Privacy Policy
Last Updated: April 8, 2026
This Privacy Policy describes how Mikes Sta. Ana, operating as a sole proprietor under the brand digitalcallum.com ("we," "us," or "our"), collects, uses, and shares your personal information when you visit our website at digitalcallum.com (the "Site") or interact with us in connection with our AI operations and automation services.
Please read this Privacy Policy carefully. Where we rely on consent as a legal basis for processing, we will obtain your consent through a clear affirmative action (such as submitting a form or accepting cookies) before processing your data.
1. Sources and Collection of Personal Information
We collect personal information in the following ways:
Information You Provide Directly
When you submit a form on our Site (for example, to download a resource or request a consultation), we collect:
- First name
- Last name
- Email address
We also record the source of the submission (e.g., "workflow-bundle") and the date and time the form was submitted.
Information Collected Automatically
When you visit the Site, certain information is collected automatically through third-party analytics tools:
- Pages visited and interactions on the Site (via Google Analytics 4)
- Browser type, device type, and general location data (via Google Analytics 4)
We do not set any first-party cookies. However, third-party services we use (such as Google Analytics) may set their own cookies on your device. See Section 10 for details.
Information We Do Not Collect
We do not collect payment information, government-issued identifiers, health data, or any sensitive personal information through the Site. We do not operate user accounts or require login credentials.
2. How We Use Your Personal Information
We use the personal information we collect for the following purposes:
- Delivering requested resources. When you submit a form to receive a free resource (such as a workflow bundle), we use your name and email to send you the requested materials.
- Communicating with you. We may send follow-up emails related to the resource you downloaded, including relevant tips, offers, or information about our services.
Every marketing or follow-up email we send includes an unsubscribe link. You may opt out of marketing communications at any time by clicking "unsubscribe" in any email or by contacting us at mikes@digitalcallum.com. Opting out of marketing will not affect transactional communications related to services you have engaged us for.
- Scheduling consultations. If you book a discovery call through Calendly, your information is used to schedule and confirm the meeting.
- Improving the Site. We use analytics data to understand how visitors use the Site so we can improve content and user experience.
- Business operations. We use your information to manage our business, respond to inquiries, and deliver our services.
3. Legal Basis for Processing
For the purposes of applicable data protection laws (including the GDPR), Mikes Sta. Ana is the data controller responsible for your personal information collected through the Site.
Depending on your location, we process your personal information based on one or more of the following legal bases:
- Consent. When you voluntarily submit a form on the Site, you consent to the collection and use of your information as described in this Privacy Policy.
- Legitimate interest. We have a legitimate business interest in understanding how visitors use the Site, communicating with prospective clients, and marketing our services.
- Performance of a contract. If you engage us for services, we process your information as necessary to fulfill our obligations.
If you are located in the European Economic Area (EEA) or the United Kingdom, you may withdraw your consent at any time by contacting us at the email address listed in Section 16.
4. How We Disclose Your Personal Information
We do not sell, rent, or trade your personal information to third parties.
We share your information only with the following categories of service providers, solely for the purposes described in this Privacy Policy:
| Service Provider | Purpose | Data Shared |
|---|---|---|
| Google Analytics 4 | Website analytics and traffic measurement | Anonymized browsing data, cookies |
| n8n (self-hosted) | Workflow automation to process form submissions | Name, email, source, timestamp |
| Google Sheets | Storing form submission data | Name, email, source, timestamp |
| Gmail | Sending emails (resource delivery, follow-ups) | Name, email |
| Calendly | Scheduling discovery calls | Name, email (as provided by you on Calendly) |
| Cloudflare | DNS resolution and email routing | IP address (standard for DNS) |
| Google Fonts | Serving web fonts (Montserrat) | IP address (standard for font loading) |
Our n8n instance is self-hosted on infrastructure we control. Form submission data processed through n8n is not shared with any additional third parties.
We may also disclose your information if required by law, legal process, or government request, or to protect our rights, safety, or property.
Service Delivery Tools. When you engage us for paid services, we may use additional tools including AI platforms, project management software, and communication tools to deliver those services. Data processing in connection with service engagements is governed by the terms of the applicable service agreement.
5. Data Retention
We retain your personal information for as long as it is necessary to fulfill the purposes described in this Privacy Policy. Specifically:
- Form submission data (name, email, source, timestamp) is retained for up to three (3) years from the date of collection, or for as long as we have an ongoing business relationship or legitimate reason to retain it, whichever is longer. After this period, data is reviewed and deleted unless there is a continuing lawful basis for retention. You may request deletion at any time.
- Analytics data is retained according to Google Analytics 4's default retention settings.
You may request deletion of your personal information at any time by contacting us at mikes@digitalcallum.com. We will process your request within 30 days of receipt. If additional time is needed due to the complexity or volume of requests, we may extend this period by up to 60 additional days, and we will notify you of any such extension.
6. International Data Transfers
Your personal information may be transferred to, stored, and processed in countries other than your own, including the Philippines and the United States. These countries may have data protection laws that differ from those in your jurisdiction.
