1. Information Collected

• Personal Information 

This encompasses data that directly identifies an individual, such as names, email addresses, telephone numbers, and other contact details provided during registration, account creation, or customer support interactions. Such information is used strictly for communication, account management, and lawful business purposes, and is processed in accordance with applicable data protection laws.

• Transaction Data 

This includes records of payments, billing details, subscription agreements, invoices, and renewal information associated with the client’s use of Narratech Solutions’ products and services. Transaction data is retained to ensure accurate billing, compliance with financial regulations, and proper administration of contractual obligations.

• Technical Data 

Narratech Solutions may collect limited technical information such as IP addresses, device identifiers, browser types, operating system details, and system logs. This data is used for security monitoring, troubleshooting, and performance optimization. Collection is restricted to the minimum necessary to maintain service integrity and protect against unauthorized access.

• Customer Business Data 

Business‑specific information, including operational records, customer databases, and proprietary content, typically resides within the client’s own environment or chosen third‑party platform (e.g., Odoo, Shopify, WordPress). Narratech Solutions does not claim ownership of such data and processes it only to the extent necessary to enable integrations, configurations, or contracted services, subject to the client’s control and applicable agreements. 

2. Purpose of Processing

• Clients acknowledge and agree that Narratech Solutions may collect and process data solely for the purpose of delivering and continuously improving its products and services. This includes monitoring performance, implementing updates, enhancing functionality, and ensuring that solutions remain aligned with evolving business and regulatory requirements. Improvements may be based on aggregated usage data, feedback, and lawful analytics, without infringing upon client confidentiality or proprietary rights.
• Narratech Solutions shall also provide support and troubleshooting services to assist clients in resolving technical issues, addressing system errors, and ensuring operational continuity. Such support may include remote diagnostics, corrective measures, and guidance in accordance with the applicable service‑level agreements. Clients are expected to cooperate fully by furnishing accurate information and granting necessary access to facilitate timely resolution.
• In addition, Narratech Solutions is authorized to process payments and manage subscription arrangements in accordance with the agreed billing terms. This encompasses invoicing, collection of fees, administration of renewals, and enforcement of payment obligations. All financial transactions shall be handled securely and in compliance with applicable laws and industry standards, ensuring proper accounting and transparency. Failure to comply with payment obligations may result in suspension or termination of services as outlined in the agreement.

3. Hosting and Data Storage

• Narratech Solutions does not, by default, host or store customer business data as part of its standard product and service offerings. Operational records, proprietary content, and client databases remain within the customer’s own controlled environment or with the platform provider chosen by the client. Narratech Solutions’ role is limited to enabling integrations, configurations, and technical support, without assuming custodial responsibility for the client’s business data. This ensures that ownership, control, and compliance obligations remain solely with the client.
• For customers electing cloud‑based deployments, hosting and storage services may be facilitated through third‑party providers, such as Odoo Cloud or other comparable infrastructure providers. In such cases, the client acknowledges that the availability, performance, and security of hosted data are governed by the terms, conditions, and service‑level commitments of the respective third‑party provider. Narratech Solutions does not warrant or guarantee the services of such providers and shall not be liable for outages, breaches, or failures attributable to external hosting environments. Clients are responsible for reviewing and complying with the contractual and regulatory obligations imposed by their selected cloud provider.

4. Data Sharing

Personal data may be shared with:

