1. Scope and Applicability
This policy applies to all personal information collected through havenwizards.com and its subdomains, our communication channels (email, forms, live chat), partner portals, educational platforms, and any services we operate. HavenWizards 88 Ventures OPC is incorporated in the Philippines (SEC Registration No. 2025010012345-06) and serves partners, clients, and learners globally.
By using our website or services, you acknowledge that you have read and understood this policy. If you do not agree with our practices, please discontinue use of our services.
2. Information We Collect
We collect information in the following categories:
2.1 Information You Provide Directly
- Contact information: name, email address, phone number, company name, and job title when you submit inquiry forms, subscribe to newsletters, or register for events.
- Business information: venture details, project requirements, budget ranges, and engagement preferences when you request our services.
- Account information: login credentials, profile preferences, and communication settings when you create an account on our learning platform.
- Payment information: billing details processed through our third-party payment processor (Stripe). We do not store full credit card numbers on our servers.
- Communication content: messages, feedback, and files shared through our contact forms, email, or partner portals.
2.2 Information Collected Automatically
- Device and browser information: IP address, browser type and version, operating system, device type, and screen resolution.
- Usage data: pages visited, time spent on pages, click patterns, referral sources, and navigation paths through our site.
- Location data: approximate geographic location derived from your IP address (country and region level only).
- Cookies and similar technologies: as described in our Cookie Policy.
2.3 Information from Third Parties
- Publicly available business information from LinkedIn, company websites, or industry databases when evaluating partnership opportunities.
- Referral information when a partner or client introduces you to our services.
3. How We Use Your Information
We process your personal information for the following purposes:
- Service delivery: to respond to inquiries, evaluate partnership fit, prepare proposals, and deliver contracted services.
- Educational content: to provide access to training programs, workshops, digital products, and learning materials you have enrolled in or purchased.
- Communications: to send newsletters, operator briefings, product updates, and event invitations when you have opted in.
- Analytics and improvement: to understand how our website is used, improve content and navigation, optimize performance, and inform product development.
- Security: to detect, prevent, and respond to fraud, unauthorized access, or other malicious activity.
- Legal compliance: to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
4. Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Consent: when you voluntarily provide information through forms, subscriptions, or account registration. You may withdraw consent at any time.
- Contractual necessity: when processing is required to fulfill a contract with you or take pre-contractual steps at your request.
- Legitimate interests: when processing serves our legitimate business interests (such as improving our services, marketing, or fraud prevention) and these interests are not overridden by your rights.
- Legal obligation: when processing is necessary to comply with applicable laws, including the Philippines Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
5. Data Sharing and Third-Party Processors
We do not sell, rent, or trade your personal data to third parties. We share information only in the following circumstances:
- Service providers: we use trusted third-party processors for specific functions, including Vercel (hosting), Supabase (database), Stripe (payments), Resend (email delivery), and Vercel Analytics (website analytics). Each processor operates under data processing agreements with appropriate safeguards.
- Business partners: with your consent, we may share relevant information with venture partners or co-delivery teams when necessary to fulfill services you have requested.
- Legal requirements: when required by law, regulation, legal process, or governmental request.
- Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction with equivalent protections maintained.
6. International Data Transfers
As a company headquartered in the Philippines serving global clients, your data may be processed in countries outside your jurisdiction. Our infrastructure providers (Vercel, Supabase, Cloudflare) operate globally. We ensure that international transfers are conducted with appropriate safeguards, including standard contractual clauses, adequacy decisions, or equivalent measures recognized under the Philippines Data Privacy Act and applicable international frameworks.
7. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this policy. Specific retention periods include:
- Inquiry and contact data: retained for up to 24 months after your last interaction, then anonymized or deleted.
- Client and partner data: retained for the duration of the business relationship plus 5 years for legal and contractual compliance.
- Account data: retained until you request deletion of your account.
- Analytics data: aggregated and anonymized within 26 months of collection.
- Financial records: retained as required by Philippine tax law (10 years).
8. Your Rights
Under the Philippines Data Privacy Act and applicable international privacy laws, you have the following rights:
- Right to be informed: to know what personal data we collect and how it is used (this policy serves that purpose).
- Right of access: to request a copy of the personal data we hold about you.
- Right to correction: to request correction of inaccurate or incomplete data.
- Right to erasure: to request deletion of your personal data, subject to legal retention obligations.
- Right to restrict processing: to request that we limit how we use your data in certain circumstances.
- Right to data portability: to receive your data in a structured, commonly used, machine-readable format.
- Right to object: to object to processing based on legitimate interests, including direct marketing.
- Right to withdraw consent: to withdraw previously given consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact our Data Protection Officer at privacy@havenwizards.com. We will respond to valid requests within 30 days.
9. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS 1.3) and at rest (AES-256).
- Role-based access controls with least-privilege principles.
- Regular security assessments and dependency audits.
- Secure infrastructure hosted on Vercel with Cloudflare edge protection.
- Row-level security (RLS) policies on all database tables.
While we strive to protect your data, no method of electronic transmission or storage is 100% secure. If you believe your information has been compromised, please contact us immediately.
10. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete such information promptly.
11. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you via email or a prominent notice on our website. We encourage you to review this policy periodically.
12. Contact and Complaints
If you have questions, concerns, or complaints about this Privacy Policy or our data practices, contact us at:
If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.