Privacy Policy

HelloTap respects your privacy and is committed to protecting personal information in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable privacy regulations.

This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices and rights available to you when using HelloTap.

1. Who We Are

HelloTap provides NFC-enabled business cards and digital professional profiles that allow customers to share contact information, business details, and social media links through a simple tap or profile link.

For purposes of this Privacy Policy, HelloTap is the public-facing name of the service. The legal identity and registered business details of the operator should be inserted here before publication:

Business or legal name: HelloTap

Business address: Dungon B, Jaro, Iloilo City, Iloilo 5000, Philippines

Privacy contact: hellotap2026@gmail.com

2. Personal Information We Collect

Depending on how you interact with HelloTap, we may collect the following information:

• Account information: Name, email address, account identifier, and authentication information needed to create and manage your customer account.
• Professional profile information: Name, job title, company name, biography, phone number, public email address, and other details you choose to add.
• Profile content: Profile photographs, cover images, social media links, business details, and other content you upload or submit.
• Communications: Information you provide when contacting us for inquiries, support, orders, or other service-related matters.
• Technical information: Information that may be generated through website access, authentication, hosting, and security processes, such as IP addresses, browser information, and technical logs, where collected by our service providers.

Please do not submit sensitive personal information unless it is specifically necessary and an appropriate lawful basis and safeguards are in place.

3. How We Use Your Information

We may process your information for the following purposes:

• Creating and managing customer accounts.
• Providing and maintaining your digital profile.
• Configuring and associating your NFC business card with your profile.
• Displaying the information you choose to publish.
• Allowing you to update your profile information and images.
• Responding to customer inquiries and providing support.
• Managing orders and fulfilling requested services.
• Maintaining website security and preventing unauthorized access.
• Complying with applicable legal and regulatory obligations.

We will not use your personal information for unrelated purposes without an appropriate lawful basis and any consent required by applicable law.

4. Lawful Basis for Processing

Under the Philippine Data Privacy Act, personal information must be processed on a lawful basis. Depending on the circumstances, HelloTap may rely on:

• Contractual necessity: Processing needed to create your account, provide your digital profile, fulfill orders, and deliver requested services.
• Consent: Where you voluntarily choose to provide information or authorize its publication, and where consent is the appropriate legal basis.
• Legal obligation: Processing required to comply with applicable laws and regulations.
• Legitimate interests: Processing reasonably necessary for service security, fraud prevention, troubleshooting, and legitimate business operations, provided your rights and freedoms are not overridden.

5. Public Digital Profiles and NFC Cards

HelloTap allows customers to create digital profiles that may be accessed through an NFC card or a direct profile link.

When you publish your profile, information you have chosen to display may become publicly accessible to anyone who visits your profile. This may include:

• Your name and professional title.
• Your company or business name.
• Your biography and profile information.
• Your selected contact details.
• Your profile photograph and cover image.
• Your social media and other profile links.

Do not publish information or photographs that you do not want publicly accessible. You are responsible for ensuring that you have the necessary rights or permission to upload photographs, logos, and information belonging to other people or organizations.

You may unpublish your profile through the available account controls. Unpublishing makes the profile unavailable through its normal public profile page. However, because profile images are stored in a public storage bucket, a person who already has a direct image URL may still be able to access that image until it is removed or its accessibility changes. Unpublishing a profile does not automatically guarantee removal of previously shared copies, browser caches, or third-party copies.

6. Where Your Information Is Stored and Who Processes It

HelloTap uses third-party technology providers to operate its customer portal and related services.

• Supabase: Used for customer authentication, database services, and storage of profile images and related files.
• Website hosting provider: Used to host and deliver the HelloTap website and its public pages. The production hosting provider and configuration will be identified in our final deployment documentation.
• Email provider: Used for business communications and customer support.

These providers may process information on our behalf to deliver their services. Depending on their infrastructure and configuration, information may be stored or processed outside the Philippines. We will take reasonable steps to use appropriate contractual, organizational, and technical safeguards for such processing.

We do not sell customer personal information. We do not disclose personal information to unrelated third parties for their independent marketing purposes without an appropriate lawful basis.

Information may also be disclosed when required by law, valid legal process, or to protect the rights, safety, and security of HelloTap, its customers, or other persons.

7. Data Retention

We retain personal information only for as long as it is reasonably necessary to provide our services, maintain customer accounts, fulfill contractual obligations, resolve disputes, maintain security, and comply with applicable legal requirements.

When an account is closed or a valid deletion request is approved, we will take reasonable steps to delete or anonymize information that is no longer necessary to retain, subject to legal obligations, legitimate claims, and applicable backup and system retention processes.

Information stored in backups or maintained by service providers may remain for a limited period under their applicable retention and deletion procedures.

8. How We Protect Your Information

HelloTap uses reasonable organizational and technical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction.

These measures include access controls, account authentication, database security policies, and restrictions on customer access to account information.

No website, storage system, or method of electronic transmission can be guaranteed to be completely secure. We therefore cannot promise absolute security, but we take reasonable measures to protect the information entrusted to us.

9. Your Rights Under Philippine Data Privacy Law

Subject to applicable laws and limitations, you may exercise the following rights:

• The right to be informed about the processing of your personal information.
• The right to access your personal information.
• The right to correct inaccurate or incomplete information.
• The right to object to certain processing activities.
• The right to request erasure or blocking where legally permitted.
• The right to withdraw consent where processing is based on consent.
• The right to data portability where applicable.
• The right to claim damages as provided by law.
• The right to lodge a complaint with the National Privacy Commission.

To exercise these rights or ask questions about your personal information, contact us at: hellotap2026@gmail.com.

We may need to verify your identity before processing certain requests. Some information may need to be retained where required by law or where a lawful exception applies.

10. Cookies and Similar Technologies

Our website and customer portal may use browser storage, session technologies, or similar mechanisms necessary for account authentication, website functionality, and security.

Any additional analytics, advertising, or tracking technologies introduced in the future should be disclosed in this Policy and handled in accordance with applicable privacy requirements.

11. Third-Party Websites and Links

Customer profiles may contain links to third-party websites and social media platforms. When you visit those services, their own privacy policies and terms apply. HelloTap is not responsible for the privacy practices or content of external websites.

12. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology, or legal obligations change. The updated version will be published on this page with a revised effective or last-updated date.

If a change materially affects how we process personal information, we will provide notice where required by applicable law.

13. Contact and Privacy Requests

For questions, concerns, access requests, correction requests, or other privacy-related matters, contact:

HelloTap
Email: hellotap2026@gmail.com

If you believe your personal information has been processed in violation of applicable privacy law, you may also contact the Philippine National Privacy Commission through its official website: privacy.gov.ph .

Last updated: November 6, 2026. This document is a draft prepared for legal review. It should be reviewed and finalized against HelloTap's actual business registration, service providers, operational practices, retention procedures, and applicable legal requirements before publication.