1. Who We Are

GMZ Management Consultancy, operating publicly through GMZ Business Solutions, provides digital solutions and business consulting services.

For purposes of applicable Philippine data privacy law, GMZ Management Consultancy acts as the Personal Information Controller for personal data collected through this website.

Website: gmzbusinesssolutions.com

Privacy and data inquiries: hello@gmzbusinesssolutions.com

2. Personal Information We Collect

When you contact us through our website, we may collect information that you voluntarily provide, including:

• Your name
• Email address
• Contact number, if provided
• Company or organization, if provided
• Services you are interested in
• Information you include in your inquiry, project description, or message
• Any other information you voluntarily provide while communicating with us

We do not intentionally request sensitive personal information through our general inquiry form. Please avoid submitting sensitive or confidential information unless it is necessary for your inquiry.

• IP address
• Browser and device information
• Date and time of access or submission
• Server and security logs
• Information required to prevent spam, abuse, or unauthorized activity

Our website and supporting systems may also automatically process limited technical information, such as:

3. Why We Process Your Information

We may process personal information for the following purposes:

• Responding to inquiries and requests
• Understanding your business needs, requirements, or concerns
• Discussing potential services or engagements
• Preparing proposals or taking steps requested before entering into an agreement
• Communicating about an existing or potential project
• Maintaining appropriate records of business communications
• Protecting our website, systems, and users against spam, fraud, abuse, or security threats
• Meeting applicable legal, regulatory, accounting, contractual, or business obligations

We do not use information submitted through our general inquiry form for unrelated direct marketing without an appropriate legal basis or separate consent where required.

Depending on the circumstances, the processing of personal information may be based on your consent, steps taken at your request before entering into a contract, compliance with a legal obligation, or another lawful basis permitted by applicable law.

4. Contact Form and Consent

When you submit an inquiry through our website, you are asked to acknowledge the collection and use of the information you provide for the purpose of responding to your inquiry.

Providing information through our contact form is voluntary. However, certain information, such as your name, email address, and inquiry details, may be necessary for us to respond meaningfully.

Your consent to the use of information for responding to an inquiry does not automatically constitute consent to receive unrelated marketing communications.

5. Cookies, Security, and Anti-Spam Technologies

Our website uses cookies and similar technologies for website functionality, security, form processing, consent management, and website analytics.

Some cookies are necessary for the website to function properly and may be used without requiring consent. Other cookies, including statistics cookies, are used only after you provide the applicable consent through our cookie banner.

Google Analytics

We use Google Analytics 4 (GA4) to understand how visitors use our website and to help us improve our content, services, and overall website experience.

Analytics information may include:

• Pages viewed and navigation activity
• Approximate location derived from network information
• Browser and device characteristics
• Referral or traffic source information
• Date, time, and duration of website interactions
• Other technical and usage information used to generate website statistics

Google Analytics may use first-party cookies, including cookies beginning with _ga, to distinguish browsers and measure website usage.

We have configured our website so that Google Analytics does not load unless a visitor provides consent for Statistics cookies through our consent banner. If Statistics consent is declined, Google Analytics remains blocked under our current consent-management configuration.

We have also disabled optional Google Analytics data-sharing settings that permit Analytics information to be used for broader Google products and services. We currently do not use Google Analytics for advertising, remarketing, or personalized advertising.

Analytics Data Retention

We have configured Google Analytics to retain applicable user-level and event-level analytics data for up to 14 months.

We have also disabled the option to reset the user-data retention period when a visitor returns to the website. This means the retention period is not automatically extended simply because a visitor comes back.

The Google Analytics retention setting primarily applies to user-level and event-level data used for detailed analysis. Aggregated statistics available through standard Analytics reporting may remain available beyond this period.

Visitors may withdraw or change their Statistics consent at any time through the website’s Manage Consent controls.

Consent Management

We use Complianz to manage cookie and statistics consent on this website.

Visitors can:

• Accept permitted categories of cookies
• Decline non-essential cookies
• Review their preferences
• Change or withdraw their consent later using the website’s Manage Consent controls

Non-functional cookies that require consent are blocked until the appropriate consent is provided.

More detailed information about cookies and services used on this website is available in our Cookie Policy.

Security and Anti-Spam Technologies

We use Cloudflare Turnstile to help distinguish legitimate website visitors and form submissions from automated or potentially abusive activity.

Our hosting and security systems may also generate technical logs and process information necessary for:

• Website security
• Troubleshooting
• Performance monitoring
• Spam and abuse prevention
• Incident investigation
• Reliable website operation

6. Who May Receive or Process Your Information

We do not sell personal information.

Personal information and technical information may be processed by authorized personnel of GMZ Management Consultancy and by service providers that support our website, communications, analytics, security, and business operations.

