The Samal Summit Agarwood & Eco-Farms Inc.
Effective date: 15 August 2026
Website: https://samalsummit.com/
1. Who we are
The Samal Summit Agarwood & Eco-Farms Inc. (“Samal Summit,” “we,” “us,” or “our”) operates samalsummit.com. For personal data processed through this website, Samal Summit acts as the personal information controller under applicable Philippine data protection law.
Privacy contact: [email protected] | +63 922 899 1612 | The Workspace, Eastwood City, Quezon City, Philippines
2. Scope
This Privacy Policy applies when you visit the website, submit a Contact or Partner With Us form, communicate with us, comment on or like an article when those features are enabled, or otherwise interact with website functions. It does not govern third-party websites or services linked from our pages.
3. Personal data we may collect
- Information you provide, such as your name, email address, telephone number, organization, partnership or inquiry type, message, consent choice, and any additional fields shown on a form.
- Correspondence and inquiry records, including follow-up communications, notes, status, and relationship history.
- Public interaction data, such as a comment, display name, website address, or article-like activity when those functions are enabled.
- Technical and usage data, such as IP address, browser and device information, timestamps, requested pages, referring page, server logs, security events, cookie identifiers, and preference data.
- Information from third parties when you choose to engage with linked social-media, messaging, map, video, translation, analytics, or anti-spam services.
Please do not submit government identifiers, financial account details, health information, or other sensitive personal information unless we specifically request it through an appropriate and secure channel.
4. How and why we use personal data
We process personal data only for stated, legitimate purposes and in a manner proportionate to those purposes. Depending on the interaction, processing may be based on consent, steps requested before entering a contract, performance of a contract, compliance with a legal obligation, or our legitimate interests where these do not override your rights.
- Respond to inquiries, evaluate partnership interest, and communicate about projects, services, events, or opportunities you request.
- Operate, personalize, secure, troubleshoot, and improve the website, including language or appearance preferences and progressive web app functions.
- Moderate comments, record article likes, prevent duplicate or abusive activity, and enforce website rules.
- Detect spam, fraud, malware, attacks, unauthorized access, and other security threats.
- Maintain business, legal, compliance, audit, and dispute records, and respond to lawful requests from authorities.
- Measure website performance or audience use if analytics tools are enabled, using appropriate notices and controls.
5. Cookies, local storage, and similar technologies
The website may use cookies, local storage, cache files, and service-worker technology for essential sessions, security, form protection, theme or language preferences, performance, article likes, and—if enabled—analytics. A theme preference may be stored locally so the site remembers “Dark Mode” or “Lights On.” You can manage many of these technologies through your browser, although disabling essential storage may impair website functions.
6. Anti-spam and third-party services
Forms use built-in anti-spam controls and may use Google reCAPTCHA. If reCAPTCHA is enabled, Google may receive technical information, including your IP address, browser data, and a verification token, under Google’s own terms and privacy policy. Embedded videos, maps, translation tools, social buttons, and external messaging links may likewise allow their providers to collect data when you use them. Review the relevant provider’s notice before interacting.
7. When we disclose personal data
We do not sell or rent personal data. We may disclose it only as reasonably necessary to:
- Authorized directors, officers, employees, and contractors who need it for their work and are subject to confidentiality duties.
- Hosting, email, security, form, cloud, analytics, maintenance, and professional-service providers acting under appropriate instructions or obligations.
- Regulators, courts, law-enforcement bodies, or other persons where disclosure is required or permitted by law, or necessary to protect rights, safety, and security.
- A successor or transaction counterparty in a legitimate merger, financing, restructuring, or transfer, subject to appropriate confidentiality and legal safeguards.
8. Overseas and cloud processing
Some service providers may process or store data outside the Philippines. Where this occurs, we will use reasonable contractual, organizational, and technical measures intended to preserve a comparable level of protection and comply with applicable transfer requirements.
9. Retention
We retain personal data only for as long as necessary for the purpose collected, a continuing relationship, legal or regulatory obligations, security, or the establishment, exercise, or defense of claims. As a general operating standard:
- Unsuccessful or inactive inquiries and partnership submissions may be retained for up to two years after the last meaningful interaction.
- Routine technical and security logs are generally retained for up to twelve months, unless an incident or legal obligation requires longer.
- Comments, moderation history, and aggregate like counts may remain while the associated content is published or while needed to prevent abuse.
- Cookies and local preferences remain for the duration stated in the relevant technology or until you delete them.
- Records connected to a contract, permit, financial transaction, complaint, or legal duty are kept for the applicable statutory or operational period.
10. Security
We use reasonable and appropriate administrative, physical, and technical safeguards designed to protect personal data against accidental or unlawful destruction, alteration, disclosure, misuse, malware, and unauthorized access. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security. If we identify a personal data breach, we will assess and address it and notify affected persons and the National Privacy Commission when required.
11. Your privacy rights
Subject to the Data Privacy Act of 2012 and its implementing rules, you may have the right to be informed; access your personal data; object to certain processing; correct inaccurate data; request erasure or blocking; receive data in a portable form where applicable; withdraw consent; seek damages; and lodge a complaint with the National Privacy Commission. Some requests may be limited by legal obligations, the rights of others, or valid exemptions.
To exercise a right, email [email protected] with “Privacy Request” in the subject line and describe your request. We may ask for proportionate information to verify your identity. You may also contact the National Privacy Commission through privacy.gov.ph.
12. Children
This website is intended for adults and is not directed to persons under 18. We do not knowingly solicit personal data from children. If you believe a child has provided data without appropriate authorization, contact us so we can assess and remove it where required.
13. External links
Links to Facebook, LinkedIn, X, YouTube, Instagram, TikTok, Messenger, Viber, WhatsApp, AgarTrace.com, and other external sites are provided for convenience. Their operators independently control their privacy practices, and this policy does not cover them.
14. Changes to this policy
We may update this policy to reflect changes in law, technology, vendors, forms, or operations. The revised version will be posted on this page with a new effective date. Material changes may also be highlighted through the website or another appropriate channel.
15. Reference framework
- Republic Act No. 10173, Data Privacy Act of 2012: https://www.lawphil.net/statutes/repacts/ra2012/ra_10173_2012.html
- National Privacy Commission, Implementing Rules and Regulations: https://privacy.gov.ph/implementing-rules-regulations-data-privacy-act-2012/
- National Privacy Commission, Data Subject Rights: https://privacy.gov.ph/data-subject-rights/