Privacy notice
What I collect, why, how long I keep it, and how to ask me to delete it.
Last updated 21 September 2026.
Who is responsible
This site belongs to Jerico Lugo, based in Makati, Philippines. I decide what happens to the personal information collected here, which makes me the personal information controller under the Data Privacy Act of 2012.
What I collect
Only what you type into the contact form: your name, your email address, your organization and role if you choose to give them, what your message is about, and the message itself. The site also records that you ticked the consent box, and when.
The server records the IP address a message is sent from, and uses it only to limit how many submissions can come from one address in ten minutes. It is not used to identify you and it is not used for anything else.
I do not ask for anything sensitive, and you should not send financial details, identification numbers or health information through this form.
Why I collect it
To read your message and reply to it. That is the whole purpose. Your details are never sold, rented or shared for marketing, and I do not add you to a mailing list because you wrote to me.
Your consent
The form does not send unless you tick the box. That tick is your consent under the Data Privacy Act, and you can withdraw it at any time by writing to me.
How long I keep it
Submissions are kept for 24 months from the day they arrive, then deleted. Conversations often restart months later, and the earlier message is what makes the second one useful.
If we begin working together, your information moves under our engagement agreement, which sets its own terms.
Email correspondence sits in my mailbox separately and is kept under my own retention practice.
Who else sees it
The site is hosted by Netlify, which stores submissions on my behalf and can hold data outside the Philippines.
Notification and reply emails are sent through Resend, an email delivery service. It processes your name, email address and message for the sole purpose of delivering those two messages, and can hold data outside the Philippines.
My mailbox is hosted by my email provider. None of these services uses your information for their own purposes.
I may disclose information where the law requires it. Nobody else sees your message unless you ask me to bring them in.
Analytics and cookies
This site sets no cookies and runs no analytics or tracking scripts at all. Nothing follows you here, and nothing follows you away.
Your rights
Under the Data Privacy Act you may ask to see what I hold about you, correct it, have it deleted or blocked, object to how it is used, receive a copy in a portable form, and be told if it is ever compromised.
Write to me and say what you want done. I will acknowledge your request within two business days and complete it within thirty days. If it will take longer than that, I will tell you why before the thirty days are up. These rights are given to you by the Data Privacy Act of 2012, and if you are not satisfied with how I handle your request, you may complain to the National Privacy Commission.
Keeping it safe
The site runs over HTTPS. Submissions are stored in an access-controlled store, and only I can read them. No system is perfect, and if something goes wrong that puts your information at risk, I will tell you and the National Privacy Commission as the law requires.
Changes
If this notice changes, the date at the top changes with it. The version that applied when you wrote to me is the one that governs your submission.
How to reach me
Use the contact form and choose "Something else", or write to the address published on this site.