Privacy Policy

IMCO is an independent product engineering and design studio founded by Chris Javier Oliveros, with Jake Chico as co-founder. It is registered in the Philippines and works remotely. It is also the shared professional platform where the people behind IMCO publish their profiles, case studies, writing, and CVs.

This policy explains what personal information we collect through imco.design, why we collect it, and what you can ask us to do with it. We collect little, and we would rather explain the little we collect precisely than claim we collect nothing.

If you have a question this page does not answer, write to [email protected].

What this site does and does not do

This is a static website. It has no accounts, no logins, no shopping cart, and no payment processing. We do not run advertising, we do not build advertising profiles, we do not sell or rent personal information, and we make no automated decisions about you.

Information you give us

You only give us information when you choose to. That happens when you:

• Send a brief through the contact form — what you are looking for, your team size, timeline, and budget range, your name and email address, and optionally your company, how you would like us to reply, and any notes. The brief is emailed to our inbox; the site keeps no copy and has no database.
• Email or call us at [email protected] or +974 3991 0418 — whatever the message itself contains.
• Contact us about a role — hiring managers and recruiters often include role descriptions, company details, and their own contact information.
• Engage IMCO for work — during an engagement we receive whatever project material the agreement covers, which may include your organisation’s own systems, content, and user data.

Please do not send government identification, financial details, health information, or anything else sensitive in a first message. Email is not a secure channel, and we do not need that information to start a conversation.

Information collected automatically

• Server logs. Hostinger, our hosting provider, records ordinary request data — IP address, browser and device type, referring page, the page requested, and a timestamp — to serve the site and protect it from abuse.
• Spam protection on the contact form. Cloudflare Turnstile checks that a brief comes from a person, using your IP address and browser signals. It runs only on the contact page and sets no cookies. The service that relays the form also counts requests per IP address for a minute to stop floods; it does not store them.
• Analytics, only with your consent. If you accept the cookie banner, we use Google Analytics to understand which pages and case studies are read, in aggregate. It records the pages you view, how you arrived, and general device and location details. Advertising features are switched off, and we do not use it to identify you. If you decline, it never loads.

Cookies

The only cookies this site sets are Google Analytics cookies (_ga and _ga_<ID>), and only after you choose Accept on the banner. They keep the count of visits accurate and last up to two years. No advertising or profiling cookies are set.

Your choice is remembered in your browser’s local storage, so the banner does not reappear on every page. You can change it at any time with Cookie settings in the site footer. Declining removes the analytics cookies and stops the tag.

Third parties that receive data

We keep the list short and name it plainly:

Third party	What it receives	Why
Hostinger	Request logs, and the contents of your correspondence	Hosting the site and running our email
Cloudflare	Your contact-form brief in transit, your IP address, and Turnstile’s browser signals	Relaying the form and keeping spam out
Resend	Your contact-form brief, delivered as an email to our inbox	Sending the brief to us
Google Analytics	Pages viewed, referrer, device and approximate location — only if you accept cookies	Aggregate site analytics

These providers act on our instructions or under their own published terms. We do not give them permission to use your information for their own marketing.

How we use what we collect

• To read and reply to your message, and to route it to the right person.
• To scope, quote, deliver, and support studio work.
• To respond to employment and recruitment inquiries directed at a team member.
• To keep the site available, accurate, and secure.
• To meet legal, tax, and contractual obligations.

Where a legal basis is required — for example under the GDPR — we rely on your consent when you contact us, on the performance of a contract during an engagement, on our legitimate interest in operating and securing the site, and on legal obligation where one applies.

Profiles, CVs, and published work

Each member of IMCO approves their own public title, biography, photograph, location, availability, links, and CV before it is published, and can ask for any of it to be changed or removed at any time.

Downloadable CVs are published deliberately, for people evaluating professional suitability. Publishing information does not make it free of obligations — see the Terms of Use for what you may and may not do with it.

Case studies describe work within the limits of client confidentiality. Where we cannot describe something, we say so rather than inventing a substitute.

Client and project information

During an engagement we may be given access to systems, content, analytics, or data belonging to a client and to that client’s own users. We handle it under the engagement agreement and any confidentiality terms attached to it, use it only for the agreed work, keep access limited to the people doing that work, and return or delete it on request at the end of the engagement. For that data the client remains the controller and IMCO acts on their instructions.

How long we keep information

• Inquiries that do not lead to work — kept while the conversation is live and for a reasonable period afterwards, then deleted.
• Engagement records — kept for the length of the engagement and afterwards for as long as contractual, tax, and legal obligations require.
• Server logs — kept for a short operational period, then rotated out.

When information is no longer needed for the purpose it was collected for, we delete it or strip it of anything that identifies you.

Where your information is processed

IMCO is a remote studio. We have no offices, our members work from different countries, and our clients and service providers are spread across others again. Your information will therefore be processed outside the country you are in. Wherever it goes, we take reasonable steps to see that it stays protected to the standard described on this page.

Your rights

Wherever you are, you can ask us to:

• tell you what personal information we hold about you;
• correct it if it is wrong;
• delete it;
• stop or limit a particular use;
• send you a copy in a portable form;
• withdraw a consent you previously gave.

These rights may also be enforceable under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), and — depending on where you are based — under the EU or UK GDPR or the New Zealand Privacy Act 2020. We apply the same practice regardless of which one applies to you.

To make a request, email [email protected]. We will respond within 30 days, and we may ask you to confirm your identity first so that we do not disclose someone else’s information to the wrong person. If you are not satisfied with our response, you may complain to the National Privacy Commission of the Philippines, or to the data protection authority in your own country.

Security

We use reasonable technical and organisational measures to protect the information we hold, and we keep the amount we hold small on purpose — the safest record is the one that was never collected. No website or email system is perfectly secure, and we cannot guarantee otherwise.

Children

This site is aimed at professional audiences and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, contact us and we will delete it.

Changes to this policy

We update this page when our practices change. The date at the top is the last meaningful revision. Material changes will be described here rather than made quietly.

Contact

Questions, corrections, and requests:

IMCO Software Development Services A sole proprietorship registered in the Philippines · DTI No. 1999189 [email protected] · +974 3991 0418