Privacy notice
Last reviewed: 25 October 2026
This information is intended to explain clearly how a business enquiry is handled.
Who this notice covers
This notice explains how personal information submitted through the Prima Bookkeeping website is processed when you request a quotation or send an enquiry. It does not replace a separate client privacy notice or data-processing agreement that may be needed for an engagement involving your accounting records.
Controller and how to contact us
Primabookkeeping Services is a DTI-registered sole proprietorship based at 8064 Pelaez St., San Dionisio, Parañaque City, Philippines. Primabookkeeping Services is the business name used by the personal information controller for website enquiries. You may contact the business through the website contact form. For privacy requests, contact us through the website enquiry form. Do not include sensitive personal information or confidential financial records in your message.
Personal information collected
Enquiries can include your name, business email address, company, country, business type, service interest, approximate transaction volume and the contents of your message. Technical information such as IP addresses, request metadata and server security logs may also be processed by hosting or security providers. Do not send client ledgers, bank account credentials, identity documents or sensitive financial records through this form.
Purposes and lawful bases
We use information you provide to review and respond to your enquiry, provide requested quotations, and discuss steps toward an engagement. The primary framework is the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. Processing a request may rely on Section 12(b), steps requested before a contract, or Section 12(f), legitimate interests where those interests are not overridden by the data subject’s rights. Security logging may rely on legitimate interests and compulsory disclosures on legal obligation where applicable. The actual purposes and conditions must be documented; the relevant UK or EU GDPR may also apply to particular international targeting or processing. We do not treat acceptance of this notice as consent to unrelated marketing.
Who receives the information
Website hosting and infrastructure services are provided through Vercel. The enquiry submission service uses Resend to route enquiry messages to an authorised business inbox. Email providers, hosting providers and security service providers may process limited information on our behalf. The identity of the final mailbox provider and any other subcontractors must be verified from the live infrastructure. We do not sell enquiry information.
International processing and transfers
Website and email infrastructure may process information in countries outside the place where you live. Philippine law applies to the Philippine controller, and additional UK or EU GDPR obligations may apply where their territorial scope is met. International access and processing must be covered by appropriate processor safeguards, confidentiality, security and legally required arrangements. Appropriate safeguards may include applicable adequacy decisions or approved contractual mechanisms, accompanied by transfer assessments where required. The exact processing locations and safeguards must be confirmed from provider contracts before this notice is treated as final.
Retention
We aim to keep enquiries only for as long as needed to respond, assess a potential engagement, handle disputes and meet applicable legal obligations. No fixed retention period is stated until Prima adopts and implements a documented schedule that covers emails, inbox archives, security logs and backups. If you request erasure, statutory or legitimate retention exceptions may still apply.
Your rights
Under the Philippine Data Privacy Act of 2012, data subjects have rights including to be informed, to access and correct personal data, to object in appropriate circumstances, and to seek erasure or blocking and damages where the law provides. Complaints may be submitted to the Philippines National Privacy Commission. Where UK or EU GDPR also applies, additional rights and relevant supervisory authorities may apply. We will verify identity appropriately before disclosing personal information.
Marketing, cookies and analytics
The website contact form is for responding to enquiries; submitting it does not subscribe you to marketing messages. Strictly necessary technical cookies may be used where required for operation or security. Any non-essential analytics, advertising tags, remarketing or tracking cookies must be audited and, where applicable, held back until valid consent is obtained. This notice must be updated before new tracking or marketing activity starts.
Security and changes
We seek to use controlled access, access-limited accounts and appropriate security protections. Internet transmissions carry risks, so please use a secure channel agreed separately for confidential accounting material. This notice will be reviewed when service providers, processing purposes, the legal entity or applicable law changes.