Privacy Policy

GV Prime Enterprise ("we", "us", "our") respects your privacy. This policy explains what personal data we collect, why, and what you can do about it. We handle personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

1. Information We Collect

• Contact details: name, work email, phone number, job title, and company, collected when you contact us, request a quote, or become a client
• Business information: company details and the requirements you share so we can scope and deliver work
• Account data: credentials and activity records for the client portal, including support tickets and invoices
• Technical data: IP address, browser and device information, and server logs generated when you use the site
• Client operational data: where an engagement requires it, data within your Microsoft tenant or systems that we access to deliver the service

We do not seek sensitive personal information through this website. Please don't send us government IDs, financial account numbers, or health information by email or web form.

2. How We Use It

We rely on your consent, the performance of a contract with you, our legitimate business interests, and compliance with legal obligations, as applicable.

3. Marketing

We may send occasional updates about our services to business contacts. Every such message includes a way to unsubscribe, and we act on opt-outs promptly. We do not sell your personal data, and we do not share it with third parties for their own marketing.

4. Who We Share It With

We share personal data only where needed to run our business, and under appropriate confidentiality and data-protection obligations:

• Microsoft, as our vendor for CSP licensing and cloud services, and where required to provision or support your subscriptions
• Cloud and infrastructure providers, who host our website and systems on our behalf
• Software providers, for functions such as email, ticketing, and CRM used to deliver and support our services
• Professional advisers and authorities, where required by law or to establish or defend legal claims

Some of these providers operate outside the Philippines, so your data may be processed abroad. Where that happens we take reasonable steps to ensure it remains protected to a comparable standard.

5. Artificial Intelligence

We use AI features in some of our services, for example summarising a support request or scoring an inbound enquiry. Where we do:

• We do not use your data to train AI models, not our own and not anyone else's
• Processing runs through established AI providers under agreements that do not permit your content to be used to train their public models
• AI assists our people; decisions that materially affect you are reviewed by a human

6. How We Protect It

The safeguards we actually operate include:

• Encryption of data in transit (HTTPS) and encryption at rest for stored data
• Access limited to the people who need it, with multi-factor authentication on administrative accounts
• Hashed credentials, so we never store portal passwords in readable form
• Separation of client environments, and least-privilege access to client tenants
• Logging and monitoring of administrative activity

No system is perfectly secure, and we don't claim otherwise. If a breach affects your personal data, we will notify you and the National Privacy Commission as required by law.

7. How Long We Keep It

We keep personal data only as long as needed for the purpose it was collected. Client and financial records are retained for the periods required by Philippine tax and accounting law. Enquiries that don't become engagements are cleared out once they are no longer relevant. When data is no longer needed, we delete or anonymise it.

8. Your Rights

Under the Data Privacy Act, you have the right to:

• Be informed about how your personal data is processed
• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Object to processing, or withdraw consent where processing relies on it
• Erasure or blocking of data in the circumstances the law provides
• Data portability, where applicable
• Damages for a violation of your rights, and to lodge a complaint

To exercise any of these, email privacy@gvprime.com. We will respond within a reasonable period, and normally within 30 days. You may also complain to the National Privacy Commission at privacy.gov.ph, though we'd appreciate the chance to put things right first.

9. Where We Act for a Client

When we process data inside a client's Microsoft tenant or systems to deliver a service, the client is the personal information controller and we act on their instructions. If your data sits in a client's environment, please raise your request with that organisation, and we'll support them in responding.

10. Cookies

We use no advertising or analytics cookies on this website. What we do store is set out in our Cookie Policy.

11. Changes to This Policy

We may update this policy as our services or the law change. The current version is always posted here with a revised "Last Updated" date. Where a change materially affects how we use your data, we will take reasonable steps to tell you directly.

12. Contact Us

For privacy matters, including any request about your data: