Privacy policy

This policy covers the website arabis.works, operated by Arabis Information Technology Services ("Arabis Works", "we") in the Philippines. Each of our products has its own privacy policy for its own service; for example, Buildplate Studio's privacy policy.

What we collect

When you send an inquiry

The contact form collects what you type into it:

• your name and email address;
• your company or organization, if you give one;
• the project type, summary and description, and optional budget range, timeline and links.

With each inquiry we also store the time it was received and a one-way, salted hash of your IP address. The hash lets us limit how many inquiries one connection can send; we do not store the IP address itself and do not use the hash for anything else.

When you browse

The site does not set cookies of its own and does not use advertising or cross-site tracking. We use Cloudflare Web Analytics, which counts page views and performance without cookies and without building profiles of individual visitors. Cloudflare, as our host, processes standard request data (such as IP address and browser type) to deliver and protect the site.

Spam protection

The contact form may use Cloudflare Turnstile to check that a submission comes from a person. Turnstile evaluates signals from your browser and connection when you submit the form. See Cloudflare's privacy policy.

Why we use it

• To read and reply to your inquiry, and to discuss a possible project with you.
• To keep the form usable by preventing spam and abuse.
• To understand, in aggregate, which pages are visited so we can improve the site.

We process inquiry data because you asked us to respond to you, and to take steps you requested before a possible agreement. We do not sell personal data, and we do not use inquiries for marketing lists.

Who processes it

We use these service providers, who process data on our behalf:

• Cloudflare, Inc.: website hosting, the database that stores inquiries, email delivery of inquiry notifications, Turnstile and Web Analytics.

Cloudflare operates globally, so your data may be processed outside the Philippines, including in the United States. We rely on Cloudflare's contractual data protection commitments for these transfers.

How long we keep it

Inquiries are kept for up to 2 years after they are received, so we can refer back to earlier conversations, and are then deleted. If an inquiry becomes a project, related correspondence is kept as long as needed for that project and for legal and accounting obligations. You can ask us to delete an inquiry sooner.

How we protect it

Inquiries are sent over HTTPS, stored in a database that is not publicly accessible, and can only be read by the owner through an authenticated internal tool. Notification emails are plain text. Analytics never receive the contents of the form.

Your rights

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), and other laws that may apply to you, you can ask to be informed about and to access the personal data we hold about you, to correct it, to object to its processing, to have it deleted or blocked, and to receive a copy in a portable format. You may also lodge a complaint with the National Privacy Commission.

To make a request, email hello@arabis.works from the address you used, or include your inquiry reference so we can find your record. We will respond within a reasonable time.

Children

This site is meant for businesses and adults. We do not knowingly collect data from children.

Changes

If we change how we handle personal data, we will update this page and the date at the top.

Contact

Arabis Information Technology Services, Philippines. Email: hello@arabis.works.