• Platform Providers (Odoo, Shopify, VeritasPay) Where Narratech Solutions’ products or services integrate with external platforms such as Odoo, Shopify, VeritasPay, or similar providers, certain personal data may be shared to enable interoperability, authentication, and transaction processing. Such sharing is limited to the information strictly necessary for the platform to deliver its intended functionality, and each provider remains independently responsible for compliance with its own contractual and regulatory obligations.
• Cloud Hosting Providers For clients electing cloud‑based deployments, personal data may be transmitted to third‑party hosting providers (e.g., Odoo Cloud or comparable infrastructure services) to facilitate storage, availability, and system performance. Narratech Solutions does not control the infrastructure of these providers and disclaims liability for outages, breaches, or failures attributable to external hosting environments. Clients are responsible for reviewing and complying with the hosting provider’s terms of service and privacy policies.
• Payment Processors Personal and transactional information, including billing details, payment credentials, and subscription records, may be shared with authorized third‑party payment processors to securely facilitate financial transactions. These processors are contractually bound to handle data in accordance with industry standards for confidentiality, encryption, and fraud prevention. Narratech Solutions does not retain full payment card details beyond what is necessary for verification and compliance.
• Support/Service Providers In limited circumstances, personal data may be disclosed to trusted support or service providers engaged by Narratech Solutions to deliver technical assistance, maintenance, training, or implementation services. Such providers operate under strict contractual obligations, including confidentiality and data protection requirements, and are permitted to process data only to the extent necessary to fulfill their assigned functions.

5. Data Retention

Narratech Solutions shall retain personal data and related records only for as long as is reasonably necessary to fulfill contractual obligations, comply with applicable legal and regulatory requirements, or support legitimate operational purposes. Retention periods are determined by the nature of the data, the purpose for which it was collected, and statutory obligations under relevant laws, including but not limited to the Philippine Data Privacy Act of 2012.

Once contractual obligations have been satisfied, legal retention periods have expired, or operational needs no longer justify continued storage, personal data will be subject to secure deletion, anonymization, or archival in a manner that prevents unauthorized access, disclosure, or further processing. Narratech Solutions expressly disclaims indefinite retention of personal data and applies strict data minimization principles to ensure that information is kept no longer than necessary.

Clients acknowledge that certain categories of records—such as payment transactions, compliance documentation, or audit logs—may be preserved for statutory or regulatory periods even after termination of services, but such retention shall be limited strictly to the scope required by law.

6. Security Measures

Narratech Solutions implements a comprehensive framework of organizational, physical, and technical safeguards designed to ensure the confidentiality, integrity, and availability of all personal and business data entrusted to its care.

Organizational safeguards include the adoption of internal data protection policies, employee training programs, and strict role‑based access controls that limit data handling to authorized personnel only. Regular audits, compliance reviews, and documented procedures ensure accountability and adherence to applicable laws and industry standards.

Physical safeguards encompass secure facilities, controlled entry systems, surveillance measures, and protective protocols against theft, tampering, or environmental damage to servers and storage devices. These measures are designed to prevent unauthorized physical access and preserve the resilience of infrastructure.

Technical safeguards involve the deployment of encryption protocols, firewalls, intrusion detection systems, multi‑factor authentication, and regular vulnerability assessments. Continuous monitoring and patch management are conducted to mitigate cyber threats, unauthorized disclosure, and system compromise.

Collectively, these safeguards are reviewed and updated on a continuous basis to align with evolving industry best practices, regulatory requirements, and the obligations imposed under the Philippine Data Privacy Act of 2012. While Narratech Solutions employs robust protective measures, clients acknowledge that no system can guarantee absolute security; however, Narratech remains committed to maintaining the highest practicable level of protection for all data processed within its operations.

7. User Rights

Users may:

• Access, correction, and deletion of personal data 

Users have the right to request confirmation as to whether Narratech Solutions processes their personal data. Upon verification of identity, users may obtain access to such data, including details of the categories collected, the purposes of processing, and any disclosures made to third parties. Users may also request the correction of inaccurate or incomplete data to ensure reliability, or the deletion of personal data where retention is no longer necessary for contractual fulfillment, compliance with legal obligations, or legitimate business purposes. Requests shall be evaluated in accordance with statutory requirements and Narratech’s data minimization principles.

