Information We Collect

When you work with ExpandProfile, we collect different types of information to provide our cost management services effectively. Here's what we gather and why we need it.

Personal Information You Provide

• Contact details like your name, email address, phone number, and business address in the Philippines
• Business information including company name, industry sector, and organizational structure
• Financial data such as expense records, budget information, and transaction histories
• Communication records when you reach out to us through email, phone, or our contact forms

Information Collected Automatically

Some data gets collected when you interact with our website. This helps us improve your experience and understand how people use our services.

• Browser type, operating system, and device information
• IP address and general location data (city and region level)
• Pages visited, time spent on site, and navigation patterns
• Referral sources and search terms used to find our website

How We Use Your Information

Your data serves specific purposes that directly relate to providing and improving our cost management services. We don't use your information for unrelated activities.

Data Protection and Security

Protecting your financial information is something we take seriously. We've implemented multiple security measures to keep your data safe from unauthorized access or breaches.

• Industry-standard encryption for data transmission and storage using TLS 1.3 protocols
• Secure servers hosted in certified data centers with 24/7 monitoring and redundancy systems
• Regular security audits and vulnerability assessments conducted by independent third parties
• Access controls limiting who can view your data to only authorized team members working on your account
• Employee training on data privacy practices and confidentiality requirements
• Secure backup systems with encrypted storage to prevent data loss

While we maintain strong security practices, no system is completely immune to risks. We continuously update our security measures to address emerging threats and maintain the highest protection standards possible.

Information Sharing and Disclosure

We keep your information within our organization, but there are specific situations where we might need to share limited data with others. Here's when that happens.

Service Providers

We work with trusted third-party companies that help us operate our business. These providers have access only to the information necessary for their specific functions.

• Cloud storage providers for secure data hosting
• Email service platforms for client communications
• Payment processors for handling financial transactions
• Analytics tools for website performance monitoring

Legal Requirements

We may disclose your information if required by Philippine law, court orders, or government requests. This includes situations involving fraud prevention, legal proceedings, or protecting someone's safety.

Your Privacy Rights

Under the Data Privacy Act of 2012 in the Philippines, you have several rights regarding your personal information. We respect these rights and make it straightforward for you to exercise them.

How to Exercise Your Rights

Send an email to help@expandprofile.com with your request. Include your name, contact information, and specific details about what you'd like us to do. We'll respond within 30 days and verify your identity before processing the request to ensure your data stays secure.

Data Retention

We don't keep your information forever. How long we retain data depends on why we collected it and legal requirements that apply to financial records.

• Active client data: Maintained throughout our business relationship and for one year after service ends
• Financial records: Kept for seven years as required by Philippine tax and accounting regulations
• Communication records: Stored for three years to maintain service quality and resolve potential disputes
• Website analytics: Aggregated data retained indefinitely; individual user data deleted after two years
• Marketing data: Removed within 90 days if you unsubscribe or request deletion

After these periods, we securely delete or anonymize your information so it can no longer identify you. Some data might be retained longer if legally required or if there's an ongoing dispute or investigation.

Cookies and Tracking

Our website uses cookies and similar technologies to improve your browsing experience and understand how visitors use our site. You have control over these technologies.

Types of Cookies We Use

• Essential cookies: Required for basic website functionality like security and access to protected areas
• Analytics cookies: Help us understand visitor behavior and improve our website performance
• Preference cookies: Remember your settings and choices for a better experience

You can manage cookie preferences through your browser settings. Disabling certain cookies might affect some website features, but essential functions will still work. Most browsers accept cookies automatically, but you can modify settings to decline them if you prefer.

Children's Privacy

Our services target businesses and professionals, not children. We don't knowingly collect information from anyone under 18 years old. If we discover we've accidentally gathered data from a minor, we'll delete it immediately. Parents or guardians who believe we might have information about their child should contact us right away.

International Data Transfers

While we primarily operate in the Philippines, some of our service providers are located in other countries. When your data crosses international borders, we ensure it receives adequate protection through:

• Standard contractual clauses approved by data protection authorities
• Verification that recipient countries have adequate data protection laws
• Additional security measures for sensitive financial information
• Regular audits of international data transfer practices

Your data rights remain protected regardless of where information is processed. If you have concerns about international transfers, contact us for specific details about where your data goes.

Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we'll notify you within 72 hours of discovering the incident. The notification will include what happened, what data was affected, and steps we're taking to address the situation. We'll also inform the National Privacy Commission as required by Philippine law.

Changes to This Policy

We update this privacy policy occasionally to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we'll notify you through email or a prominent notice on our website at least 30 days before the new policy takes effect.

Minor updates like clarifications or formatting changes won't trigger notifications, but we'll always update the "Last Updated" date at the top. We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Us About Privacy

Questions about this privacy policy or how we handle your data? We're here to help. Reach out through any of these channels:

We typically respond to privacy inquiries within 48 hours during business days. For urgent matters related to data breaches or security concerns, call us directly for immediate assistance.