Privacy Notice

What we collect

• From our contact form: your salutation, your first, middle, and last name, your nationality, your mobile number with its country code, your email address, and whatever you choose to write in the message field.
• Two of the fields are optional and the form marks them so: your gender and your address. If you leave them blank, or choose “Prefer not to disclose”, we do not hold them.
• From your visit to this site: the web server keeps a standard access log recording your IP address, your browser and device type, the pages you request, and when you request them. We also use Cloudflare Web Analytics to count visits. It sets no cookies and stores nothing on your device.

Why we collect it, and on what basis

• To reply to your inquiry and to take the steps you have asked us to take before we agree to act. Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, permits this at Section 12(b), which covers processing necessary to take steps at your request before entering into a contract.
• Your name in full, including your middle name, and your nationality are asked for because both bear directly on the two purposes above. A conflicts check run on a first name and a surname alone is unreliable in the Philippines, where the middle name is what distinguishes people who would otherwise match. Nationality bears on a great deal of what we are asked about, including who may own land or a business in the Philippines, immigration status, and the recognition of a foreign divorce, so knowing it early lets us tell you sooner whether we can help.
• Gender is optional and we ask it only so that we address you correctly where a salutation does not settle it. If you would rather not say, choose “Prefer not to disclose” and we will use your salutation alone. Your address is optional and we ask it because where you are affects which court or office a matter would be handled in.
• To check whether we have a conflict of interest that would prevent us from acting for you. We cannot act for anyone until we have done this. The Data Privacy Act permits it at Section 12(f), as a legitimate interest in running the practice lawfully.
• To keep the site running and secure, and to see which pages people find useful, also under Section 12(f). Neither the access log nor our analytics puts anything on your device, so there is nothing there for you to refuse.
• We do not use your information for direct marketing, and we do not sell it.

If what you send is sensitive or privileged

• The Data Privacy Act treats some information as sensitive personal information. For a matter like yours that most often means information about a proceeding for an offense committed or alleged to have been committed by you, its disposal, or the sentence of any court in it. Information about health, education, or genetic or sexual life is also sensitive. A civil, labor, corporate, or property dispute is not sensitive on that ground alone.
• The Act deals separately with privileged information, meaning communications that the Rules of Court and other laws protect from disclosure.
• Where what you send falls into either category, we process it under Section 13(f) of the Act, which permits processing necessary for the protection of lawful rights and interests in court proceedings or for the establishment, exercise, or defense of legal claims. Sending it to us also gives your consent under Section 13(a). We rely on both, so that withdrawing consent does not leave us holding information with no basis to hold it.
• Please hold back documents and confidential details until we ask for them. Information sent before we are engaged can, in some circumstances, prevent us from acting for you or for anyone else in the matter.

How we handle it

• Your inquiry is read by the lawyers and staff of the firm and stored in the systems we use to run the practice. We do not copy it anywhere else, and we do not use it for any purpose beyond those above.

Who sees it

• The firm’s lawyers and staff.
• The providers of the website, email, and file storage services we use, and Cloudflare, Inc., which counts visits for us. They process it on our instructions and under contract.
• Anyone else only where you ask us to, or where the law requires it.

Automated decisions

• We do not make automated decisions about you, we do not profile you, and nothing you send is used for either.

How long we keep it

• We keep your inquiry for one year and then delete it.
• We keep the web server’s access log for 30 days and then delete it. Cloudflare, Inc. keeps the detailed analytics record for seven days, then an aggregated sample, and the dashboard reaches back six months.
• We keep the record of the conflicts check for as long as the firm is in practice. The Data Privacy Act allows this at Section 11(e), which permits retention for the establishment, exercise, or defense of legal claims and for legitimate business purposes. We keep it because a conflicts check is only useful if it can be run against everyone who has ever approached us.
• If we go on to act for you, the information you give us during that engagement is covered by the terms of that engagement rather than by this notice.

Your rights

• Under the Data Privacy Act and its Implementing Rules you have the right to be told whether we hold information about you and to see it; to have it corrected if it is wrong; to object to how we use it, including to any profiling or automated processing; to ask us to block or delete it in the circumstances the Act allows; to receive a copy of it in a commonly used electronic format; and to be indemnified for damage caused by inaccurate, outdated, false, unlawfully obtained, or unauthorized use of it.
• If you die or become incapable of exercising these rights, your lawful heirs and assigns may exercise them for you.
• Write to us and we will act on it.
• You also have the right to complain to the National Privacy Commission, whether or not you have raised it with us first. The Commission can be reached at privacy.gov.ph.

Cookies

• This site sets no cookies. Neither we nor the company that counts visits for us stores anything on your device, so there is nothing here for you to accept, refuse, or change. If that ever changes, we will say so here first.

Who we are, and how to reach us

Badayos & Badayos Law
Unit 4G, Base Line HQ, Base Line Center
Juana Osmeña Street
Cebu City 6000
Cebu, Philippines

+63 917 183 8183
badayos@badayoslaw.com

Our Data Protection Officer

For anything about your personal information, contact our Data Protection Officer. The postal address is the one above.

Data Protection Officer
+63 917 183 8183
dpo@badayoslaw.com

We will give you the name of the officer holding that post on request.

Changes

This notice was last updated on 23 September 2026. If we change it we will post the change here, and the Data Privacy Act requires us to tell you before we amend anything we have already told you about how we handle your information.