Responsibility depends on the selected plan and accepted scope. Some responsibilities belong to MySiteCare, some remain with the Client, and some depend on third-party providers.
This Privacy Notice explains how MySiteCare Website Application Services collects, uses, stores, shares, protects, and retains personal data in connection with its Philippines-facing website, services, customer portal, billing, support, and related business operations.
This Notice applies to visitors, prospective clients, clients, account users, business contacts, and other people whose personal data may be processed when using or interacting with MySiteCare Philippines services.
1. Who We Are
For the Philippines service track, the Personal Information Controller is:
Jeanjen Sisoy Luberio, sole proprietor doing business as MySiteCare Website Application Services Trading brand: MySiteCare DTI Business Name No.: 7934250 Business structure: Single proprietorship, Republic of the Philippines Website: mysitecare.eu/ph Business email: info@mysitecare.eu Phone: +63 931 825 9615 Registered / Business Address: Tampocon II, 6210 Ayungon, Negros Oriental, Philippines
For privacy and security reasons, MySiteCare does not publish private tax numbers, portal credentials, bank details, private personal contact details, API keys, or other sensitive internal information on the website.
If MySiteCare also uses European systems, infrastructure, or contact addresses for business operations, this does not change the fact that this Notice is for the Philippines service track.
2. Scope of This Notice
This Notice covers personal data processed in connection with:
Visits to mysitecare.eu/ph.
Contact forms, emails, calls, and service inquiries.
Quotations, proposals, orders, invoices, and subscriptions.
Customer accounts and portal access.
Website builds, takeovers, maintenance, monitoring, and support.
Billing, payment confirmation, refunds, and transaction records.
Security, audit logs, fraud prevention, and service diagnostics.
Cookies, analytics, and advertising technologies where enabled.
Client websites managed, hosted, or maintained by MySiteCare where applicable.
Other privacy laws may also apply depending on the location of the data subject, the systems used, and the specific processing activity.
3. Our Role: Controller and Processor
MySiteCare may process personal data in different roles depending on the situation.
3.1 When MySiteCare Acts as Personal Information Controller
MySiteCare acts as Personal Information Controller when it decides why and how personal data is processed for its own business operations.
This includes data processed for:
Website inquiries.
Client accounts.
Quotations and onboarding.
Billing and invoices.
Payment records.
Customer support.
Security logs.
Legal, tax, accounting, and business records.
MySiteCare marketing or service communications where allowed.
3.2 When MySiteCare Acts as Personal Information Processor
MySiteCare may act as a Personal Information Processor when it processes personal data on behalf of a client through a client website or system.
For example, if a client's managed website collects names, email addresses, phone numbers, appointment requests, patient inquiries, customer messages, or similar information, the client may be the Personal Information Controller for that data.
In that case, MySiteCare processes the data according to the client's instructions, the service agreement, and applicable privacy requirements.
Clients remain responsible for making sure their own website content, forms, privacy notices, consent notices, and business use of personal data comply with the law that applies to their business.
A separate data processing agreement or addendum may be required for some clients or higher-risk processing.
4. Personal Data We May Collect
We collect only the personal data reasonably needed for the purposes described in this Notice.
Depending on how you interact with MySiteCare, we may collect the following categories.
4.1 Identity and Contact Data
This may include:
Name.
Business name.
Job title or role.
Email address.
Phone number.
Business address.
Contact preferences.
Communications sent to or from MySiteCare.
4.2 Account and Authentication Data
This may include:
Customer account ID.
Login email.
Password hash or authentication credentials.
Password reset records.
Account status.
Login activity.
Authentication events.
User roles and permissions.
MySiteCare should not store plaintext passwords.
4.3 Business and Website Data
This may include:
Website URL.
Domain information.
Hosting or DNS details where needed.
Business information provided during onboarding.
Service requirements.
Selected plan.
Website content supplied by the client.
Uploaded files or documents.
Website settings and configuration.
Support requests and instructions.
Change requests.
Project notes.
Website status and service history.
4.4 Billing, Subscription, and Transaction Data
This may include:
Invoice details.
Billing name.
Billing contact details.
Amounts charged.
Currency.
Subscription status.
Payment status.
Payment dates.
Refund records.
Transaction references.
Payment provider reference numbers.
Accounting and bookkeeping records.
Tax-related records where applicable.
Withholding certificate information where applicable.
