Privacy Notice

In plain terms:

• This website has no contact forms, accounts, analytics, advertising, or tracking, and it does not use cookies.
• If you email Ivan, he receives whatever you choose to send, and the email providers he uses process it.
• When he is accepting new engagements, consulting services are ordered through Folivo, a separate company with its own privacy policy.
• The company that hosts this website processes basic technical information about each visit.
• Ivan does not sell personal information or use it for advertising.
• You can ask him what he holds about you, and ask him to correct or delete it, at hello@ivanlim.dev.

ivanlim.dev is the personal website of Ivan Lim, an independent IT and software engineering consultant based in Cebu, Philippines. Ivan provides technical assessments to businesses in the Philippines and internationally when he is accepting new engagements; the home page states whether he currently is.

Ivan Lim is the person responsible for the personal information described in this notice and for answering privacy questions. You can reach him at hello@ivanlim.dev.

Because Ivan is based in the Philippines, he handles personal information under Philippine privacy law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and the rules of the National Privacy Commission. Information that clients collect from people in other countries may also be subject to those countries' laws.

For any privacy question or request, email hello@ivanlim.dev. For privacy requests, use the subject “Privacy Request”. See “Your privacy requests” below for how requests are handled.

This website has no contact forms, accounts, or comment features. The way to contact Ivan through the site is by email. If you email hello@ivanlim.dev, Ivan receives the information you choose to send, which typically includes:

• your name and email address
• your organization and role, if you mention them
• the contents of your message, including any details about your systems or situation
• any attachments you send
• technical email information such as the date and time sent

The hello@ivanlim.dev mailbox is hosted by Hostinger. Ivan reads and answers email in the Gmail mobile app on a phone and a tablet. The app is connected to the Hostinger mailbox using IMAP for incoming mail, and outgoing mail is sent through Hostinger's SMTP service. The mailbox is not imported into Gmail on the desktop or the web.

Because Gmail is used to access the mailbox, Google may process, and may temporarily store, email data as part of providing the app, under Google's own privacy policy (linked under “Provider privacy policies”). This notice does not state how long Google keeps that data.

During an engagement, documentation, access, or sample material is shared only as agreed with the client, and is used for the purposes described in “How information is used”. It is deleted or returned on the schedule in “How long information is kept”.

Please do not include passwords, API keys, access tokens, or other credentials in an email. Please avoid sending personal information about your customers or employees, or other confidential material, unless it has been agreed that it is needed. If you are unsure, ask first.

Confidential client materials are not submitted to third-party AI tools without appropriate client authorization. Where information is needed for analysis, it is minimized or sanitized first where necessary.

Information you send, and information shared with Ivan when you make a request, is used to:

• respond to consulting inquiries
• carry out technical assessments
• prepare proposals and confirm scope
• deliver requested services
• communicate with clients
• keep the business and legal records that are necessary

Personal information is not used to send marketing newsletters.

No automated decision-making or profiling of individuals is performed.

Ivan handles personal information only where a lawful reason applies. For this practice, the reasons are:

• taking steps you ask for, such as answering an inquiry or preparing a proposal, before any contract exists
• performing a services contract with you or your organization
• complying with legal obligations, such as keeping required records
• Ivan's legitimate interests in running a consulting practice and keeping this website and email secure, except where your fundamental rights and freedoms override those interests

Please do not send sensitive personal information (for example health information or government-issued identification numbers) unless it has been agreed that it is needed.

Ivan may open or close new consulting engagements. The home page of this website states whether they are currently being accepted. This notice covers both situations, so it does not need to change when that changes.

Some of the processing in this notice happens whether or not new engagements are open: technical information processed by the website host, and email that you choose to send. The processing below begins only once a client orders or engages Ivan:

• orders and requests made through Folivo, such as contact details, the service ordered, payment status, intake answers, and messages
• agreeing the scope of an engagement and receiving the documentation, access, or sample material needed for it
• preparing and delivering the written report and recommendations
• keeping the invoicing, tax, and other business records that the law requires

Folivo is a separate service. Its storefront and listing pages are run by Folivo and may be reachable independently of this website, so whether this website currently links to them is not a statement about what Folivo accepts.

This is a static website. The site's own code does not collect, read, or store visitor information. However, the company that hosts the site, and any network services in front of it, necessarily process technical information to deliver pages and keep the service secure. The site is hosted on Vercel. This can include:

• your IP address
• the page requested and the date and time of the request
• your browser, device, and operating system details (user agent)
• the referring page, if your browser sends one
• the response status and similar delivery and security information

Vercel is a separate company with its own privacy notice (linked under “Provider privacy policies”). No external log drains are configured for this site's Vercel project, so these logs are not sent on to other services by the site owner. This notice does not state how long hosting providers keep their logs, and different kinds of logs may be kept for different periods.

As currently built, this website does not set cookies, does not use analytics, advertising, or tracking pixels, and does not load third-party scripts, embeds, or externally hosted fonts. It does not store information in your browser's local storage for tracking.

Private test versions of the site, which only Ivan and his team can open, are separate from the public website and may use sign-in cookies. They are not part of what you see.

