Privacy Policy
This policy explains exactly what Purple Logo PH collects when you use our website, our Build-a-Brand ordering tool, or our mobile app, why we collect it, who we share it with, how long we keep it, and how you can get it deleted.
Not to anyone, for any price, ever.
No advertising cookies, no cross-site tracking, no data brokers.
Delete your account in the app and it goes immediately.
Our database runs in the ap-southeast-1 region.
Who we are
Purple Logo PH ("Purple Logo", "we", "us", "our") is a creative design studio based in the City of San Fernando, Pampanga, Philippines. We have operated since 2014 and provide logo design, brand identity, print collateral, packaging, signage and website design services, primarily to businesses in the Philippines.
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) we are the personal information controller for the data described in this policy. Where the EU or UK General Data Protection Regulation applies to a visitor, we act as the data controller.
You can reach us any time about privacy at purplelogophmain@gmail.com, by phone on +63 919 348 6372, or by post at City of San Fernando, Pampanga, Philippines.
If you are submitting our app to a workplace or agency review, the contact above is the one to use for privacy correspondence and for data deletion requests.
What this policy covers
This policy applies to everything we operate under the Purple Logo PH name, specifically:
- The website at www.purplelogo.ph, including every page, form and article on it.
- The Build-a-Brand ordering tool, which collects your brand preferences and order details.
- Our mobile application for iOS and Android, where you browse services, place orders and follow the progress of design work.
- Email, phone and messaging conversations you have with our studio about a project.
It does not cover third-party websites we link to, such as our Facebook or Instagram pages, which are governed by those platforms' own privacy policies. It also does not cover the internal handling of your data by a client of ours if you interact with a brand we designed.
Information we collect
We collect three kinds of information: what you give us directly, what is gathered automatically when you browse, and the small amount we receive from service providers.
Information you give us directly:
- Contact details. Your name, email address, phone number, and optionally your city or town, when you request a quote or place a Build-a-Brand order.
- Business details. Your business name, industry, and whether your brand is new, being refreshed or growing.
- Brand preferences. The style words you pick, the colour palette you choose or build, and any of our past work you mark as something you like.
- Images you upload. If you upload pictures of designs you like, we store a compressed copy of those images with your order so our designers can see them.
- Voice notes. If you record a voice note on a design, we store the recording so your designer can hear your feedback in your own words. You choose whether to record; typing is always available instead.
- Order contents. The kit and individual design pieces you select, the resulting price, and any discount you win on the bonus spin.
- Free-text notes. Anything you type into a message or notes field, including links you share with us.
- Account credentials. If you create an account in our mobile app, we store your email address and a securely hashed password. We never store your password in readable form.
- Correspondence. The content of emails and messages you send us, and our replies, kept with your order so our team has the history.
Information collected automatically when you visit or use the app:
- Pages viewed. Which page you looked at and the referring website that sent you, so we can see what people find useful.
- A visitor identifier. A random string stored in your browser's local storage so repeat visits are not counted as new people. It contains no name, email or account link and is not shared with anyone.
- Device type. Whether you are on a phone, tablet or computer.
- IP address and approximate location. Your IP address is used to look up an approximate city, region and country. We store that approximate location with the page view, and we cache the IP address itself so we do not repeat the lookup for the same visitor.
- Local preferences. Your progress through Build-a-Brand and which portfolio pieces you have liked are stored in your own browser so you do not lose them. That data stays on your device unless you place an order.
- Device token for notifications. If you allow notifications, the app stores the push token your device issues so we can tell you when a proof is ready, a message arrives or your project moves. The token identifies a device, not you personally. You can switch each type of notification off in the app’s settings, or turn them all off in your device settings.
We do not use advertising cookies, retargeting pixels, session recording, heatmaps, or any cross-site tracking. We do not build advertising profiles and we do not participate in data broker networks.
Information from third parties. Our IP geolocation provider returns an approximate location for a given IP address. Our email provider tells us whether a message was delivered. Beyond that, we do not buy, rent or receive personal data about you from anyone.
