Privacy Notice
Skyline Drones (“Skyline,” “we,” “us,” or “our”), a One Person Corporation registered in Taguig, Philippines, is committed to protecting your personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) (“DPA”), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). We are the personal information controller (PIC) for the personal data described in this notice.
This notice explains what personal data we collect, why, who we share it with (including providers outside the Philippines), how long we keep it, how we protect it, and the rights you have as a data subject — and how to use them.
Address: Taguig, Philippines
Email: contact@skylinedronesph.com
Phone / WhatsApp: +63 952 398 1373
1. What this notice covers
This notice covers this website, our contact form, our email and WhatsApp conversations with you, and the imagery our drones capture during a service engagement. Our instant price estimator, online booking requests, and customer account/portal are temporarily paused — none of them are available on the Site right now, and we are not collecting data through them. If we bring any of them back, we'll update this notice to describe how they handle your data before they go live again.
2. Personal data we collect
| Where | What we collect |
|---|---|
| Contact form | Name, email, phone (optional), company and role (optional), the service and project details you describe, and your message. |
| Security and technical data | Your IP address and browser/device information on every request, and standard server/security logs used to run and protect the Site. See section 6. |
| Communications | Emails, WhatsApp messages, and call notes you send us, if you contact us that way. |
| Drone operations | Photographs, videos, thermal scans and survey outputs of the property we're hired to work on. These may incidentally include people, vehicles or neighboring properties — see section 9. |
We do not ask for government ID numbers, dates of birth, financial account details, or other sensitive personal information through this site, and we ask you not to send them to us. Forms mark which fields are required; everything else is optional.
3. Why we use it and our legal basis
| Purpose | Legal basis (DPA §12) |
|---|---|
| Replying to your inquiry and preparing a quotation | Steps you asked for, before a contract (§12(b)) |
| Scheduling, performing and invoicing the service you've engaged us for | Performance of a contract (§12(b)) |
| Keeping tax, accounting and corporate records | Compliance with a legal obligation (§12(c)) |
| Coordinating flight operations with CAAP where required | Legal obligation (§12(c)) |
| Securing our systems, preventing fraud and misuse, and keeping the security logs described in section 2 | Our legitimate interests (§12(f)), balanced against your rights |
| Sending you news and offers | Your consent (§12(a)), which you can withdraw at any time — see section 11 |
| Using project imagery in our portfolio or marketing | The client's written consent, and — for any identifiable individual — their consent or blurring first |
4. Who we share it with
We do not sell personal data. We share it only with the providers below, who process it on our behalf or to run the parts of the service you use, and — where the law requires — with authorities.
| Provider | What they do |
|---|---|
| Render | Hosts this website and the backend that receives contact-form submissions. See section 5 — this involves a transfer outside the Philippines. |
| Formspree | Delivers a notification of new contact-form messages to our team's inbox. |
| FormSubmit | A backup delivery route for the contact form only, used only if our own server can't be reached, so your message isn't lost. |
| Cloudflare | Sits in front of this website for delivery and security (for example, blocking abusive traffic). |
| jsDelivr | Delivers a code library this site uses for on-page animation. Your browser requests it directly from jsDelivr, which sees your IP address and browser type, as with any web request. |
| WhatsApp (Meta) | Only if you tap our WhatsApp button and choose to message us — WhatsApp then handles that conversation under its own privacy policy. |
We may also share personal data with our own operations team assigned to your project (bound by confidentiality), with regulators and authorities when the law requires it (for example CAAP flight-authorization filings or BIR reporting), and with professional advisers such as counsel or auditors, under confidentiality.
5. Transfers outside the Philippines
Render hosts this website's backend on infrastructure located in the United States. That means personal data you give us through the contact form is processed on servers in the United States, not only in the Philippines. We remain responsible for your data when it's transferred this way (DPA §21), and we use hosting terms that require appropriate security and confidentiality safeguards.
6. How we protect it
We use technical and organizational measures appropriate to the data involved, including:
- Encrypted connections (HTTPS) between your browser and this site, with HTTP Strict Transport Security enabled.
- A Content-Security-Policy and other browser security headers that limit what a compromised or malicious script could do on this site.
- Standard server and security logging, used to investigate suspicious activity.
- Access to inquiry, project and invoice data limited to authorized staff.
No system is perfectly secure. If a breach occurs despite these measures, see section 13.