Where we transfer personal information outside the European Economic Area or the United Kingdom, we rely on one or more of the following safeguards: (a) the European Commission's adequacy decisions; (b) standard contractual clauses approved by the European Commission; or (c) the data importer's compliance with frameworks recognized under applicable law.
By providing your information through the Site or our services, you acknowledge that your data may be processed in these locations. We take reasonable steps to ensure your information receives an adequate level of protection in accordance with applicable data protection laws.
7. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
- Access. You can request a copy of the personal information we hold about you.
- Correction. You can request that we correct inaccurate or incomplete information.
- Deletion. You can request that we delete your personal information.
- Restriction. You can request that we restrict or limit how we use your information.
- Portability. You can request a copy of your data in a structured, machine-readable format.
- Objection. You can object to our processing of your personal information based on legitimate interests.
- Withdraw consent. Where processing is based on consent, you can withdraw it at any time.
- Opt out of marketing. You may opt out of receiving marketing emails at any time using the unsubscribe link in any email or by contacting us directly.
For EU/EEA and UK residents (GDPR): You have the rights listed above under the General Data Protection Regulation. You also have the right to lodge a complaint with your local data protection authority.
For California residents (CCPA/CPRA): You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.
For Australian residents: You have rights under the Australian Privacy Act 1988, including the right to access and correct your personal information.
For Canadian residents: You have rights under PIPEDA, including the right to access and correct your personal information.
For Philippine residents (Data Privacy Act of 2012, Republic Act No. 10173): You have rights under the Philippine Data Privacy Act, including the right to be informed, the right to access, the right to object, the right to erasure or blocking, the right to damages, the right to rectification, and the right to data portability. You may file a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated.
We are not established in the European Economic Area. If you are an EU/EEA resident and have questions about our processing of your personal information, please contact us at mikes@digitalcallum.com.
To exercise any of these rights, contact us at mikes@digitalcallum.com. We will respond to your request within 30 days of receipt. If additional time is needed due to the complexity or volume of requests, we may extend this period by up to 60 additional days, and we will notify you of any such extension.
8. Children's Privacy
The Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will delete that information promptly. If you believe we have collected information from a child, please contact us at mikes@digitalcallum.com.
9. How We Protect Your Information
We take reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, or alteration. These measures include:
- HTTPS encryption on all Site pages
- Self-hosted workflow automation (n8n) on secured infrastructure
- Access controls on data storage (Google Sheets, Gmail)
- Cloudflare DNS and routing protections
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
10. Tracking Technologies (Cookies)
Cookies set by the Site: The Site itself does not set any cookies. We use localStorage (a browser storage mechanism, not a cookie) solely to remember your dark mode preference. This data stays on your device and is not transmitted to us.
Third-party cookies: We use Google Analytics 4, which sets its own cookies to collect anonymized data about Site usage, including pages visited, time spent, and general geographic location. Google Analytics cookies are governed by Google's privacy policy, available at https://policies.google.com/privacy.
Google Fonts: When fonts are loaded from fonts.googleapis.com, your browser makes a request to Google's servers, which may log your IP address. Google's privacy policy applies to this data.
Tailwind CSS CDN: When the Site loads styles from cdn.tailwindcss.com, your browser makes a request to that server, which may log your IP address.
How to manage cookies: You can control or disable cookies through your browser settings. Disabling cookies will not affect the core functionality of the Site. You can also opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on at https://tools.google.com/dlpage/gaoptout.
Do Not Track Signals. Some browsers transmit "Do Not Track" (DNT) signals. Our Site does not currently respond to DNT signals. You may opt out of analytics tracking using the methods described above.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. When we make changes, we will update the "Last Updated" date at the top of this page.
For material changes that significantly affect how we process your personal information, we will make reasonable efforts to notify you, such as by posting a prominent notice on the Site or sending an email to the address associated with your submission.
We encourage you to review this Privacy Policy periodically. Your continued use of the Site after any changes constitutes your acceptance of the updated Privacy Policy.
12. Third-Party Links
The Site may contain links to third-party websites or services (such as Calendly for booking calls). We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
13. Limitation of Liability
To the maximum extent permitted by applicable law, our total liability arising out of or related to this Privacy Policy or your use of the Site shall not exceed the amount you have paid us, if any, in the twelve (12) months preceding the event giving rise to the liability. In no event shall we be liable for any indirect, incidental, special, consequential, or punitive damages, regardless of the cause of action or theory of liability, even if we have been advised of the possibility of such damages.
This limitation applies to the fullest extent permitted by law in your jurisdiction. Nothing in this section excludes or limits liability that cannot be excluded or limited under applicable law.
14. Governing Law
This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of the Philippines, without regard to conflict of law principles. Any disputes arising from this Privacy Policy shall be resolved in the courts of Metro Manila, Philippines, unless otherwise required by applicable mandatory law in your jurisdiction.
15. Severability
If any provision of this Privacy Policy is held to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.
16. Contact Us
If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how we handle your personal information, contact us at:
Mikes Sta. Ana
Email: mikes@digitalcallum.com
Website: digitalcallum.com
We aim to respond to inquiries within 30 days of receipt, subject to the extension provisions described above.