Privacy policy
Effective date: October 19, 2026
Symph Inc. (“Symph”, “we”, “us”, or “our”) operates symph.co. This Privacy Policy explains what personal data we collect, why we collect it, and how you can exercise your rights.
By using this website, you agree to the practices described below. If you do not agree, please do not use the site.
1. Who We Are
Symph Inc. is an AI-native software company headquartered in Cebu, Philippines. We are the data controller for personal data collected through symph.co.
Contact us: hello@symph.co
2. Data We Collect
a. Data you give us directly
When you fill out the contact form on our website, we collect:
- What your enquiry is about
- Full name
- Email address
- Company name (optional)
- What you’re looking for
- How you heard about us (optional)
- Any additional details you choose to share
This information is used solely to respond to your inquiry and, with your permission, to follow up about our services.
b. Data collected automatically
With your consent, we use third-party analytics and advertising tools (listed in Section 4) that collect data automatically when you visit our site. This includes:
- Pages visited and time spent
- Browser type, device type, operating system
- Approximate geographic location (country/city level)
- Referring URLs and search terms
- Interactions with our pages (clicks, scrolls)
This data is collected via cookies and similar tracking technologies (see Section 5). With your consent we also remember, for your browser session, how you found us: the first page you opened and when, the site that sent you, and any campaign link or ad click reference in the address you followed. If you then send the contact form, these details go with your enquiry.
Separately, like any website, our hosting provider records standard technical logs when your browser requests a page: your IP address, browser type, device type, operating system, and the page requested and the time of the request. We use these logs only to keep the site secure and working.
3. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Responding to contact form inquiries | Legitimate interest / Pre-contractual steps |
| Measuring website performance (analytics) | Consent |
| Advertising and remarketing | Consent |
| Understanding visitor behavior to improve our site | Consent |
| Knowing which campaign brought an inquiry | Consent |
| Managing CRM and sales follow-up | Legitimate interest |
| Keeping the website secure and working | Legitimate interest |
4. Third-Party Services
We share data with the following service providers, each operating under their own privacy policies. The analytics and advertising services only receive data if you have accepted cookies. Our CRM receives contact form data when you submit it, and the hosting, font and video providers serve the site itself.
| Service | Purpose | Data Shared |
|---|---|---|
| Google Tag Manager | Loading the analytics and advertising tools below | Page and device details |
| Google Analytics (GA4) | Website analytics | Usage data, device info |
| Google Ads | Advertising & conversion tracking | Ad interaction data |
| Meta Pixel (Facebook) | Advertising & retargeting | Page views, events |
| LinkedIn Insight Tag | Advertising & conversion tracking | Page views, events |
| Mixpanel | Product analytics | Page views, events, campaign details |
| PostHog | Website analytics | Page views, clicks, device info, campaign details |
| Our CRM provider | Storing and managing contact form inquiries | Contact form data |
| Our hosting provider | Serving this website | Technical log data |
| Fontshare | Delivering the typeface the site uses | Your IP address and browser details when the font loads |
| Cloudinary | Delivering the showreel video | Your IP address and browser details when the video loads |
6. Data Retention
- Contact form data: Retained in our CRM for as long as there is a legitimate business relationship or inquiry. You can request deletion at any time.
- Analytics data: Retained per each provider’s default retention settings (e.g., Google Analytics retains data for 14 months by default).
- How you found us: Kept in your browser for the current session only, unless you send it with an inquiry.
- Server logs: Kept by our hosting provider for a limited period, for security and operations.
7. Data Transfers
Symph is based in the Philippines. Our service providers (such as Google, Meta, LinkedIn and Mixpanel) may process your data in the United States or other countries. Where data is transferred outside your country of residence, we rely on our providers’ approved transfer mechanisms, such as Standard Contractual Clauses, to protect it.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to correct inaccurate data.
- Deletion: Request deletion of your personal data (“right to be forgotten”).
- Objection: Object to processing based on legitimate interests.
- Portability: Receive your data in a structured, machine-readable format.
- Withdraw consent: Withdraw cookie consent at any time with “Cookie settings” at the foot of every page.
These rights apply under GDPR (EU/EEA), the Philippine Data Privacy Act (RA 10173), CCPA (California), and other applicable laws.
To exercise any of these rights, email us at hello@symph.co. We will respond within 30 days.
9. Children’s Privacy
Our website is not directed at children under 13. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. We encourage you to review this page periodically. Continued use of the site after changes constitutes acceptance of the updated policy.
11. Contact Us
Questions about this policy or your data? Reach us at:
Symph Inc.Cebu, Philippines
hello@symph.co