Legal
Privacy policy
Last updated
This is a personal portfolio. It has no accounts, no shop, and no tracking. The only personal data it ever receives is what you choose to type into the contact form. This page says what happens to it.
Who is responsible
Cyril Olanolan, an individual (sole proprietor), not a registered company, based in Davao City, Philippines. For anything on this page, including a request to see or delete your data, email hey@cyrilolanolan.com.
What is collected
The contact form asks for three things, and sends exactly those three things to me by email:
- 01Your name, so I know who I am replying to.
- 02Your email address, so I can reply at all.
- 03Your message.
Nothing else. There is no hidden field, no fingerprinting, and no profile built from what you read. If you never use the form, this site holds nothing about you.
Why, and on what basis
To answer you, and nothing else. Under the EU and UK GDPR that is a legitimate interest, and where you are asking about work, it is steps taken at your request before a contract. Under the Philippine Data Privacy Act of 2012 it is your consent, which the checkbox on the form records. Withdraw it by emailing me and I will delete the message.
Your details are never added to a mailing list and never used to market anything to you.
Who else sees it
Two companies, both because the site runs on their infrastructure.
- 01Vercel hosts the site and runs the form’s endpoint. Like every web host it logs requests, which includes IP addresses. Those logs are Vercel’s, they are kept briefly, and I do not use them to identify anyone.
- 02Resend is the mail provider that delivers the form to my inbox. Your name, address and message pass through it, as they would through any mail server.
Nobody else. Nothing here is sold, rented, or handed to an advertiser.
Where it goes
I am in the Philippines and both providers are in the United States, so a message sent from the EU or the UK leaves that region. Vercel and Resend both offer the EU Standard Contractual Clauses for exactly this. If that is a problem for you, email me directly instead of using the form.
How long it is kept
Your message sits in my inbox. I keep enquiries that turn into work for as long as the working relationship and its records need, and I clear the rest within about a year. Ask me to delete yours sooner and I will.
Your rights
You can ask what I hold about you, ask for a copy, ask me to correct it, or ask me to delete it. If the GDPR applies to you, you can also object to my handling of it and complain to your national supervisory authority. If the Philippine Data Privacy Act applies, you can complain to the National Privacy Commission.
One email to hey@cyrilolanolan.com starts any of that. No form, no account. I answer within 30 days.
Children
This site is not aimed at children and I do not knowingly collect anything from anyone under 18. If a child has sent me something through the form, tell me and I will delete it.
Changes
If I add anything that collects data, I update this page before it ships and move the date at the top. There is no mailing list to notify, so the date is the honest signal.
See also the terms of use.