Your information should have a clear purpose.

Spider Function is responsible for the personal information it collects through this public website, direct project inquiries, and its own client relationship. This policy applies to website visitors, prospective clients, clients, donors, and people who communicate with us about our work.

This policy also covers confidential resources a client gives Spider Function to build, update, or support a website or System Solution. When a client decides why and how its own customers', employees', members', or users' information is processed, Spider Function handles that information only for the approved work and documented client instructions. Project-specific privacy and data-processing terms may also apply.

The public website does not currently collect card numbers, bank credentials, or full payment details. Payment arrangements made outside the website may create ordinary invoice or transaction records needed for accounting and service delivery.

• Directly from you when you submit the inquiry form, email, call, message, donate, meet with us, approve work, or enter a service relationship.
• From a person or organization authorized to contact us on your behalf, such as your employer, teammate, or project representative.
• Automatically as limited routine usage, error, and security information when you visit or use a service.
• From public business sources when reasonably needed to understand or verify an organization that asked us to provide a service.

• To receive, evaluate, respond to, and follow up on your inquiry or donation question.
• To recommend an appropriate Website Solution, System Solution, or care arrangement and prepare a requested quotation.
• To enter into, deliver, support, secure, bill, document, and improve an accepted service.
• To prevent spam, misuse, fraud, security incidents, and other harmful activity.
• To maintain business, accounting, dispute, and compliance records where reasonably necessary or legally required.

Depending on the situation, processing may be necessary to respond before a contract, perform a contract, comply with law, pursue a legitimate business or security interest that does not override your rights, or act with your consent when consent is required. We do not use an inquiry as permission for unrelated advertising.

Spider Function does not sell or rent personal information. We disclose only what is reasonably needed for the approved purpose, including to:

• Authorized Spider Function personnel who need the information to respond, build, support, secure, bill, or administer the approved service.
• Carefully selected service providers that process only the information needed to deliver or protect an approved service and are expected to maintain appropriate confidentiality and safeguards.
• Professional advisers, contractors, or collaborators who need limited access for authorized work and are bound by confidentiality or equivalent duties.
• A recipient specifically approved by the client, such as an authorized teammate, platform administrator, or project partner.
• Government bodies, regulators, courts, or other parties when disclosure is required by law or reasonably necessary to establish, exercise, or defend a legal claim.

We do not use confidential client materials for an unrelated portfolio, case study, testimonial, demonstration, public example, or AI model training without permission. We also do not disclose our clients' private spreadsheets, records, credentials, or system data merely because we helped build or support the service.

Some authorized processing may occur outside the Philippines. We remain responsible for using reasonable safeguards and limiting processing to the approved purpose, subject to applicable law and any project-specific data terms.

The website may use essential browser storage and limited routine technical information to provide the requested page, remember a visitor's choices, prevent abuse, and keep the experience reliable and secure. We do not use confidential client project materials or System Solution data for unrelated advertising. If a future use requires consent, we will provide an appropriate notice and choice.

• Inquiries that do not become active projects are ordinarily kept for no longer than 24 months after the last meaningful interaction, unless they are needed for a legal claim or another lawful reason.
• Client, contract, billing, project, and support records are kept while the relationship is active and afterward for applicable accounting, legal, warranty, dispute, continuity, and legitimate business requirements.
• Routine security and service records are retained only while reasonably needed to protect, diagnose, and operate the affected service.
• Client-provided website resources, spreadsheets, access details, and System Solution data follow the approved project purpose, client instructions, legal requirements, and any project-specific retention or handover terms.

We review retained information and delete, anonymize, or securely dispose of it when its purpose ends, subject to lawful preservation requirements. A valid deletion request may shorten retention when no exception applies.

• We use reasonable organizational and technical safeguards proportionate to the information and service, including restricted access, confidentiality, secure handling, and responsible transmission and storage practices.
• Access to inquiry records, website resources, spreadsheets, credentials, and System Solution data is limited to people who need it for authorized work.
• Clients should use an agreed secure method when sharing credentials or particularly sensitive files and should provide only the access and data required for the approved work.
• No internet transmission or storage system is completely risk-free, so we cannot promise absolute security.
• If a personal-data breach requires notification, we will assess it and notify the National Privacy Commission and affected individuals within the period and manner required by applicable law.

Subject to the Data Privacy Act of 2012, its implementing rules, and lawful exceptions, you may have the right to:

Email support@spiderfunction.com to make a request. We may ask for enough information to verify your identity and locate the relevant record. We will explain if a lawful exception prevents us from fulfilling all or part of a request. You may also raise a concern with the National Privacy Commission.

• Our services are intended for people and organizations able to discuss or enter a business relationship. We do not knowingly solicit personal information directly from children through this public website. A parent or guardian may contact us about unintended collection.
• Links to third-party websites or communication channels lead to services with their own privacy practices. Their policies govern information you provide directly to them.
• We may update this policy when our services, business practices, or legal obligations change. Material changes will be posted here with a revised effective date.