These providers may include providers of:

• Website hosting and server infrastructure
• Business email and email delivery
• Website security and anti-spam services
• Website forms and content-management systems
• Website analytics and statistical reporting
• Consent and cookie-management services
• Technical support and maintenance

Our current website infrastructure and services include:

• Namecheap — hosting and email-related infrastructure
• Google Analytics 4 — website traffic and usage statistics, subject to visitor consent
• Complianz — cookie and consent management
• Cloudflare Turnstile — bot and spam protection

We may also disclose personal information when required by applicable law, regulation, court order, legal process, or a lawful request from an authorized government or regulatory authority.

7. Processing or Storage Outside the Philippines

Some technology and service providers we use, including Google and other infrastructure providers, may process or store information using systems or facilities located outside the Philippines.

As a result, personal or technical information may be processed in jurisdictions that have different privacy and data-protection laws.

Where applicable, we take reasonable steps to use reputable service providers and safeguards intended to protect personal information consistently with applicable privacy requirements.

8. How Long We Keep Information

We retain personal information only for as long as reasonably necessary to fulfill the purpose for which it was collected, for legitimate business purposes, for the establishment or defense of legal claims, or as otherwise required by law.

As a general practice:

• Website inquiries and related communications may be retained for up to 24 months after the last meaningful interaction
• If an inquiry develops into a client relationship, relevant records may be retained throughout the engagement and afterward as necessary for contractual, tax, accounting, legal, or regulatory purposes
• Technical and security records may be retained for periods reasonably necessary for security, troubleshooting, abuse prevention, and incident investigation

Where information is no longer reasonably required, we will take appropriate steps to delete, anonymize, or otherwise securely dispose of it.

Philippine privacy rules require personal data not to be retained longer than necessary for its declared purpose, legitimate business needs, legal claims, or requirements imposed by law.

9. Your Cookie and Analytics Choices

You can choose whether to allow Statistics cookies when you visit our website.

If you decline Statistics cookies, Google Analytics will not be permitted to load through our current consent-management configuration.

If you previously accepted Statistics cookies, you can later change or withdraw your choice using the Manage Consent feature available on the website.

Withdrawing consent does not affect processing that lawfully occurred before consent was withdrawn.

You can also review our Cookie Policy for more information about the cookies and technologies used on this website.

Complianz uses functional consent-related cookies and browser storage to remember a visitor’s consent choices.

10. How We Protect Personal Information

We use reasonable organizational, technical, and administrative safeguards appropriate to the nature of the information we process.

These measures may include:

• HTTPS/SSL encryption for the website
• Authenticated website administration
• Spam and automated-submission protection
• Authenticated email delivery
• Access controls
• Website, server, and account security measures
• Limiting access to personal information to persons who reasonably require it for legitimate purposes

No website, transmission method, or storage system can guarantee absolute security. However, we take reasonable measures designed to protect personal information against unauthorized access, use, alteration, disclosure, loss, or misuse.

11. Your Rights as a Data Subject

Under the Philippine Data Privacy Act, you may have rights regarding personal information processed about you, subject to applicable conditions and limitations.

These include:

• Right to be informed
• Right to access your personal information
• Right to object to certain processing
• Right to rectify inaccurate or incomplete information
• Right to erasure or blocking where applicable
• Right to data portability where applicable
• Right to file a complaint with the National Privacy Commission
• Right to claim damages in circumstances provided by law

The NPC recognizes these among the principal rights of data subjects under Philippine privacy law.

To exercise a privacy right or ask a question concerning your personal information, contact:

hello@gmzbusinesssolutions.com

We may request reasonable information to verify your identity before fulfilling certain requests.

12. Third-Party Websites and Services

Our website may contain links to websites, social media platforms, applications, or services operated by third parties.

We do not control and are not responsible for the privacy practices, content, or security of third-party websites and services.

We encourage you to review the privacy notices of third-party services before providing personal information to them.

13. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes to:

• Our business or services
• Website functionality or technologies
• Service providers
• Personal data processing activities
• Security practices
• Applicable legal or regulatory requirements

Material changes affecting how personal information is processed will be reflected in an updated Privacy Notice and, where required, communicated through appropriate means.

The effective date displayed at the beginning of this Privacy Notice indicates when the notice was last updated.

14. Contact Us

For questions, requests, or concerns regarding this Privacy Notice or personal information processed through our website, please contact:

GMZ Management Consultancy
Operating through GMZ Business Solutions

Email: hello@gmzbusinesssolutions.com
Website: gmzbusinesssolutions.com

You may also contact or file a complaint with the National Privacy Commission regarding your rights under Philippine data privacy law.