• Withdrawal of consent for marketing communications 

Users retain the right to withdraw previously granted consent for receiving marketing, promotional, or informational communications. Upon withdrawal, Narratech Solutions shall cease processing personal data for such purposes, while continuing to process data strictly necessary for contractual or legal obligations. Withdrawal of consent shall not affect the lawfulness of processing carried out prior to such withdrawal, and users may exercise this right at any time without prejudice to their access to core services.

• Filing complaints with the National Privacy Commission (NPC) 

Users who believe that their data protection rights have been violated may lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. Narratech Solutions acknowledges the authority of the NPC to investigate, mediate, and enforce compliance with the Data Privacy Act of 2012, and commits to cooperate fully with any regulatory inquiries or proceedings. Users are encouraged to first raise concerns directly with Narratech Solutions’ Data Protection Officer (DPO) for resolution but retain the unrestricted right to escalate matters to the NPC.

8. International Transfers

Where applicable, personal data collected and processed by Narratech Solutions may be transferred to and stored in jurisdictions outside the Republic of the Philippines. Such transfers shall occur only when necessary to facilitate hosting, payment processing, technical support, or other legitimate business operations, and shall always be subject to the implementation of adequate safeguards consistent with the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and internationally recognized data protection standards. Safeguards may include contractual commitments incorporating standard data protection clauses, verification of the recipient’s compliance with established privacy frameworks, and technical measures such as encryption and restricted access controls. Clients acknowledge that foreign jurisdictions may have different data protection laws; however, Narratech Solutions remains committed to ensuring that any transfer of personal data is conducted in a manner consistent with the principles of lawfulness, transparency, accountability, and proportionality. In all cases, data will be transferred only to the extent necessary for the fulfillment of contractual obligations or compliance with legal requirements, and Narratech Solutions shall take reasonable steps to mitigate risks associated with such transfers.

9. Analytics and Telemetry

Narratech Solutions’ applications are designed with a strict commitment to data minimization and privacy protection. Accordingly, the applications do not intentionally collect or process telemetry data, usage analytics, behavioral tracking information, or crash reporting logs beyond what is strictly necessary to ensure basic functionality and security. This means that Narratech does not monitor user activity patterns, record behavioral interactions, or capture diagnostic events for profiling or marketing purposes. Any incidental technical data that may be generated in the course of system operation—such as limited error codes or system status indicators—is transient, restricted to operational troubleshooting, and not retained or used for analytics.

Clients acknowledge that while certain third‑party platforms or hosting providers may implement their own telemetry or diagnostic mechanisms, Narratech Solutions does not enable, configure, or rely upon such tracking by default. The company’s approach ensures that user privacy is preserved, data collection is minimized, and compliance with the Philippine Data Privacy Act of 2012 and international privacy standards is maintained.

10. Website Practices

Narratech Solutions’ applications are designed to operate without requiring customer account registration as a condition of use. Clients may access and utilize the products and services without the need to create or maintain user accounts, thereby minimizing the collection of personal identifiers and reducing exposure to unnecessary data processing. This approach reflects Narratech’s commitment to data minimization, privacy protection, and user autonomy, ensuring that customers retain full control over their business data without being compelled to provide registration credentials.

Furthermore, Narratech Solutions does not employ Google Analytics, Microsoft Clarity, or comparable analytics platforms for monitoring user behavior, tracking interactions, or generating usage profiles. The company expressly disclaims reliance on third‑party analytics tools that collect telemetry, behavioral, or diagnostic data for marketing or optimization purposes. Any incidental technical information processed by Narratech is limited strictly to operational troubleshooting and system integrity, and is not retained or used for analytics. This ensures compliance with the Philippine Data Privacy Act of 2012 and alignment with international privacy standards, while reinforcing Narratech’s principle of privacy‑by‑design in all applications.

11. Support Access

Narratech Solutions’ support personnel do not have routine or automatic remote access to customer systems, databases, or operational environments. Access is strictly restricted and may only be granted under exceptional circumstances where diagnostic or corrective measures cannot reasonably be performed without such connectivity. In such cases, remote access shall be subject to prior, explicit, and written authorization from the customer, specifying the scope, duration, and purpose of the session.

