Privacy policy

This website is operated by T.D Ambon Law Office (“the Office”). This policy explains how personal data submitted through the website is collected, used, stored, and protected, in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

We collect only the information needed to review and act on your request:

• Contact details — your name, email address, and phone number.
• Request details — the service you need, your description of the concern, preferred dates and times, and any details you choose to include.
• Payment records — when you pay a consultation fee or quotation, payment is processed by PayMongo. The Office receives confirmation of payment (amount, reference, status) but never sees or stores your card or e-wallet credentials.
• Technical data — basic security signals processed by Google reCAPTCHA to protect the forms from abuse, and an authentication cookie used only for the Office's own staff login.

Your data is used to review your request, contact you about it, schedule appointments, prepare quotations, process payments, and keep records the Office is required to keep. The legal bases are your consent (given when you tick the consent box on a form) and the steps necessary to act on your request before and during an engagement.

Your data is never sold, rented, or used for advertising.

The Office uses a small number of service providers to run this website. Each receives only what it needs to perform its function:

• Supabase — secure database hosting for request records.
• Vercel — website hosting.
• PayMongo — payment processing for consultation fees and quotations.
• Resend — sending transactional emails about your request.
• Google — reCAPTCHA form protection, and calendar/meeting invitations when an online consultation is scheduled.

This website does not use advertising or analytics cookies. The only cookies in use are strictly necessary ones: a session cookie for the Office's staff login area, and cookies set by Google reCAPTCHA to distinguish genuine visitors from automated abuse.

Request records are kept for as long as needed to handle your matter and to satisfy the record-keeping obligations that apply to law practice, after which they are securely deleted. You may request earlier deletion of records that the Office is not legally required to retain.

Records are stored in a database with row-level access controls; public visitors cannot read submitted requests, and only authenticated Office personnel can access them. Connections to the website are encrypted (HTTPS). Payment credentials are handled solely by PayMongo.

Under the Data Privacy Act you have the right to be informed, to access the personal data we hold about you, to correct inaccurate data, to object to processing, to request deletion or blocking, to data portability, and to be indemnified for damages caused by misuse of your data. You also have the right to lodge a complaint with the National Privacy Commission (privacy.gov.ph).

To exercise any of these rights, contact the Office using the details on the Contact page. We will respond within the periods required by law.

Submitting a form creates a request for review — it does not by itself create an attorney-client relationship. Please do not include highly sensitive details in an initial request; those are better discussed once the Office has taken on your matter.

If this policy changes, the updated version will be posted on this page with a revised date. Continued use of the website after changes are posted constitutes acceptance of the updated policy.