How we use your information
We use what we collect only for the purposes below, and we do not use it for anything materially different without telling you first.
Replying to quote requests and questions, preparing an estimate, and following up about a project you asked about.
Confirming your Build-a-Brand order, sending you a payment link, briefing our designers, producing your artwork, and delivering the finished files.
Emailing you about the status of your work, sending proofs for review, and answering your feedback.
Keeping records of orders and invoices, and meeting our tax and accounting obligations.
Understanding which pages and services people find useful so we can make the site better. This uses aggregate counts, not individual profiles.
Detecting and preventing abuse, spam submissions, fraud and security incidents.
Our lawful bases for processing
Where the Philippine Data Privacy Act, the GDPR or the UK GDPR applies, we rely on the following grounds:
- Performance of a contract. Processing your order, communicating about the work, and delivering your design files.
- Legitimate interests. Understanding site usage in aggregate, securing our systems, preventing abuse, and keeping business records. We have weighed these interests against your rights and use the minimum data needed.
- Consent. Where you upload optional inspiration images or choose to share extra information. You can withdraw consent at any time by contacting us.
- Legal obligation. Retaining transaction records where tax or accounting law requires it.
Under the Philippine Data Privacy Act, we also process personal information on the basis that it is necessary to fulfil a contract with you and to pursue our legitimate interests as a business, in accordance with Section 12 of that Act.
Where your information is held
Our database and server functions run in Singapore. Our hosting and email providers operate globally and may process data in the United States and other countries. This means your information may be transferred outside the Philippines, or outside the European Economic Area and the United Kingdom.
Where such transfers happen, we rely on our providers' contractual safeguards, including the European Commission's Standard Contractual Clauses where applicable, and we choose established providers that publish their security and privacy commitments.
How long we keep information
We keep information only as long as it is useful for the purpose it was collected for, or as long as the law requires.
Up to 24 months from your last contact with us, so we have context if you come back.
Commercial records such as invoices, order contents and totals: up to 5 years after the project completes, to support warranty questions, reprints and tax records. This does not apply to the files we delivered to you.
Your finished artwork stays in your brand vault for as long as you keep your account open, so you can download it again years later. It is deleted when you delete your account.
Kept with the order and deleted with it, or sooner on request.
Up to 24 months in our studio mailbox unless it relates to an order, in which case it follows the order.
Page view records for up to 24 months. Cached IP-to-location lookups for up to 12 months.
For as long as your account is open. Deleting your account in the app removes it immediately; an emailed request is completed within 30 days.
When a retention period ends, we delete the record or irreversibly anonymise it so it can no longer be linked to you.
How we protect your information
- All traffic between your device and our site is encrypted in transit using HTTPS.
- Data at rest in our database is encrypted by our hosting provider.
- Access to customer records is restricted at the database level, so only authenticated members of our studio team can read them. Public visitors can submit a form but cannot read anyone's submissions, including their own.
- Administrative access requires an individual account with a password, and accounts are removed promptly when someone leaves the team.
- Passwords are stored only as salted hashes and are never visible to us.
- Secret keys used by our servers are stored as encrypted environment secrets and never included in the code that runs in your browser.
No system is perfectly secure. If a breach ever affects your personal information in a way that is likely to put you at risk, we will notify you and the National Privacy Commission within the timeframes required by Philippine law, and any other regulator that applies to you.
Your rights over your information
Wherever you are, you can ask us to do the following, free of charge, and we will respond within 30 days:
Ask what personal information we hold about you and why.
Request a copy of your information in a readable format.
Have anything inaccurate or incomplete fixed.
Ask us to delete your information where we have no overriding legal reason to keep it.
Object to processing based on our legitimate interests, or ask us to pause processing while a dispute is resolved.
Receive your information in a structured, commonly used format, or have it sent to another provider.
Withdraw consent you previously gave, without affecting processing already carried out.