7. How long we keep it
| Data | Retention |
|---|---|
| Inquiries and estimates that don't become a project | Up to 12 months from your last contact with us, then deleted or anonymized. |
| Customer accounts (account creation currently paused) | For any account created before the pause, data is kept for as long as that account remains open; you can ask us to delete it at any time — see section 10. |
| Booking and project records | Up to 5 years after the project ends, aligned with Philippine tax and corporate record-keeping requirements. |
| Invoices and accounting records | At least 10 years, per BIR requirements. |
| Security and audit logs | Kept only for as long as needed for security and fraud-prevention purposes, and longer where an incident is under investigation. |
| Aerial imagery working copies | Up to 24 months unless a longer period is agreed with the client. |
After the applicable period, we work towards securely deleting or anonymizing the data. If you'd like more detail on a specific record, contact us using section 12.
8. Drone imaging and people nearby
Aerial photographs, videos, thermal scans, and survey outputs produced during a Skyline Drones engagement are, by default, provided to the client for the agreed project purpose. We retain a working copy for our records and quality-assurance archive, per the retention period in section 7.
We ask the client to inform occupants and neighbors of the scheduled operation in advance. During flights, we point cameras at the facade or asset we're hired to work on, avoid filming into windows and private interior spaces where practical, and make reasonable efforts to avoid capturing incidental personal data of bystanders, vehicles or neighboring properties. Where such incidental capture is unavoidable, we secure and store that footage in accordance with this notice.
We do not use client-identifiable imagery in marketing materials, on our website, or on social media without the client's prior written consent. Where consent is granted for a project that could show identifiable individuals, we blur faces, vehicle plates and private interiors before any publication. If you believe our drones recorded you and would like to know more, contact us using section 12 — we'll tell you whether we hold footage of you and, unless we must keep it for a legal claim or obligation, we can delete or blur it.
9. Your rights as a data subject
Under the Data Privacy Act, you have the right to:
- Be informed about the collection and processing of your personal data.
- Access the personal data we hold about you.
- Object to processing, including for direct marketing.
- Have inaccurate or outdated data corrected.
- Request erasure or blocking of your data, subject to lawful retention obligations (for example, invoices we must keep for tax purposes).
- Get a copy of the data you gave us in a structured, commonly used electronic format (data portability).
- Lodge a complaint with the National Privacy Commission (privacy.gov.ph) if you believe your rights have been violated.
- Be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data, in accordance with applicable law.
If you have an existing customer account from before the portal was paused, you can request a copy of your account, booking, estimate and invoice data, or ask us to delete your account, by contacting us using section 12 — we may ask you to verify your identity first. The customer portal is currently paused and does not offer self-service sign-in or access to this data; the contact details in section 12 are the only way to reach us about it right now.
10. Withdrawing consent
Where we rely on your consent (for example, marketing emails, or using identifiable project imagery in marketing), you can withdraw it at any time using the unsubscribe link in a marketing email, or by emailing us using section 12. Withdrawing consent doesn't affect processing we already did before you withdrew it, or processing we do on a different legal basis, such as delivering a service you've booked.
11. Cookies and browser storage
See our Cookie Policy for the full list. In short: we don't use advertising or analytics cookies. The customer portal is currently paused, so no portal sign-in token or session is set at this time; if the portal is reactivated, we'll update this section first. This site may also cache some of its own pages on your device for faster loading, but never your account data. If you disable cookies or clear site data in your browser, the public pages will keep working.
12. How to reach us about privacy
To exercise your rights or ask any question about this notice, contact us at:
Email: contact@skylinedronesph.com
Phone / WhatsApp: +63 952 398 1373
The Data Privacy Act requires us to designate a Data Protection Officer. We're finalizing that designation and a dedicated contact address for the role; until then, the address above reaches the team responsible for privacy requests.
13. Data breaches
If a personal data breach is likely to give rise to a real risk of serious harm to you, we will notify the National Privacy Commission and the affected data subjects within 72 hours of knowledge of the breach, as required by NPC Circular No. 16-03 and the Data Privacy Act. We'll tell you what happened, what data was involved, and what you can do.
14. Children's data
Skyline Drones provides business-to-business and property-owner services and does not knowingly collect personal data from individuals under the age of 18 through this site. If we become aware that we have inadvertently collected such data, we will delete it promptly.
15. Changes to this notice
We may update this notice from time to time. Material changes will be indicated by updating the “Last updated” date at the top of this page, and, for account holders, we will email you before a material change affecting your account takes effect. We encourage you to review this page periodically.
← Back to home