// LEGAL

PRIVACY POLICY

Last updated: January 1, 2026

1. Introduction

This Privacy Policy describes how LichenLoom (lichenloom.com) collects, uses, and protects your information when you use our website and services.

LichenLoom complies with Republic Act 10173 (Data Privacy Act of 2012) of the Philippines and the General Data Protection Regulation (GDPR) of the European Union.

2. Data Controller

The data controller for your personal information is:

3. What Information We Collect

We do not collect personal information without your consent. The following data may be collected:

3.1 Information You Provide

  • Email address (when you subscribe or contact us)
  • Name (when you contact us)
  • Messages you send

3.2 Automatically Collected

  • IP address (for security and analytics)
  • Browser and device type
  • Pages visited and time of visit
  • Referral source (where you came from)

3.3 Cookies

We use cookies for:

  • Essential cookies: For the website to function properly
  • Analytics cookies: To understand how the site is used (with consent only)
  • Preference cookies: To remember your settings

You can manage cookies through your browser settings or on our GDPR page.

4. How We Use Your Data

We use your information for:

  • Providing and improving our services
  • Responding to your questions and messages
  • Sending newsletters (if you subscribed)
  • Analyzing website usage (analytics)
  • Complying with legal obligations
  • Protecting against fraud and abuse

5. Legal Basis for Processing

We process your data based on:

  • Consent: When you give your consent (e.g., newsletter subscription)
  • Legitimate interest: To improve our services and security
  • Legal obligation: When required by law
  • Contract: To fulfill our services to you

6. Data Sharing

We do not sell your personal data. We may share information with:

  • Service providers who help with our operations (under strict contracts)
  • Authorities when required by law

7. Data Retention Period

We retain your data as follows:

  • Contact form data: 2 years from the last communication
  • Newsletter subscriptions: Until you unsubscribe
  • Analytics data: 26 months
  • Cookie data: Depending on the type of cookie (1 day to 1 year)
  • Legal records: As required by Philippine law

After the retention period, data will be deleted or anonymized.

8. Your Rights

You have the following rights regarding your data:

  • Right of Access: View the data we hold about you
  • Right to Rectification: Have incorrect information corrected
  • Right to Erasure: Have your data deleted
  • Right to Restriction: Limit how your data is used
  • Right to Portability: Obtain your data in a machine-readable format
  • Right to Object: Object to the processing of your data
  • Right to Withdraw Consent: At any time

To exercise these rights, email support@lichenloom.com. We will respond within 30 days.

For more information, visit our GDPR page.

9. Data Security

We use the following measures to protect your data:

  • SSL/TLS encryption for all data transfers
  • Secure server infrastructure
  • Regular security assessments
  • Limited access to personal data
  • Employee training on data privacy

10. International Data Transfers

If your data is transferred outside the Philippines or European Economic Area, we will ensure adequate protection through standard contractual clauses or equivalent mechanisms.

11. Children

Our service is for users aged 13 and above. We do not intentionally collect data from children under 13. If we discover that we have collected a child's data, we will delete it immediately.

Users aged 13 to 17 require parental or guardian consent.

12. Changes to This Policy

We may update this Privacy Policy. Changes will be posted on this page with a new update date. For significant changes, we will send a notice.

13. Contact

If you have questions about this Privacy Policy, you can contact us:

14. Complaints

If you are not satisfied with how we handle your data, you can file a complaint with:

  • National Privacy Commission (NPC) of the Philippines - privacy.gov.ph
  • Your local data protection authority (if you are in the EU)