All authorized remote activities must be conducted under the customer’s supervision, with appropriate monitoring and logging to ensure transparency and accountability. Narratech Solutions expressly disclaims any responsibility for unauthorized or unsupervised access granted by the customer, and shall not be liable for any consequences arising therefrom. By default, customers retain full control over their systems and data, and Narratech’s support model is designed to prioritize security, confidentiality, and compliance with the Philippine Data Privacy Act of 2012 and applicable international standards.

12. Market Scope

The primary market of Narratech Solutions is the Republic of the Philippines, where its products, services, and contractual engagements are principally offered, delivered, and regulated. All commercial activities, including sales, licensing, support, and compliance, are structured to align with Philippine laws, industry practices, and regulatory frameworks. While Narratech Solutions may facilitate integrations or deployments in other jurisdictions, its core business operations, customer base, and service commitments are directed toward the Philippine market.

Clients acknowledge that the company’s business model, pricing structures, and compliance obligations are designed with reference to Philippine statutes and standards, including the Philippine Data Privacy Act of 2012, consumer protection laws, and applicable commercial regulations. Any international engagements are supplementary and subject to separate terms, but the Philippines remains the central jurisdiction and focal point of Narratech’s commercial presence.

13. Contact Information

For any questions, concerns, or requests relating to the collection, processing, retention, or protection of personal data, users may direct their inquiries to Narratech Solutions’ designated Privacy Officer. The Privacy Officer serves as the primary point of contact for all privacy‑related matters and is responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) as well as applicable international data protection standards.

All communications should be addressed to: 

GENELYN CACATIAN

Privacy Officer 

Email: info@narratechsolutions.com

(02) 8465 9050

The Privacy Officer is authorized to receive and respond to requests for data access, correction, deletion, withdrawal of consent, and other rights of data subjects, as well as to provide clarifications regarding Narratech Solutions’ data processing practices. Inquiries will be handled with due diligence, transparency, and within a reasonable period, consistent with statutory requirements and internal compliance protocols. Users are encouraged to provide sufficient detail in their communications to enable proper verification and timely resolution.

14. Data Protection Officer

Narratech Solutions reserves the discretion to either designate its own Data Protection Officer (DPO) or to operate under the established privacy governance framework of Primeline, depending on the structure most appropriate to its business operations and regulatory obligations. Where Narratech appoints its own DPO, such officer shall be duly registered with the National Privacy Commission (NPC) and vested with the authority to oversee compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), including monitoring internal data protection practices, addressing data subject requests, and coordinating with regulatory authorities. Alternatively, where Narratech operates under Primeline’s privacy governance structure, oversight and accountability shall be exercised in accordance with Primeline’s established privacy policies, compliance mechanisms, and governance protocols, provided that such framework meets the statutory requirements imposed by Philippine law and applicable international standards. In either case, Narratech Solutions affirms its commitment to ensuring that privacy governance remains transparent, accountable, and fully compliant with regulatory mandates, thereby safeguarding the rights of data subjects and maintaining the integrity of its data processing activities.

15. Changes to Privacy Policy

Narratech Solutions reserves the exclusive right, at its sole discretion, to amend, revise, or otherwise update this Privacy Policy from time to time in order to reflect changes in business practices, regulatory requirements, technological developments, or operational needs. Any such amendments shall become effective immediately upon publication through Narratech Solutions’ official website or other designated communication channels. 

By continuing to access, utilize, or engage with Narratech Solutions’ applications, platforms, or services after the effective date of any amendment, users shall be deemed to have acknowledged, accepted, and consented to the revised Privacy Policy in its entirety. Users who do not agree with the amended provisions retain the right to discontinue use of the services and terminate their account or license in accordance with the termination provisions herein. No oral, informal, or unauthorized communications shall alter or supersede the published Privacy Policy, which shall serve as the authoritative and binding version at all times.