4.5 Payment Provider Data
Payments may be processed through third-party payment providers where enabled.
Depending on the payment method, the payment provider may collect payment, identity, device, transaction, and verification information under its own privacy documentation and legal obligations.
MySiteCare may receive limited payment and transaction information needed to confirm payment, issue invoices or receipts, manage subscriptions, process refunds, prevent fraud, and support the client account.
MySiteCare should not store full card numbers, CVV codes, or payment credentials unless this is clearly required, lawful, secured, and disclosed.
4.6 Support and Communications Data
This may include:
Emails.
Contact form messages.
Support messages.
Call notes.
Client approvals.
Complaint records.
Service history.
Screenshots or files sent for support.
Records of agreed changes or instructions.
4.7 Technical, Security, and Audit Data
This may include:
IP address.
Browser type.
Device information.
Operating system.
Pages visited.
Referring page.
Timestamps.
Login attempts.
Session information.
Error logs.
Security logs.
Audit records.
Admin action records.
System diagnostics.
4.8 Cookie, Analytics, and Advertising Data
Where enabled, this may include:
Cookie identifiers.
Consent choices.
Page activity.
Traffic source.
Browser and device data.
Analytics events.
Advertising-related identifiers or signals on eligible public pages.
Advertising and analytics technologies should not be enabled on private customer portals, billing pages, checkout pages, payment pages, admin pages, tax pages, authentication pages, or other sensitive account areas.
4.9 Prospect and CRM Data
MySiteCare may keep limited information about prospective business clients, leads, or businesses contacted for sales or service discussions.
This may include:
Business name.
Public contact information.
Website or social media link.
Publicly available business details.
Notes about business website needs.
Outreach history.
Response status.
Demo or concept-site references where applicable.
Where information is collected from public sources, referrals, directories, or business websites, MySiteCare should keep the data limited, relevant, and connected to a legitimate business purpose.
5. How We Collect Personal Data
We may collect personal data in the following ways:
Directly from you when you contact us, create an account, request a quote, approve a proposal, pay an invoice, or use the customer portal.
Through your use of our website, portal, cookies, logs, and security systems.
From payment providers when a payment, refund, subscription, or transaction is processed.
From service providers that support hosting, email, analytics, security, or operations.
From publicly available business sources where used for legitimate business outreach or concept-site preparation.
From clients where they provide data needed to build, host, maintain, or support their website.
From legal, tax, accounting, or regulatory sources where required or appropriate.
6. Why We Process Personal Data
We process personal data for the following purposes:
To respond to inquiries and messages.
To prepare quotes, proposals, orders, and service agreements.
To create and manage client accounts.
To provide website build, takeover, maintenance, hosting, monitoring, and support services.
To manage subscriptions, billing, invoices, receipts, refunds, and payment status.
To confirm payments and prevent payment abuse or fraud.
To provide access to the customer portal.
To manage support requests, complaints, and service history.
To maintain security, logs, audits, and system integrity.
To diagnose technical issues and improve website performance.
To comply with tax, accounting, legal, regulatory, and business record requirements.
To send service messages, billing reminders, security notices, or important account updates.
To manage lawful business development and client relationship records.
To use cookies, analytics, or advertising technologies where enabled and lawful.
To protect MySiteCare, clients, users, and systems from unlawful, abusive, fraudulent, or harmful activity.
We do not sell personal data.
7. Lawful Bases for Processing
Depending on the purpose, MySiteCare may rely on one or more lawful bases under applicable data protection law.
7.1 Contract or Steps Before a Contract
We may process personal data to respond to a requested quote, prepare an order, create an account, provide services, manage subscriptions, issue invoices, process payments, and handle support.
7.2 Legal Obligation
We may process personal data where needed for tax, accounting, invoicing, receipts, regulatory duties, legal compliance, dispute handling, or records required by law.
7.3 Legitimate Business Interest
We may process personal data for legitimate business purposes such as website security, fraud prevention, service improvement, audit logging, business administration, client relationship management, and protection of systems and legal rights.
Where legitimate interest is used, it should be assessed against the rights and freedoms of the affected person.
7.4 Consent
We may rely on consent where required or appropriate, such as for optional marketing messages, optional analytics cookies, optional advertising cookies, or other processing that requires consent.
Consent should be freely given, specific, informed, and capable of being withdrawn where applicable.
7.5 Other Lawful Grounds
Other lawful grounds may apply where allowed by Philippine data protection law or other applicable law.
