Privacy Policy

Last updated: December 2024

This Privacy Policy explains how CH Media Inc., doing business as Content Hacker (“Content Hacker,” “we,” “us”), collects, uses, stores and deletes personal information. We follow the Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules, and the issuances of the National Privacy Commission (NPC). Where we serve clients or visitors covered by other laws, such as the GDPR or Australia’s Privacy Act, we apply those protections too.

1. Who we are

  • Personal information controller: CH Media Inc., doing business as Content Hacker
  • SEC Company Registration No.: 20244030142937-02
  • Registered office: UB, 111 Paseo de Roxas Bldg., 111 Paseo de Roxas St., Legaspi Village, San Lorenzo, Makati City 1223, Philippines
  • Data Protection Officer: Slye Joy Serrano, slyejoyserrano@contenthacker.co
  • Phone: +63 919 0945 281

2. What we collect

  • Contact details: name, email address, phone number, company and job title, when you contact us, book a call, subscribe or become a client.
  • Billing details: billing name and address, tax information and payment records. We don’t store full card numbers; payment processors handle them.
  • Project information: briefs, content, files, logins and other materials you share so we can deliver our services.
  • Website data: IP address, browser and device type, pages visited and referral source, collected through cookies and analytics tools.
  • Communications: emails, messages and call notes about our services.

We don’t intentionally collect sensitive personal information, as defined under the Data Privacy Act. Please don’t send it to us unless a project specifically requires it and we’ve agreed how to handle it.

3. Why we use it

Purpose

Legal basis

Delivering services, managing projects and hosting

Performance of a contract

Billing, accounting and tax compliance

Legal obligation

Answering enquiries and booking calls

Your request, or our legitimate interest

Sending marketing emails

Consent (you can unsubscribe anytime)

Improving our website and services

Legitimate interest

Security, fraud prevention and legal claims

Legitimate interest, or legal obligation

4. Who we share it with

We share personal information only with service providers who help us run our business, such as hosting, email, analytics, payment and project management tools. They process it on our instructions and under confidentiality obligations. Some are located outside the Philippines, and we take reasonable steps to make sure your information stays protected when transferred.

We may also disclose information when the law requires it, or to establish, exercise or defend legal claims. We don’t sell personal information.

5. How long we keep it

Information

Retention

Client project files and working materials

Deleted 90 days after a project ends, or at our year-end cleanup, whichever comes first, unless a client has an active retainer or agreement with us

Final deliverables and license records

Handed to the client at project completion. We don’t keep copies after the 90-day period

Billing, accounting and tax records

Kept for the period required under Philippine tax rules, currently five years

Enquiries from people who don’t become clients

Deleted within [12] months of the last contact

Marketing list details

Kept until you unsubscribe

Website analytics

Kept for the period set in our analytics tools, currently [14] months

We keep information longer only when the law requires it, or when it’s needed for an ongoing dispute or legal claim.

6. How we protect it

We use reasonable organizational, physical and technical safeguards, including encrypted connections, access controls and limiting access to staff who need it. No system is completely secure. If a personal data breach occurs that’s likely to cause you serious harm, we’ll notify you and the NPC as the law requires.

7. Cookies

Our website uses cookies to make it work, understand how it’s used and, with your consent, measure marketing. You can manage cookies through your browser or our cookie banner. For details, see our Cookie Policy.

8. Your rights

Under the Data Privacy Act, you can:

  • be informed about how your information is processed
  • access the information we hold about you
  • correct inaccurate information
  • object to processing, or withdraw consent
  • ask us to delete or block your information
  • receive your information in a portable format
  • claim damages, and file a complaint with the NPC

To exercise any of these rights, email our Data Protection Officer, Slye Joy Serrano, at slyejoyserrano@contenthacker.co. We’ll respond within [15] working days. You can also contact the National Privacy Commission at privacy.gov.ph.

9. Client data we process for clients

When we host a client’s website or handle personal information on a client’s behalf, the client is the personal information controller and we act as its processor. In that case, the client’s own privacy policy governs how that information is used.

10. Changes to this policy

We’ll post any changes on this page with a new “Last updated” date. For significant changes, we’ll notify active clients by email.

Hi, how can we help?

Leave us a note and we'll get back to you shortly.