Privacy Policy

Who We Are

M Web Design is a freelance web design business operated by a sole proprietor based in the Philippines. We provide web design and development services, SEO, domain and hosting setup, content writing, and related digital services to clients in the Philippines and internationally.

Business name: M Web Design
Operator: Sole proprietor (freelancer)
Location: Philippines
Email: hello@mwebdesign.com
Phone: +63 961 762 0676
Website: mwebdesign.vercel.app

This Privacy Policy explains how we handle personal information collected through our website and service engagements. By using this website or engaging our services, you agree to the practices described herein.

Information We Collect

We collect personal information in two ways: information you provide directly, and information collected automatically when you visit our website.

Information you provide directly:

• Full name and email address
• Phone number (optional)
• Company or business name (optional)
• Country of residence or business
• Project details, platform preference, budget, and timeline
• Design preferences and inspiration references
• Payment details (processed securely via third-party processors — we do not store card numbers)
• Any other information you choose to include in your message or during the project

Information collected automatically:

• IP address and browser type (for security and analytics)
• Pages visited, time spent, and interactions (via Google Analytics)
• Device type, screen size, and operating system
• Referring website or traffic source
• Cookie data (see Section 05 for details)

Information from project engagements (client data):

• Invoice information (name, address, payment records)
• Project files, assets, and content you provide (images, copy, logos)
• Login credentials for platforms you grant us temporary access to (e.g., Wix, WordPress, Hostinger) — these are used solely to complete your project and deleted or handed back upon completion
• Domain and hosting account details shared for setup and transfer purposes

How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries and communicate about your project
• To prepare and send proposals, invoices, and project agreements
• To deliver web design, SEO, hosting, content, and related services
• To send project updates, milestone notifications, and support communications
• To process payments via our accepted payment processors
• To maintain our client tracker and project records (internally only)
• To improve our website content, performance, and user experience
• To comply with applicable Philippine and international laws
• To detect and prevent fraud, spam, or misuse of our services

We will never use your information for unsolicited marketing, cold outreach, or share it with advertisers without your explicit prior consent.

Information Sharing

We do not sell, trade, or rent your personal information to any third party. We may share limited information only in the following circumstances:

• Payment processors: When you make a payment via PayPal, Stripe, Wise, Maya, or GCash, your payment details are processed directly by those services. We never see or store your card number or full banking details.
• Platform providers: If your project involves WordPress, Wix, Squarespace, Webflow, or a hosting provider, limited information (e.g., your domain or email) may be used with those platforms to complete setup. You retain full ownership.
• Legal requirements: When required by Philippine law, court order, or a government authority with jurisdiction.
• Business protection: To protect the rights, property, or safety of M Web Design, our clients, or others — where necessary and proportionate.

We do not use data brokers, ad networks, or marketing platforms that would result in your data being shared with third-party advertisers.

Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience and understand how visitors use the site. We use the following types:

• Essential cookies: Required for the website to function (e.g., session tokens, security headers). Cannot be disabled without breaking core functionality.
• Analytics cookies: Google Analytics (GA4) tracks anonymised, aggregated usage data — pages viewed, session duration, device type. No personally identifiable information is captured at the analytics level.
• reCAPTCHA: Google reCAPTCHA is used on our contact form to prevent spam. It processes your IP address and browser behaviour. Google's Privacy Policy applies.
• No advertising or retargeting cookies: We do not use Facebook Pixel, Google Ads tags, or any cookie designed to track you across other websites for advertising purposes.

You can control cookie settings through your browser preferences. Disabling non-essential cookies will not affect your ability to contact us or use our core website features.

Client Data & Project Files

During the course of a project, you may share sensitive business and platform credentials with us (e.g., hosting login, domain registrar access, WordPress admin, Wix account). We handle this data as follows:

• Credentials are used only for the specific tasks within your agreed project scope
• We do not share platform access with subcontractors or third parties without your explicit written consent
• All credentials are deleted from our records upon project completion and full handover to the client
• We strongly recommend you change all passwords after project completion as a security best practice

Project files, design assets, and content you provide remain your intellectual property at all times. We store them only for the duration of the project and the 30-day post-launch support period, after which they are removed from our working storage unless you request otherwise.

Data Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/HTTPS encryption on all data transmitted through our website
• Secure email hosting with access controls and 2-factor authentication where available
• Password-protected storage for client project files and records
• Limited access to personal data — as a solo operation, only the business owner handles your information
• Regular review of third-party tools and their security practices

While we are committed to protecting your data, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security, but we take all reasonable steps to minimise risk.

In the event of a data breach that may affect your personal information, we will notify you promptly via the email address on file and take immediate steps to contain and address the issue.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law:

• Enquiry / contact data: Retained for up to 2 years from the date of last contact. If no project proceeds, data is deleted after this period.
• Client & project data: Retained for 5 years after project completion for invoicing, accounting, and potential legal reference — in line with standard Philippines BIR record-keeping requirements.
• Payment records: Retained for 5 years for accounting and tax compliance purposes.
• Platform credentials shared during a project: Deleted upon project completion and final handover (see Section 06).
• Analytics data: Retained in anonymised, aggregated form for up to 26 months (Google Analytics default retention setting).

You may request early deletion of your data at any time (see Section 10 — Your Rights). We will comply within 30 days unless we are legally required to retain it.

International Clients & Cross-Border Data

M Web Design accepts clients from around the world. If you are located outside the Philippines, please be aware that your personal information may be processed and stored in the Philippines, where data protection laws may differ from those in your country.

By engaging our services, you consent to this transfer and processing. We apply the same data protection standards to all client data regardless of origin.

If you are based in a jurisdiction with specific data protection rights (such as the European Union under GDPR, or California under CCPA), the rights described in Section 10 apply to you in addition to any local rights you may hold. Please contact us if you need clarification on how your data is handled under your jurisdiction.

Your Rights

You have the following rights regarding your personal data. To exercise any of these rights, contact us at hello@mwebdesign.com. We will respond within 30 days.

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal data ("right to be forgotten"), subject to any legal retention obligations.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to the processing of your data for specific purposes.
• Withdrawal of consent: Withdraw any consent you have previously given at any time.
• Restriction: Request that we restrict processing of your data in certain circumstances.

Under the Philippines Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to be informed, to object, to access, to rectify, to erase or block, and to damages. We are committed to honouring these rights.

Third-Party Services

Our website and service workflow integrates with the following third-party services. Each is governed by its own privacy policy, which we encourage you to review:

• Google Analytics (GA4) — Website usage analytics. Privacy Policy
• Google reCAPTCHA — Spam prevention on contact forms. Privacy Policy
• PayPal — International payment processing. Privacy Policy
• Stripe — Credit and debit card processing. Privacy Policy
• Wise — International bank transfers. Privacy Policy
• Maya (PayMaya) — Philippine mobile payments. Privacy Policy
• GCash — Philippine digital wallet. Privacy Policy
• Hostinger / Z.COM / Namecheap — Hosting and domain providers used during project setup (client data handled only as needed for service delivery).
• WordPress / Wix / Squarespace / Webflow — Website platforms used to build or host client projects.

We do not control or take responsibility for the privacy practices of these third-party services. We limit the data shared with each to only what is strictly necessary for the service being provided.

Children's Privacy

Our services are directed at businesses and adult individuals only. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at hello@mwebdesign.com and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page.

For active clients, we will notify you of material changes via email. For general website visitors, continued use of our website after changes are posted constitutes acceptance of the updated policy.

We recommend reviewing this page periodically to stay informed.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out: