What we do with your information

Who is responsible

BINES is the trading name of BINES Web Development Services, a sole proprietorship owned by Aeros Salaga and registered nationally with the Philippine Department of Trade and Industry. We are the personal information controller for everything described on this page, which means we decide what is collected and why, and we are accountable for it.

• Registered business name
  BINES Web Development Services (national scope)
• DTI Business Name No.
  8416165, valid 12 August 2026 to 12 August 2031
• Registered address
  Del Carmen Village, Matina Aplaya, Davao City, Region XI, Philippines
• Contact
  [email protected], +63 917 505 8583

For anything on this page, write to [email protected]. It reaches the owner directly.

What we collect, and only that

We have two forms on this site. Neither one asks for anything we do not need.

The contact form collects your name, your email address, the topic you pick, and your message.

The project intake form at /start/ collects what you are building, what it should do for your business, who will use it, the features and tools you need, your current website address if you have one, your timeline, how you would prefer to work with us, your name, your email address, your company name if you give one, and anything else you choose to add.

Our host and our security provider keep ordinary server logs, which include the IP address and browser type of visitors. We do not use those logs to build a profile of you. We never ask for payment card details, bank details, or government identification anywhere on this site.

The AI scoping pass, in plain terms

This is the part most privacy policies would bury, so we are putting it near the top. When you submit the intake form at /start/, your brief is sent to Anthropic, the company behind Claude, whose model drafts a first-pass scope and a list of clarifying questions. That draft comes back to us, not to you. A human being reads it, corrects it, and rewrites it before anything reaches your inbox.

What this means concretely: the text you type into that form, including your name, your email address, your company name, and how you describe your business, is processed on servers in the United States. Anthropic does not use data submitted through its business API to train its models, and retains it only briefly for abuse monitoring. Their privacy policy is linked above.

No decision that affects you is made by a model alone. The AI drafts, a person decides. If you would rather no AI touched your brief at all, email us instead of using the form and we will scope it by hand. You will not get a worse answer or a slower one.

The contact form does not go through any AI pass. It is emailed to us as you wrote it.

Why we are allowed to hold it

You gave it to us because you want something from us, so we use it to reply to you, to prepare a scope or a quote, and to carry out the work if you hire us. Under the Philippine Data Privacy Act of 2012 this rests on your consent and on the steps needed to enter into a contract with you. If you are covered by the GDPR or UK law, the equivalent bases are your consent and our legitimate interest in responding to a business enquiry you started.

We do not sell your information. We do not share it with advertisers. We do not add you to a marketing list because you filled in a form, and we will not email you about anything other than the thing you contacted us about unless you ask us to.

Who else touches it

Running a studio takes a handful of services. Each one below sees only what it needs, and each is bound by its own contract with us.

• Anthropic
  Drafts the first-pass scope from your intake brief. United States.
• Resend
  Delivers the form submissions to our inbox as email. United States.
• Zoho Mail
  Hosts the inbox where your message lands and where we reply from.
• Cloudflare
  Serves and protects this website, gives us anonymous visit counts, and runs the bot check on our two forms.
• Bluehost
  Hosts the website files and the two form endpoints.

Some of these are based outside the Philippines, so your information crosses borders. That does not reduce our responsibility for it. Under the Data Privacy Act we stay accountable for anything we hand to a processor, and we picked these providers on that basis.

Cookies, and why there is no banner

You did not get a cookie pop-up on this site, and that is deliberate rather than an oversight. We do not run Google Analytics, we do not run a Meta pixel, and we do not run any advertising or cross-site tracking of any kind. Our visit counts come from Cloudflare Web Analytics, which does run a small script on the page but sets no cookie, builds no profile, and cannot follow you to any other website. The fonts are served from our own domain, so loading a page does not tell anyone else that you were here.

Two small things do get stored, and here they are:

• bines-market
  Remembers whether you asked to see prices in dollars or pesos, so the page does not forget between visits. It stays in your browser and is never sent to us.
• __cf_bm
  Set by Cloudflare to tell real visitors from bots. It is a security cookie, it expires within the hour, and the site cannot be protected without it.

Neither is used to track you, which is why neither requires consent. If we ever add analytics or advertising that does, we will ask you first, and this page will say so before it happens. Clearing your browser storage removes both.

Our two forms also run Cloudflare Turnstile, a bot check that replaces the puzzles you may be used to. Usually you will not have to do anything, and it is there so that automated submissions do not drown the real ones. It checks the browser rather than the person, it does not read what you typed, and it is not advertising, which is why it needs no consent either. If it cannot load, your message still sends.

How long we keep it

If you enquire and we never end up working together, we keep the exchange for 24 months in case you come back to us, then delete it. If you become a client, we keep project records for as long as the work is live and afterwards for as long as Philippine tax and accounting rules require us to keep our books.

Ask us to delete you sooner and we will, except for the few records we are legally obliged to retain. We will tell you plainly if anything falls into that category.

What you can ask us to do

The Data Privacy Act gives you real rights, not decorative ones. You can ask us to:

• tell you what we hold about you, and give you a copy
• correct anything that is wrong or out of date
• delete it, or stop using it, when we no longer have a good reason to hold it
• hand it to you in a portable format, or send it somewhere else
• stop processing it, including withdrawing consent you gave earlier
• have a human, rather than a model, handle your brief

Email [email protected] and we will act within 15 working days. There is no charge, and you do not need to explain why.

If we get it wrong, you can complain to the National Privacy Commission at privacy.gov.ph. If you are in Australia, New Zealand, the European Economic Area, or the United Kingdom, you have equivalent rights under your own law and your own regulator, and the same email address reaches us.

Keeping it safe

The site is served over HTTPS and sits behind Cloudflare. The form endpoints validate and cap what they accept, and reject automated submissions without telling the bot why. Our keys and credentials live outside the code, so client information never lands in a public repository.

No one can promise perfect security and we are not going to. What we can promise is that if something happens that puts your information at risk, we will tell you and the National Privacy Commission, and we will not wait to be asked.

Children

This is a business service and it is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has sent us something, email us and we will remove it.

Changes to this page

If we change how we handle your information, we will update this page and change the date at the top. If the change is significant, and particularly if it affects anyone who has already sent us something, we will email the people it affects rather than quietly editing the page.