8. Customer Accounts and Portal
If you create or receive access to a MySiteCare customer account or portal, we may process personal data needed to operate that account.
This may include:
Login details.
Account status.
Website records.
Plan information.
Invoices.
Payment history.
Support requests.
Subscription status.
System notifications.
Security and audit logs.
You are responsible for keeping your login details secure and telling us promptly if you believe your account or email has been compromised.
9. Payments and Payment Providers
MySiteCare may use a payment provider to process online payments, subscriptions, refunds, or payment confirmations.
Depending on the payment method, a payment provider may process personal data under its own privacy documents and applicable payment, fraud prevention, compliance, and regulatory obligations.
MySiteCare may receive transaction information from payment providers, such as payment status, transaction ID, amount, currency, payment method reference, refund status, and related billing details.
MySiteCare uses this information to:
Confirm payments.
Activate or maintain services.
Issue invoices or receipts.
Reconcile accounts.
Process refunds.
Investigate failed or disputed payments.
Maintain accounting and tax records.
Prevent fraud or abuse.
MySiteCare should not receive or store full card numbers, CVV codes, or full payment credentials unless the actual payment setup changes and the Privacy Notice is updated accordingly.
10. Cookies, Analytics, and Advertising
MySiteCare may use cookies and similar technologies.
10.1 Strictly Necessary Cookies
These may be used for:
Website functionality.
Login sessions.
Account security.
Form protection.
Cookie preference storage.
Payment or checkout functionality where applicable.
These cookies are needed for the website or service to work properly.
10.2 Optional Analytics Cookies
Where enabled, analytics cookies or similar tools may help us understand traffic, page use, errors, and website performance.
If consent is required, analytics cookies should only be used according to the consent settings available on the website.
10.3 Optional Advertising Cookies
Advertising technologies, including Google AdSense or similar services, may be enabled only where appropriate and only on eligible public informational pages.
Advertising technologies should not be used on checkout pages, payment pages, billing pages, customer account pages, admin pages, tax pages, authentication pages, or other sensitive private areas.
If advertising technologies are enabled, the applicable provider, purposes, categories of data, and available choices should be explained in the Cookie Policy or cookie settings.
10.4 Cookie Choices
Where cookie controls are available, you may manage optional cookies through the cookie settings.
Rejecting optional cookies should not prevent access to basic website functions, although some optional features may not work the same way.
For more information, see the Cookie Policy.
11. Data Sharing and Recipients
We may share personal data only where reasonably needed for the purposes described in this Notice, where required by law, or where otherwise allowed.
Recipients may include:
Hosting and infrastructure providers.
Database and cloud service providers.
Email and communication providers.
Payment providers where enabled.
Domain, DNS, and technical service providers.
Security, monitoring, and logging providers.
Analytics providers where enabled.
Advertising providers where enabled and lawful.
Accountants, bookkeepers, lawyers, auditors, or professional advisers.
Government, tax, regulatory, law enforcement, or dispute-resolution authorities where required or appropriate.
Subcontractors or technical service providers helping MySiteCare provide the contracted service.
Some service providers process personal data on MySiteCare's behalf and according to MySiteCare's instructions.
Other recipients, such as payment providers, banks, government authorities, or regulators, may process personal data under their own legal duties and privacy notices.
We do not sell personal data.
We do not disclose customer billing, tax, account, portal, or private service information to advertising providers.
12. International Processing and Transfers
Personal data may be processed or stored outside the Philippines where MySiteCare, its infrastructure, or its service providers use systems located abroad.
Where personal data is transferred or processed internationally, MySiteCare remains accountable for personal data under its control and uses reasonable contractual, organizational, technical, or other safeguards intended to protect the data consistent with applicable Philippine privacy requirements.
The exact locations and providers may depend on the production infrastructure, payment provider, hosting provider, analytics provider, communication provider, and other systems used.
13. Data Retention
We keep personal data only for as long as reasonably needed for the purpose for which it was collected, unless a longer period is required or allowed by law.
Retention periods may depend on the type of data, service relationship, legal requirements, accounting needs, security needs, dispute risk, and system backup cycles.
General retention approach:
Inquiry and contact data: kept for up to 12 months after the last meaningful interaction, unless the inquiry becomes a client relationship or needs to be retained longer for legal, security, or business reasons.