Lodge a complaint with a supervisory authority.
Under the Philippine Data Privacy Act you also have the right to damages for inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorised use of personal information, and your rights may be exercised by your legal heirs and assigns.
Residents of California may request disclosure of the categories of personal information collected and ask us to delete it. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. We will never discriminate against you for exercising any privacy right.
To exercise any of these rights, email purplelogophmain@gmail.com with the request and the email address or order code you used. We may ask a question or two to confirm it is really you before we act, which protects you from someone else requesting your data.
Deleting your account and your data
You can have your account and the personal information attached to it deleted at any time. We offer two routes, and both are free:
- In the app, open Account and choose Delete account. Confirming it removes your profile, projects, messages and files straight away.
- Or email purplelogophmain@gmail.com from the address on the account, with the subject "Delete my account". No form, no phone call, no retention offer.
What happens next: deleting from the app is immediate. Your profile, projects, messages and uploaded files are gone the moment you confirm, with no waiting period and no retention offer. If you ask us by email instead, we check the request came from you and complete the deletion within 30 days. By either route, backup copies are overwritten on their normal rotation, which completes within 90 days.
What we may keep, and why: where Philippine tax and accounting law requires it, we retain the minimum transaction record of a completed and paid order, such as the invoice amount and date. We also keep anonymised, aggregate statistics that can no longer be linked back to you. Nothing retained under this paragraph is used to contact you or to build a profile.
If you only want your uploaded images or a specific message removed rather than your whole account, say so and we will remove just that.
Children's privacy
Our services are intended for business owners and are not directed at children. We do not knowingly collect personal information from anyone under 13 years of age, or under 16 where local law sets that higher threshold. Our mobile app is not designed or marketed for children and does not participate in any children's or families programme on the App Store or Google Play.
If you believe a child has given us personal information, contact us and we will delete it promptly.
Automated decisions and profiling
We do not make decisions about you by automated means that produce legal effects or similarly significant effects. The Build-a-Brand tool suggests a kit based on the industry and starting point you select, but that is a simple, transparent suggestion you are free to ignore, and it has no effect on pricing or on whether we will work with you.
Links to other sites
Our site and app link to places we do not control, including our own social media pages, our printing partner, and articles we reference. Following those links takes you into someone else's privacy policy, and we are not responsible for their practices. We encourage you to read the policy of any site you share information with.
App store data disclosures
The following summary is provided so it can be checked against our App Store privacy details and our Google Play Data Safety declaration. It restates what is described above.
Contact information (name, email, phone, city), user content (uploaded images, voice notes, notes and messages), purchase history (orders and totals), and identifiers (account ID) where you hold an account.
Product interaction and page view counts, approximate location derived from IP, and device type, used for analytics.
Precise GPS location, contacts, photos library beyond what you deliberately upload, health data, financial account numbers, browsing history on other sites, and advertising identifiers.
None. We do not track you across apps or websites owned by other companies, and we do not share data with data brokers.
All data is encrypted in transit and at rest.
Deleting your account in the app removes your data immediately. You can also ask us by email, as described above.
Changes to this policy
We update this policy when our practices change or when the law requires it. The date at the top always reflects the current version. If a change materially affects how we handle your personal information, we will tell you by email where we have your address, or with a clear notice on the site before the change takes effect.
We keep prior versions and can provide an earlier version on request.
Contact us and how to complain
For any privacy question, request or complaint, contact us first and we will try to put it right:
- Email: purplelogophmain@gmail.com
- Phone: +63 919 348 6372
- Post: Purple Logo PH, City of San Fernando, Pampanga, Philippines
If you are not satisfied with our response, you may complain to the National Privacy Commission of the Philippines at privacy.gov.ph. If you are in the European Economic Area or the United Kingdom, you may complain to your local data protection authority. If you are in another country, your national privacy regulator can help.
A real person at the studio will answer. Email us and we will come back to you, usually the same day.