Privacy Policy

This website is run by Orel Technology Solutions Inc. (“Orel”, “we”, “us”), a Philippine cybersecurity company. For the personal data described here, we are the personal information controller: we decide why and how it is used.

Our office is at Unit 808, The Offix 2, Paranaque Integrated Terminal Exchange (PITX), #1 Kennedy Road, Barangay Tambo, Parañaque City, 1701 Metro Manila.

We follow the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

We only collect personal data that you give us through two forms on this website.

Contact form

• Inquiry type (sales or technical support)
• Full name
• Work email
• Company (optional)
• Service of interest (optional)
• Your message

Security Posture Snapshot form

• Organization name
• Website domain
• Contact name
• Job title (optional)
• Work email
• Mobile number
• Preferred schedule (optional)
• Your consent, and the time you gave it

Technical data

When you submit a form, our server briefly keeps your IP address in memory to stop spam. Our web hosting provider may also keep standard server logs, such as IP addresses, pages requested and browser type.

Please do not include sensitive personal information (such as health or government ID details) in your message.

• Directly from you, when you fill in and submit the contact form or the Security Posture Snapshot form.
• Automatically, through the IP address your browser sends when you submit a form, and the standard logs kept by our hosting provider.
• From public sources, for the Snapshot only. To prepare your Snapshot we review publicly visible information about your organization: website certificates, headers and software versions; email security records (SPF, DKIM and DMARC); internet-facing services; and public exposure such as domains, lookalike sites and publicly reported leaks. We do not do deeper testing, such as a full vulnerability assessment and penetration test (VAPT), without your written authorization.

Each form also has a hidden anti-spam field. It is meant to stay empty and does not collect anything about you.

We use your personal data only for these purposes:

• To respond to your inquiry. Our sales or support team uses your contact form details to reply and follow up.
• To deliver your Security Posture Snapshot. We use your details to schedule, prepare and share the results. Findings go only to the contact you named in the form.
• To provide services you ask for, if you later decide to work with us.
• To keep this website secure and prevent spam and abuse.
• To meet our legal obligations, for example when the law or a lawful order requires us to keep or disclose information.

Our lawful basis

• Snapshot form: your consent, which you give by ticking the consent box. You can withdraw it at any time (see how to contact us).
• Contact form: processing that is needed to take steps at your request before a possible contract, and our legitimate interest in answering the people who contact us.
• Spam prevention and site security: our legitimate interest in keeping the website and our systems safe.
• Legal requirements: compliance with a legal obligation.

We do not sell your personal data, and we do not share it with advertisers. We share it only with:

• Our own teams (sales, support and the security staff who prepare your Snapshot), on a need-to-know basis.
• Our web hosting provider, which runs the servers for this website. It acts as our personal information processor and handles data only to provide that service.
• Government authorities, only when the law or a lawful order requires it.

Form submissions go straight to our own internal customer relationship management (CRM) system. We do not use an email relay or a third-party form service to handle them.

Form submissions are stored in Orel’s internal CRM, which only authorized Orel staff can use.

This website is hosted by a third-party web hosting provider whose servers may be located outside the Philippines. This means data passing through the website, including server logs, may be processed in another country. When that happens, we stay accountable for your data under the Data Privacy Act and expect our provider to protect it to a comparable standard.

We keep your personal data only for as long as we need it for the purpose you gave it for, and for as long as the law or our legal obligations require. After that, we securely delete it or anonymize it so it can no longer identify you.

The IP address used for spam checks is held only briefly in server memory and is not saved to our CRM.

Security is our business, and we apply it to your data too:

• Encryption in transit. The website uses HTTPS, and form submissions travel to our CRM over an encrypted connection.
• Signed transmission. Each submission is signed (HMAC) so our CRM can confirm it came from our website and was not changed on the way.
• Access controls. Only staff who need your data to do their job can see it.
• Spam protection. We limit each form to one submission per IP address every 30 seconds.
• Our security management system. Our controls are set out in our Information Security Management System (ISMS) Policy.

No system is perfectly secure. If a personal data breach affects you, we will act on it and notify you and the NPC when the law requires.

This website does not use advertising or analytics cookies, and it does not load third-party trackers. Our fonts are hosted on our own server, so loading a page does not send your data to a font provider.

The only data handled automatically is what is described above: the IP address briefly held for spam checks, and standard server logs that our hosting provider may keep.

Under the Data Privacy Act of 2012, you have the right:

• To be informed that your personal data is being collected and how it is used.
• To access the personal data we hold about you.
• To object to our processing of your data, including withdrawing your consent.
• To erasure or blocking of your data when it is incomplete, outdated, false, unlawfully obtained or no longer needed.
• To damages if you suffer harm from inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of your data.
• To file a complaint with the National Privacy Commission.
• To rectification, so we correct any error in your data.
• To data portability, so you can get a copy of your data in an electronic, commonly used format.

To use any of your rights, withdraw consent, or ask a question about this policy, contact our Data Privacy Officer.

• Email: sales@oreltechnologies.net with the subject “Data Privacy”
• Phone: 0977-175-6067 or 0993-462-5920
• Mail: Data Privacy Officer, Orel Technology Solutions Inc., Unit 808, The Offix 2, Paranaque Integrated Terminal Exchange (PITX), #1 Kennedy Road, Barangay Tambo, Parañaque City, 1701 Metro Manila

We may need to confirm your identity before acting on a request, so we do not give your data to someone else.

If you believe we have mishandled your personal data, please contact us first so we can try to fix it. You also have the right to file a complaint with the National Privacy Commission at privacy.gov.ph (opens in a new tab).

This website is meant for businesses and organizations. It is not directed at children, and we do not knowingly collect personal data from them. If you think a child has sent us their details, please contact us and we will delete them.

We may update this policy when our website, services or the law change. We will post the new version on this page and change the “Last updated” date at the top. If a change is significant, we will make it clear on this page.