Book a call

Privacy notice

Last updated 27 October 2026. Version 2.

The short version

  • If you send our enquiry form, we collect your name, email and what you want to talk about, plus anything optional you add.
  • We use it only to reply and arrange a call. No marketing, no selling of your details.
  • Our host, Cloudflare, stores enquiries and delivers them to us by email.
  • We keep enquiries for up to 24 months, then delete them.
  • Google Analytics and Microsoft Clarity run only if you click "Accept analytics".
  • Cloudflare Turnstile, a check that stops automated spam, loads only when you start filling in the form.
  • You can ask to see, correct or delete your details, and complain to the National Privacy Commission.
  • Contact: privacy@mangoandumbrella.com

Who we are

This website is run by Mango & Umbrella, which decides how your details are used. For anything about your personal information, email privacy@mangoandumbrella.com.

What we collect through the enquiry form

Your name and email address, and if you choose to give them: a phone, WhatsApp or Viber number, the country you are in, what you want to talk about, how many people it is about (businesses only), the best time to reach you, and a message. We also record which page the form was on, the version of the consent text you agreed to and when, and a scrambled code made from your internet address so we can limit repeated sending. We never store the internet address itself.

We do not ask for health details, ID numbers or financial details. The Data Privacy Act treats health and ID details as sensitive personal information (RA 10173, Sec. 3(l)). Please don't put them in your message.

Why we use it, and on what basis

Only to reply to you and arrange a call. We rely on your consent, and on the steps you asked us to take before any agreement (RA 10173, Sec. 12(a) and (b)). We do not send marketing, run a newsletter, sell your details or make automated decisions about you.

Analytics and session recording

If you click "Accept analytics", Google Tag Manager loads Google Analytics 4 and Microsoft Clarity. They record which pages you view, your device and browser, your approximate location, and how you click and scroll. Clarity records sessions with every form field and every calculator masked, so nothing you type is visible. If you click "No thanks", none of these load.

Your choice is stored on your device for 180 days. You can change it any time with "Cookie settings" at the bottom of every page. If you change a yes to a no, we remove the analytics cookies and reload the page. Advertising signals are always off.

The bot check on the form (Cloudflare Turnstile)

To stop automated programs sending spam through our form, we use Cloudflare Turnstile. It loads only when you click or tab into the form, never when a page first opens. It is a security check, so it runs whatever you chose for analytics cookies.

Cloudflare says Turnstile looks at technical signals from your browser, such as your IP address, your browser's user agent and the way it connects, to tell people from bots. Cloudflare says it uses these signals only to detect bots and improve that detection, and not to identify, profile or target anyone. We do not use Turnstile for analytics or advertising. When you send the form, we pass your IP address to Cloudflare with the check, and Cloudflare tells us whether it passed; we never see the other signals. See Cloudflare's Turnstile privacy addendum.

Calculators

Our calculators run in your browser. What you type and the results are not saved, not put in the page address and not sent to us or to analytics.

Who receives your details

  • Cloudflare hosts the website, stores enquiries in its database, runs the Turnstile bot check described above, and delivers enquiries to our mailbox by email.
  • Our email provider receives each enquiry in our mailbox.
  • Google (Tag Manager and Analytics) and Microsoft (Clarity), only if you accept analytics.

Cloudflare may also receive a short technical report if a page fails to load. This is part of hosting and is not used for analytics.

Transfers outside the Philippines

These providers may process data outside the Philippines. We use them under their own data processing terms.

How long we keep it

Enquiries are deleted after 24 months. Your cookie choice stays on your device for 180 days. Google Analytics and Microsoft Clarity keep data for the periods set in their own terms.

How we protect it

The site uses HTTPS. Secret keys are kept out of the code, access to enquiries is limited, and the form is protected by a bot check and a limit on repeated sending. If a breach puts you at risk, we will tell the National Privacy Commission and the people affected within 72 hours (RA 10173, Sec. 20(f)).

Your rights

Under the Data Privacy Act you have the right to be informed, to object, to access your details, to have them corrected, to have them erased or blocked, to data portability, and to claim damages (RA 10173, Secs. 16 to 18). To use any of these, email privacy@mangoandumbrella.com. We find your enquiry by the email address you used.

Complaints

You can complain to the National Privacy Commission at privacy.gov.ph.

Changes to this notice

If what we collect or who receives it changes, we update this notice first and change the date at the top. See also our terms of use, or contact us.