Privacy language should match the office's actual data handling process.

The final policy should explain what personal data is collected, why it is collected, how request records are stored, who may access uploaded documents, and how the office handles retention, review, and deletion requests.

• - Submissions are requests for review and do not automatically create an attorney-client relationship.
• - Uploaded documents should be limited to files necessary for initial review and processing.
• - Specific retention and disclosure rules should be finalized with the office before launch.

Before launch, the wording should be reviewed against the office's actual operational practices and the applicable requirements under the Philippine Data Privacy Act of 2012.