How we handle your information.

This notice explains what personal information we collect through this website and keep for our clients, why, who helps us handle it, how long we keep it and what you can ask us to do with it. It follows the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

Who we are

This website belongs to OSBS · One Stop Business Service. For this website, we are the personal information controller: we decide what is collected and how it is used.

• Privacy contact: TBCname of the privacy contact (D-27)
• Email: TBCemail address for privacy requests (D-27)
• Address: TBCoffice address, and whether it is public (D-21)

What we collect, and why

When you send the enquiry form, we collect:

• your name
• your mobile or Viber number
• the service you need help with
• your message
• the page you sent it from, and the date and time

We use these only to reply to your enquiry, to give you a quote if you ask for one, and to keep a record of enquiries so nobody is missed. We process them because you ask us to and because you give your consent when you tick the box on the form. You can withdraw that consent at any time (see "Your rights" below).

This website never asks for your TIN, ID numbers or documents, so please don't put them in the form. There is no upload field. If something that looks like a TIN is typed into your name or message, the website removes it automatically before the enquiry is sent. If we work together, we'll tell you how to send documents through a channel we control.

When you just read the website, TBCanalytics wording to confirm for the new hosting (QA-08)

When you message us on another app

The Call, WhatsApp, Viber and Messenger buttons open those apps on your own device. What you send there is handled by those services under their own privacy policies (Meta for WhatsApp and Messenger, Rakuten Viber for Viber), and by us as your conversation with us. This website doesn't see or store those conversations.

If you become our client

When we keep your books or prepare your returns, we keep your records in OSBS Books, our own bookkeeping system. They include your business details and TIN, your sales and expenses, the receipts, bank statements and other papers you send us, certificates of tax withheld (BIR Form 2307), the returns we prepare and file for you, and notes on our work for you.

We use them only to do the work you hired us for: keeping your books, preparing and filing your returns, and keeping track of your deadlines and the documents we need from you. We process them to carry out our agreement with you and because the tax laws require books and records to be kept.

• Who can see them: only OSBS and the people who work on your account. Each person signs in with their own account, and our staff see only the clients they're given.
• Where they're stored: in Cloudflare's database and file storage, sent over an encrypted connection and stored encrypted.
• How long we keep them: books and the papers behind them for five years after the deadline of the annual income tax return for the year they cover, or after the day that return was filed if it was filed late, as the Tax Code and BIR rules require. Papers that don't cover a particular year, such as your registration certificates, are kept while you're our client. After that we check whether anything is still needed, for example for a BIR audit, and delete the rest. Nothing is deleted automatically.

Who helps us run this website

We use a few service providers. Each one handles only what it needs to do its job, and we don't sell or share your information with anyone for marketing.

• TBChosting, form delivery and analytics providers for the new site, checked against the code before launch (QA-08)
• Cloudflare, Inc. stores client records in OSBS Books (see "If you become our client").
• Google LLC receives the enquiry email in our Gmail and keeps the enquiry list in a private Google Sheet, shared only with us and the person who manages this website for us.

These providers may store data on servers outside the Philippines. We choose providers that protect data with security measures at least as strong as the law requires here.

How long we keep it

We keep website enquiries for TBCretention period (D-27). After that we delete them, unless you became our client. Client records are kept for as long as the law requires for tax and business records, as explained in "If you become our client" above.

How we protect it

The enquiry email goes to our own inbox, and the enquiry list can be opened only by us and the person who manages this website for us. Both accounts use two-step sign-in. The website uses an encrypted connection (HTTPS). OSBS Books gives each person only the access their role needs and keeps a log of changes and deletions.

Your rights

Under the Data Privacy Act you have the right to:

• be informed about how your personal information is used, which is what this notice is for
• access the personal information we hold about you
• correct anything that is wrong or out of date
• object to processing, or withdraw your consent
• ask us to delete or block your information
• receive a copy of your information in a common format (data portability)
• be compensated for damage caused by inaccurate, incomplete, outdated or unlawfully obtained information, or by its unauthorised use
• file a complaint with the National Privacy Commission

To use any of these rights, email TBCemail address for privacy requests (D-27) and say what you'd like us to do. We'll reply within TBCresponse time for privacy requests. We may ask you to confirm it's really you before we share or delete anything.

If you're not satisfied with our reply, you can complain to the National Privacy Commission at privacy.gov.ph.

Changes to this notice

If we change how we handle your information, we'll update this page and the date at the top.