Privacy
Policy.

1. Who we are

This policy explains how Emeterio Pepito III, operating as Southside Studio PH (“we,” “us,” or “our”), collects and uses personal information. It applies to ghamaypepito.com, southsidestudio.ph, thumbai.com, our landing pages, forms, surveys, booking pages and client portals, and our web-app development, business systems, automation, CRM, finance-system, AI application, consulting and one-to-one tutorial services.

Privacy contact: [email protected]
Address: 3609 One Oasis Condominium Cebu, Cebu City, Cebu 6000, Philippines

2. Information we collect

Information you provide

• Name, email, phone, company, role and website.
• Workflow-audit answers, operational challenges, tools, team, priorities, budget and deadlines.
• Messages, files, feedback, project requirements and tutorial details.
• Billing and transaction information. Card details are generally handled by the payment provider rather than stored by us.

Information collected automatically

We and our providers may collect IP address, browser and device details, approximate location, pages viewed, links clicked, referring page, timestamps, cookie identifiers and technical security logs.

Other sources

We may receive information from referral partners, platforms, analytics providers, public business sources or integrations you authorize.

Please do not submit confidential, regulated or highly sensitive information unless we request it and appropriate safeguards are agreed.

3. How and why we use information

• Respond to inquiries and deliver audits or consultations.
• Scope, quote, build, test, maintain and support websites, applications and business systems.
• Provide one-to-one AI application tutorials.
• Schedule meetings and manage leads, contacts, opportunities and client records.
• Process payments, maintain records and prevent fraud.
• Secure, troubleshoot, measure and improve our services.
• Send service communications and, with consent or where permitted, marketing.
• Meet legal, tax, regulatory and contractual duties and protect legal rights.

Where applicable, processing is based on consent, a contract or requested pre-contract steps, legal obligations, or legitimate interests in operating and improving the business. Consent may be withdrawn without affecting earlier lawful processing.

4. AI and automated tools

We may use AI tools to assist with research, drafting, code, analysis, documentation, support, design, automation and training. We aim to minimize personal information sent to AI providers and use human review where appropriate. We do not intend to make decisions producing legal or similarly significant effects about you solely through automated processing. AI output may be inaccurate and is reviewed before material reliance.

5. Cookies

Our sites may use essential cookies for security and operation and optional analytics, preference or advertising technologies. Where required, we request consent before non-essential cookies. Browser settings and any available cookie banner let you control these technologies, although blocking some may affect functionality.

6. Sharing and service providers

We do not sell personal information for money. We may share information only as reasonably necessary with hosting, cloud, CRM, form, survey, scheduling, email, SMS, analytics, payment, security, development and AI providers; authorized contractors; advisers; a business successor; or authorities where required by law or needed to protect rights and safety.

Our lead-capture and workflow systems may be provided by HighLevel/LeadConnector. Providers for a specific project may also be identified in its proposal, agreement or notice.

7. International transfers

We serve a global market and use cloud services, so information may be processed outside your country. Where required, we use contractual, organizational or other recognized safeguards for international transfers.

8. Retention and security

We retain information only as long as reasonably necessary. Unqualified inquiries and audits are normally reviewed for deletion or anonymization after 24 months of inactivity. Client and transaction records may be kept for the relationship and up to 10 years afterward where justified for legal, accounting, warranty or dispute purposes. Marketing records remain until opt-out or until no longer needed.

We use reasonable access, authentication, confidentiality, backup, monitoring and encryption safeguards where appropriate. No online system can be guaranteed completely secure.

9. Your privacy rights

Depending on your location and legal exceptions, you may ask to be informed, access or receive a copy, correct, delete or block information, restrict or object to processing, withdraw consent, request portability, opt out of marketing, ask about automated decisions, or complain to a regulator.

Philippine residents may contact the National Privacy Commission. EEA or UK residents may contact their local supervisory authority. California residents may have additional rights where California privacy law applies. We do not currently sell personal information for money or use it for cross-context behavioral advertising; if this changes, we will provide the required choices.

Send requests to [email protected] with the subject “Privacy Request.” We may verify identity and authority. We will not unlawfully discriminate for exercising a privacy right.

10. Marketing choices

Service messages about an inquiry, booking, project, payment or service are not marketing. Promotional email can be stopped using its unsubscribe link or by contacting us. Where supported, reply STOP to opt out of SMS. Marketing consent is not required to purchase services.

11. Children, links and client systems

Our services are intended for business users aged 18 or older. We do not knowingly collect children’s information. Third-party links have their own policies.

For systems we build for a client, that client may control the data and its own privacy notice governs its users. We process that data according to our agreement with the client.

12. Changes

We may update this policy as services, providers or legal obligations change. We will post the revised version with a new “Last updated” date and give additional notice where required.