Erick Cabal

Privacy.

What this site collects, where it goes, how long it is kept, and how to have it deleted. Written for the Data Privacy Act of 2012 (RA 10173).

Last updated 3 October 2026

01Who holds your data

Enclave is operated by Erick Cabal, Barangay Pasong Camachile 1, City of General Trias, Cavite, Philippines.

I am the person who decides what happens to the information on this site, and the person you deal with. There is no team behind me.

02What each form collects

The contact form collects your name, your email address and your message. It is emailed to me. It asks for nothing else.

The business questions at /start collect your name, your email, your preferred way of being contacted and an optional handle or number, plus your answers about your business: what it is, your town and country, your customers, how customers contact and pay you, the hardest part of running it, what you already have, your goal for the next six months, and whether you would rather pay once or monthly. They are emailed to me and kept in my client records so I can write your proposal.

A payment proof on an invoice page collects the amount you typed, your reference number and the screenshot you upload. The screenshot goes to private storage, not to a public address.

Please do not send passwords, one-time PINs or ID numbers through any form here. I do not need them and I do not want to hold them.

03Where it goes

This site does keep records. An earlier version of this page said there was no database, which was not true, and that is corrected here.

  • Vercel hosts the site and keeps short-lived server logs, which include IP addresses.
  • Resend delivers the emails the forms send to me.
  • Supabase stores client records, invoices and payment proofs for the back office, including what you send through the forms above.
  • Cloudflare Turnstile checks that a form was submitted by a person and not a bot.
  • Upstash counts recent submissions per IP address so the forms cannot be flooded.

These providers process data on my instructions. Some of them run servers outside the Philippines, so your information may be handled abroad.

04Cookies

The public pages set no advertising or analytics cookies. Turnstile sets what it needs to run its check. If you sign in to the back office, a session cookie keeps you signed in. Your browser may also remember small things for you, such as a dismissed notice.

05How long it is kept

  • Inquiries that never become clients are deleted after 12 months.
  • Payment proof screenshots are deleted automatically 14 days after they are submitted. The amount, reference and dates stay on the invoice record.
  • Client records are kept while we are working together, and afterwards for as long as tax and accounting rules require.

06Your rights

Under RA 10173 you may ask to see what I hold about you, to correct it, to have it deleted, to object to how it is used, and to receive a copy. Tell me and I will do it. There is no form to fill in and no fee.

If you are not happy with how I have handled it, you can complain to the National Privacy Commission.

07How to reach me

Message me through the contact page, or write to the address in section 01. I answer these myself.

08Changes

If this changes in a way that matters, I will update the date at the top. The date above is the version that applies to anything you send today.