Skip to main content
CANACIO

LEGAL / PRIVACY

Privacy Policy

This policy explains how CANACIO handles personal information when you visit the website or contact us.

Effective August 27, 2026

1. Who is responsible

CANACIO operates in the Philippines. For purposes of the Philippine Data Privacy Act of 2012, CANACIO is the personal information controller for the information described in this policy.

2. Information we collect

When you contact CANACIO by email or through an enabled inquiry form, we may collect your name, email address, company or organization, project type and stage, budget range, timeline, project description, and any other information you choose to provide.

The website may also generate limited technical information needed to deliver and secure the service, such as IP address, request time, browser or device information, requested URL, and security or error logs. CANACIO does not currently use advertising cookies or analytics tools.

2A. Guided project planning

The project planner can be used anonymously. Answers may be kept in the current browser tab for recovery. Requesting a planning result does not create an inquiry, subscribe you to marketing or persist personal information on CANACIO systems. CANACIO does not use estimator analytics, behavioral tracking or session replay.

If estimate email delivery is enabled and you intentionally request a copy, CANACIO processes the name, email address and optional company you provide to send your copy and follow up about that project. Delivery information is transient and is not stored in estimator D1. Short-lived, non-personal operational coordination state is retained for up to 48 hours. Cloudflare Turnstile and Resend may process data at that stage. Business email is retained under the inquiry-retention policy in section 5. Requesting delivery does not subscribe you to general marketing.

3. Why we use information

We use personal information to receive, assess and respond to inquiries; communicate about potential or active work; protect the website and email systems; maintain business records; and comply with applicable legal obligations.

We process information when necessary to respond to your request, take steps toward a possible engagement, pursue legitimate business and security interests, or comply with law. Where consent is required, you may withdraw it subject to lawful limitations.

4. Service providers and transfers

CANACIO uses service providers that process information on its behalf: Cloudflare for website delivery, security, hosting and inbound email routing; Google Gmail for the CANACIO mailbox; and Resend for authenticated outbound email. Their infrastructure may process information outside the Philippines.

We may also disclose information when required by law, to protect legal rights or safety, or in connection with a legitimate business transfer. We do not sell personal information.

5. Retention

Inquiry information is normally retained for up to 12 months after the most recent meaningful communication. We may retain information longer when reasonably necessary for an active engagement, legal obligation, dispute, security investigation, or the establishment, exercise or defense of legal claims. Information is deleted or securely disposed of when it is no longer needed.

6. Security

We use reasonable organizational and technical safeguards designed to protect personal information. No internet transmission or storage system is completely secure, so absolute security cannot be guaranteed.

7. Your privacy rights

Subject to applicable law, you may ask to be informed about processing, access or correct your information, object to or withdraw consent for certain processing, request erasure or blocking, request data portability where applicable, or raise a concern. You may also lodge a complaint with the Philippine National Privacy Commission.

To make a privacy request, email hello@canacio.com. We may need to verify your identity before acting on a request.

8. Children

The website and CANACIO’s services are intended for business users and are not directed to children. Please do not submit a child’s personal information through the website.

9. Changes

We may update this policy when our practices, providers or legal obligations change. The effective date below will be revised when material updates are published.

Also review the website Terms of Use.