will be posted on this page with a revised date. If a change materially affects how we use information already collected, we will provide any additional notice or choice required by law.
Contact Us
For privacy questions, requests or complaints, contact:
Privacy Contact: JJ Pama
Business name: The Elevate Works
Email: marketing@theelevate.works
Phone: +63 960 244 6102
Business location: Roxas City, Philippines