Client account data: kept while the account or service relationship is active, then retained for a reasonable period needed for support, legal, billing, audit, or dispute purposes.
Billing, invoice, payment, accounting, and tax-related records: retained for the period required or allowed by applicable tax, accounting, and business record laws.
Support communications: retained for a reasonable period to manage service history, disputes, quality control, and future support.
Security, login, and audit logs: retained for a limited period unless needed for investigation, fraud prevention, legal claims, security review, or compliance.
Cookie consent records: retained as needed to remember and evidence consent choices.
Prospect or CRM records: reviewed periodically and deleted or updated when no longer relevant to a legitimate business purpose.
Backups: deleted through normal backup rotation unless retained for legal, security, disaster recovery, or compliance reasons.
Some data may not be deleted immediately if it is needed to comply with law, complete a transaction, resolve a dispute, prevent fraud, protect systems, enforce agreements, or maintain required business records.
14. Data Security
MySiteCare uses reasonable and appropriate organizational, physical, and technical safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.
Measures may include:
Account access controls.
Role-based administrative permissions.
Authentication controls.
Tenant or account separation.
Encryption in transit where appropriate.
Encryption or restricted handling of designated sensitive fields where appropriate.
Audit logs.
Security logs.
Backup procedures.
Development and production environment separation.
Limited access to personal data based on business need.
Credential protection practices.
Security review and monitoring where appropriate.
No system is 100 percent secure. MySiteCare works to reduce risk, but it cannot guarantee that unauthorized access, outages, or security incidents will never occur.
15. Personal Data Breaches
MySiteCare maintains procedures for identifying, assessing, containing, and responding to suspected personal data breaches.
Where a personal data breach requires notification under applicable Philippine privacy law or National Privacy Commission rules, MySiteCare will notify the National Privacy Commission and affected data subjects within the legally required period.
Not every security incident is automatically a notifiable personal data breach. MySiteCare will assess incidents according to applicable law, risk, and the type of information involved.
16. Your Rights Under the Data Privacy Act
Subject to the conditions and limitations under applicable law, you may have the following rights:
Right to be informed.
Right to access your personal data.
Right to object to processing.
Right to erasure or blocking.
Right to correct inaccurate or outdated data.
Right to data portability where applicable.
Right to file a complaint with the National Privacy Commission.
Right to damages where legally available.
To exercise your rights, contact:
[insert or DPO/privacy contact email]
We may ask for reasonable information to verify your identity before acting on a request. This helps prevent unauthorized access to personal data.
We will respond to requests within the period required by applicable law where a specific period applies, or within a reasonable time where no specific period applies.
You may also contact or file a complaint with the National Privacy Commission through its official channels.
17. Automated Decision-Making and Profiling
MySiteCare does not currently use solely automated decision-making or profiling that produces legal or similarly significant effects on customers.
If this changes, this Notice will be updated, and affected data subjects will be provided the information and rights required by applicable law.
Ordinary security checks, payment-provider checks, fraud prevention tools, analytics, or system logs may involve automated processing, but these are not intended to make final legal or similarly significant decisions by themselves.
18. Children
MySiteCare services are intended for business clients and adult users.
We do not knowingly collect personal data directly from children for account creation, billing, or service contracting.
If we learn that a child's personal data has been provided to us without proper authority or lawful basis, we may delete or restrict the data unless retention is required by law or necessary to protect rights, safety, or security.
19. Third-Party Websites
Our website may contain links to third-party websites, services, payment pages, social media pages, plugins, or external tools.
We are not responsible for the privacy practices, content, security, or policies of third-party websites or services.
You should review the privacy notices of third-party services before providing personal data to them.
20. Changes to This Privacy Notice
We may update this Privacy Notice when our services, systems, providers, processing activities, or legal obligations change.
The updated version and effective date will be published on this page.
Where a material change affects processing based on consent, or where additional notice or fresh consent is required by law, MySiteCare will provide the required notice or request the required consent.
Continued use of the website is not used as a substitute for legally required consent.
21. Privacy Contact
For privacy questions, data-subject requests, complaints, or concerns about how MySiteCare handles personal data, contact:
MySiteCare Website Application Services Business email: info@mysitecare.eu Phone: +63 931 825 9615 Registered / Business Address: Tampocon II, 6210 Ayungon, Negros Oriental, Philippines
You may also contact the National Privacy Commission through its official website and complaint channels.
Internal Review Note