Privacy

Privacy Policy

Last updated: September 10, 2026

This policy explains what personal data TechStone Architectural Coating Systems (“TechStone”, “we”) collects when you use techstone.com.ph, why we collect it, and how we handle it. It applies to visitors, newsletter subscribers, registered account holders, and trade-account applicants.

We comply with the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations issued by the National Privacy Commission.

1. What we collect

• Account & registration data — name, email, company, phone (optional), and, for architects/contractors/dealers requesting verified-role access, evidence such as PRC license number, business permit number, or company URL plus a short attestation.
• Newsletter subscriptions — email address, optional name, optional self-identified role, and the page URL where you subscribed.
• Enquiries & quote requests — name, email, company, phone, project context, and any messages you send.
• Engagement data — the pages you visit on this site, and the links you click in our emails. We record these against an anonymous identifier held in a first-party cookie, so we can understand which content is useful. If you later identify yourself — by clicking a link in one of our emails, signing in, sending an enquiry or subscribing — we link that earlier activity to you, so the sales team member looking after your project can see what you have already read.
• Technical data — IP address, user agent, referrer, and timestamps. We log these for security, abuse prevention, and capacity planning.

We do not ask for, store, or process: payment-card numbers, government identifiers (other than the PRC license number you may voluntarily submit for trade verification), passwords from third parties, or biometric data.

2. Why we collect it

• To provide the service — fulfilling sample requests, processing trade-account applications, granting verified-role access to specifier resources and pricing.
• To communicate — sending the monthly Specifier Insider digest only to subscribers who opted in, replying to enquiries, and following up on quotes.
• To improve — understanding which content, systems, and pages help architects and trade users, so we invest in what is actually useful.
• Legal & security — preventing fraud, enforcing terms, and complying with valid legal requests.

3. Cookies & tracking

We use a small number of first-party cookies:

• Session cookies — keep you signed in; expire when you close the browser.
• Campaign attribution — when you click a tracked link in one of our emails, we set a 30-day cookie so any quote or download you generate is credited to that campaign internally. Anonymous to third parties.
• Visit analytics — a first-party cookie named ts_vid holds a random identifier for your browser. It expires after 180 days and is never shared with third parties or used for advertising.
• Analytics — Google Analytics (GA4 measurement ID G-T3R63YBKM8). We do not enable Google Signals or cross-device personalisation. You can opt out via your browser settings or a tool like the Google Analytics Opt-out Add-on.
• Meta Pixel — Meta Platforms' advertising pixel (ID 1469794835167770) records that a page on this site was viewed, so we can measure our advertising and show our adverts on Facebook and Instagram to people who have visited the site. Meta may connect this to a Facebook or Instagram account under its own privacy policy. You can limit it in your Facebook and Instagram ad preferences, or by blocking third-party cookies in your browser.

Links in our emails carry a short signed code identifying the email you received. It is removed from the address as soon as the page opens.

We do not record visits from browsers that send Global Privacy Control or Do Not Track, from browser prefetching, or from automated crawlers.

Retention. Activity that has never been linked to a person is deleted after 180 days. Activity linked to a person is deleted 24 months after their last visit.

You can clear the cookie at any time in your browser settings, or ask us to delete your activity by writing to the address in section 11.

We do not run any other advertising, retargeting or social-media tracking on this site.

4. Email & SMS

Outbound email is sent via Mailjet. We never share email lists with third parties. Newsletter subscriptions use double opt-in — you must click a confirmation link before we send the digest. Every commercial email contains a one-click unsubscribe link, and unsubscribe requests are honored within one business day. Replies to our marketing emails land at concierge@techstone.com.ph and are read by a human.

5. Data sharing

We share data only with service providers required to operate the platform:

• Mailjet — email delivery and engagement tracking.
• vTiger — our internal CRM, hosted on infrastructure we control.
• Google Analytics — aggregate site analytics.
• Meta Platforms — advertising measurement and retargeting through the Meta Pixel.
• Hosting & security — Cloudflare and our managed Linux hosts.

We do not sell, rent, or trade personal data. We will only disclose data to law-enforcement or regulators when compelled by valid legal process under Philippine law.

6. Retention

• Account records — for the life of the account, plus 24 months after closure.
• Enquiry & quote records — 5 years (commercial-record retention).
• Newsletter subscribers — until you unsubscribe; the row is kept (with unsubscribed_at set) so we don't accidentally re-add you.
• Engagement & analytics events — 26 months.
• Visit analytics — activity never linked to a person, 180 days; activity linked to a person, 24 months after the last visit (see section 3).
• Server logs — 90 days unless flagged for security investigation.

7. Your rights

Under the Data Privacy Act you have the right to be informed, to access, to object, to erasure or blocking, to rectify, to data portability, to file a complaint, and to claim damages where applicable. To exercise any of these rights, email concierge@techstone.com.ph. We respond within ten (10) business days.

8. Security

Data is encrypted in transit (TLS 1.2+). Passwords are stored as bcrypt hashes — we cannot read them and never email them in plaintext. Access to internal systems is limited to authenticated TechStone staff on a need-to-know basis.

9. Children

The site is intended for professional and commercial use. We do not knowingly collect data from anyone under 18. If you believe we have, contact us and we will delete it.

10. Changes to this policy

We may update this policy as the platform evolves. The "Last updated" date at the top reflects the most recent change. Material changes (new data categories, new providers, retention extensions) are announced via the newsletter or a banner on the site for 30 days.

11. Contact

TechStone Architectural Coating Systems
concierge@techstone.com.ph
techstone.com.ph

This is a baseline privacy policy reflecting how the platform actually operates as of May 2, 2026. TechStone Operations should review with counsel before further marketing campaigns and update the "Last updated" date when material changes are deployed.