No analytics or tracking will be added until this notice has been updated. If that changes, this section will be revised first.

When new engagements are open, assessments are requested through Ivan's storefront on Folivo, an external service run by a separate company, and this website links to it. While they are closed, this website does not link to the storefront. Service requests and transactions are handled by Folivo, and this website itself never processes payments, bookings, or orders.

When you follow a link to Folivo, or visit it directly, you leave this website. What you do on Folivo, such as creating an account, sending messages, or placing an order, is subject to Folivo's own terms and privacy policy. Information that Folivo shares with Ivan so that your request can be answered and fulfilled is handled by Ivan as described in this notice.

Folivo's seller tools may show Ivan information about people who interact with the store, and Folivo may share the information needed to process inquiries, service requests, and orders. The fields confirmed as visible to the seller in the seller account's customer view are customer names, mobile numbers, whether a customer follows the store, order counts, completed spending, marketing preferences, and customer activity timestamps. The seller can also keep private notes and tags about customers. For service orders, Folivo's seller tools are designed to show the customer's contact details (name, phone number, and optionally email), the services and prices ordered, the order status, the payment method and payment status (not card details), scheduling or discovery preferences, notes and intake answers the customer provides, messages, an optional service address, and private seller notes. What Folivo collects and shares for an individual inquiry, service request, or order may differ. This notice does not say that Folivo shares everything it collects with Ivan.

• Ivan Lim's Folivo storefront

Ivan does not sell personal information and does not share it for advertising.

Information is shared only with service providers as necessary to run this website, handle email, and deliver requested services. These currently include the website host (Vercel), the email provider (Hostinger), Gmail (Google), through the mobile app used to access email, and Folivo for requests made there. Information may also be disclosed where the law requires it.

Ivan is based in the Philippines and works with clients in the Philippines and internationally. Some of the service providers described above may process personal information outside the Philippines. This notice does not state specific processing locations and does not guarantee where information is processed; each provider's privacy policy explains its own practices.

These periods are Ivan's own practice. They are reviewed monthly. Information may be kept longer where the law requires it or a legal process applies.

Inquiries that do not become an engagement

Up to 12 months after the last communication.

Correspondence during an active engagement

Kept throughout the engagement.

Correspondence for a completed engagement

Generally kept for up to 3 years after the engagement is completed, subject to applicable legal requirements.

Technical evidence and materials provided by a client

Deleted or returned within 30 days after the engagement is completed, unless otherwise agreed with the client or required by law.

Financial and other legally required records

Kept for the period required by applicable law.

Website hosting logs

Kept by the hosting provider for periods it determines.

Provider-managed backups

Copies may remain in backups managed by providers for a period they determine, and are removed under their own schedules.

Information held by Folivo is kept under Folivo's own policy.

Depending on where you live, you may have rights over your personal information. Under Philippine law, these may include the right to: be informed about how your information is processed; reasonable access to it; dispute inaccurate information and have it corrected; object to processing that relies on Ivan's legitimate interests; have information suspended, withdrawn, blocked, removed, or destroyed in the circumstances the law provides; receive a copy in a structured, commonly used electronic format; and claim damages for unlawful use. You may also lodge a complaint with the National Privacy Commission of the Philippines. Other laws may give you other rights.

To make a request, email hello@ivanlim.dev with the subject “Privacy Request” and describe what you would like. Ivan may need to ask for details to confirm who you are and to locate your information. Information held by Folivo or by the hosting or email providers may need to be requested from them directly.

Ivan aims to respond to requests within these targets:

Acknowledgment

Within 3 business days.

Initial verification and review

Within 5 business days.

Substantive response

Within 15 business days, where practicable.

These are Ivan's own targets, not legal deadlines. He will respond without undue delay and within any time limit the law sets, which applies instead where it is shorter.

• National Privacy Commission (Philippines)

Ivan takes steps to protect personal information, but no way of storing or sending information is completely secure. Steps that apply today:

• this website has no forms, accounts, analytics, or tracking, and its own code does not collect visitor information
• the website is served to you over an encrypted (HTTPS) connection by its host
• credentials are not requested by email, and you are asked not to send them
• multi-factor authentication or similar account protection is turned on for the accounts used to run this website, email, and online store
• access to the website hosting account is limited to trusted team members, and only Ivan can access the consulting mailbox
• the phone and tablet used for email are encrypted and protected by passcodes
• information is limited to what is needed and is deleted or returned on the schedule in “How long information is kept”
• confidential client materials are not submitted to third-party AI tools without appropriate client authorization

If a security incident affecting personal information occurs, Ivan will take these steps:

• contain the incident
• assess what happened, what information is affected, and the risk to people
• document it
• notify affected people and the National Privacy Commission or other authorities when required by applicable law
• put corrective measures in place

The providers named in this notice are separate organizations with their own privacy policies. Their policies, not this notice, describe how they handle information.

• Folivo privacy policy
• Vercel privacy notice
• Hostinger privacy policy
• Google privacy policy

This notice may be updated, for example if the website's features or service providers change. The date at the top shows when it was last updated.