Privacy Policy

1. Who runs this site

This site, agarwoodbusiness.ph, is run by Jesse Veluz, writing as an individual. There's no separate company behind the site itself — the "About me" section on the homepage covers who I am and why this site exists. For the managed plantation inquiry form specifically, I act as the data controller for the record I keep, and UAPI acts as a separate controller once your details reach them. Section 6 explains what that split means in practice. If you need to reach me about privacy, see section 10.

3. The UAPI inquiry form

If you want to hear from UAPI about their managed plantation service, there's a separate inquiry form for that (sometimes called the lead form). It's the only form on the site that collects and stores anything. It's not the same as the Contact page, and it's used for one purpose: passing your details to UAPI so they can reach out to you about the service.

When you submit that form, here's what I record:

• The details you enter. Your first name, last name, email address, and mobile number — the things UAPI needs in order to contact you.
• A record of your consent. I store the exact wording of the consent you agreed to, the date and time you submitted it, plus the IP address and browser the submission came from. I keep these so there's a clear record that you asked for your details to be sent to UAPI, rather than them being shared without your say-so. That record is the reason the IP and browser details are kept; they aren't used to profile or track you around the site.

The consent box on the form sits right next to a plain-language explanation of all this, so you can see what you're agreeing to before you tick it. In short, ticking it means you agree to have your contact details shared with UAPI so they can contact you about the managed plantation service, including arranging a Zoom presentation. Ticking the box is required — if it's left unticked, the form won't send anything, because consent is the whole basis for sharing your details.

Two things I want to be straight about. First, I earn a referral fee if you become a UAPI client through this site, which I disclose on the homepage and again at the form; that's a financial interest of mine, and you should weigh it. Second, on withdrawing consent: you can ask me to delete the record I hold at any time by emailing support@agarwoodbusiness.ph. But once your details have already gone to UAPI, deleting my copy doesn't reach into theirs — UAPI holds its own record as a separate company, so to have them delete what they've received, you'll likely need to contact UAPI directly as well. The form says the same thing next to the checkbox, so there are no surprises after the fact.

5. How it's stored and protected

Inquiry form submissions are kept in the site's database, along with the consent record described in section 3. I keep them as long as there's a reasonable need to — to confirm the handoff to UAPI happened and that you consented to it — and I delete them sooner if you ask.

Any email or letter you send me is kept only as long as needed to respond and to hold a reasonable record of the exchange, then deleted. I take reasonable care to protect anything kept this way from unauthorized access. No method of storage or transmission online is perfectly secure, though, and that limit applies here the same as everywhere else.

7. Your rights over your data

If you're in the Philippines, the Data Privacy Act of 2012 (Republic Act No. 10173) gives you the right to be informed about how your data is processed, to access it, to correct it, to object to certain processing, and to ask that it be deleted or blocked, among other rights. The National Privacy Commission (NPC) oversees this law.

If you're in the EU or UK, the GDPR (and the UK GDPR) give you broadly the same set of rights: to access the data I hold about you, to have it corrected, to have it erased, to restrict or object to how it's processed, and to withdraw a consent you've given at any time. Because the inquiry form runs on your consent, withdrawing it is straightforward — though, as in section 3, withdrawing it with me doesn't withdraw it with UAPI. Withdrawing consent doesn't undo sharing that already happened on the basis of it; it stops further processing from that point.

Wherever you're writing from, you can ask to see what I've kept about you, ask me to correct it, or ask me to delete it, using the contact details in section 10. For anything UAPI holds, you'll need to take that up with UAPI directly.

9. Changes to this policy

If anything here changes — say a cookie or an analytics tool gets added later, or the inquiry form starts collecting something new — I'll update this page and change the date at the top. There's no separate notice sent out for policy updates, so checking back occasionally is the only way to know.