Privacy Policy

1. Who I Am

This website, tjmiranda.com, is operated by Tracy Jon N. Miranda (“TJ Miranda,” “I,” “me,” or “my”), an individual based in California, United States. I am the party responsible for (the “controller” or “personal information controller” of) the personal information described in this policy.

This policy applies to information collected through this website, the Inquiry Form, and in connection with my services: Web Development, Airport Pickup & Drop-off at Manila International Airport (NAIA), Secret Services (discreet and confidential assistance), and Special Handling & Shipping of packages and documents within the Philippines.

2. Information I Collect

Information you provide

• Contact details: full name, email address, and WhatsApp number.
• Date of birth: used only to confirm you are at least 18 years old.
• Inquiry content: the service or subject you select and your message.
• Airport transfer details: flight number, travel date and time, terminal, pickup and drop-off addresses, number of passengers and bags, and special requests.
• Shipping details: sender and recipient names, addresses, and phone numbers; item description and declared value; delivery instructions; and proof of delivery (such as a recipient signature and a photo of the delivered item).
• Secret services details: information about your request that you choose to share, which may include locations, schedules, and details about property, documents, or appointments.
• Web development details: business information, website content, branding assets, and, if you choose to provide them through a secure channel, access credentials for hosting or website accounts.
• Payment and transaction records: amounts, dates, and payment method type. Card and bank details are handled by the payment provider; I do not store full card numbers.
• Identity verification: for certain high-value deliveries or confidential handovers, I may ask to view a government-issued ID in person to confirm the right person receives an item. Please do not send ID numbers through the website.

Information collected automatically

• Server logs: this site is hosted on GitHub Pages. GitHub may log technical information such as your IP address, browser type, the page requested, and the date and time, for security and service operation.
• Form metadata: when you submit the Inquiry Form, Formspree (the form provider) receives technical data such as your IP address and browser information and may use spam protection tools.

This website does not use analytics, advertising pixels, session recording, or cross-site tracking.

Information from other people

Someone else may give me your information — for example, a family member booking your airport pickup, or a sender listing you as a delivery recipient.

3. How I Use Information

I use personal information only for the purposes below. If you are in the European Economic Area (EEA), United Kingdom, or another place that requires a legal basis for processing, the basis for each purpose is listed.

I do not use your information for automated decision-making that produces legal or similarly significant effects, and I do not send marketing messages unless you ask to receive them.

4. Sensitive Information

Some information may be considered “sensitive” under certain laws — for example, account log-in credentials or government ID details under the California Consumer Privacy Act (CCPA), or age under the Philippine Data Privacy Act of 2012. I use sensitive information only as reasonably necessary to provide the services you request, to verify identity or age, to keep people and property safe, and to comply with law. I do not use or disclose it to infer characteristics about you.

5. How I Share Information

I do not sell your personal information, and I do not share it for cross-context behavioral advertising. I have not done so in the past 12 months. I disclose information only as follows:

• Service providers that process data on my behalf, such as Formspree (form handling), GitHub (website hosting), WhatsApp (messaging), my email provider, and payment processors.
• Service partners needed to complete your booking, such as authorized drivers, licensed carriers for inter-island or remote deliveries, and trusted assistants bound by confidentiality. They receive only the information needed for the task.
• Recipients you designate, such as the recipient of a delivery who may see sender details on the package or proof of delivery.
• Legal and safety reasons: when required by law, subpoena, court order, or other valid legal process; to report prohibited items as required by law; or to protect the rights, property, or safety of you, me, or others.
• With your consent or at your direction.

6. California Disclosures

This section provides the notice required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, “CCPA”), and the California Online Privacy Protection Act (CalOPPA). In the preceding 12 months, I have collected the following categories of personal information:

I do not collect biometric information, and I do not create inferences or profiles about you. I do not sell or share personal information, including that of consumers under 16 years of age.

Shine the Light (Cal. Civ. Code § 1798.83): I do not disclose personal information to third parties for their own direct marketing purposes.

Do Not Track and Global Privacy Control: This site does not track visitors over time or across third-party websites, so it does not change behavior in response to browser “Do Not Track” signals. If your browser sends a Global Privacy Control (GPC) signal, I treat it as a valid request to opt out of the sale or sharing of your personal information.

7. Data Retention

I keep personal information only as long as needed for the purposes in this policy, using these criteria:

• Inquiries that don’t lead to a booking: generally deleted within 12 months of the last contact.
• Client and booking records: kept for the duration of the engagement and then as long as needed for tax, accounting, and legal obligations (generally up to 7 years).
• Proof of delivery and chain-of-custody records: generally kept for up to 3 years to handle claims.
• Website or hosting credentials: deleted or returned when the project or maintenance agreement ends; you should change passwords after handoff.
• Government ID: viewed for verification and not copied or kept unless required by law.
• Server and form logs: retained by GitHub and Formspree under their own retention policies.

Information may be kept longer if required by law or needed to resolve a dispute.

8. Your Privacy Rights

Wherever you live, you may ask me to access, correct, or delete your personal information. Depending on your location, you may have additional rights described below.

California residents

• Right to know and access the categories and specific pieces of personal information collected, the sources, the purposes, and the categories of recipients.
• Right to delete personal information, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to data portability in a readily usable format.
• Right to opt out of the sale or sharing of personal information. I do not sell or share it, but you may still submit a request.
• Right to limit the use of sensitive personal information. I use it only for permitted purposes.
• Right to non-discrimination for exercising any of these rights.

You may use an authorized agent. I may ask for proof of the agent’s authority and verify your identity directly. I will respond within 45 days, and may extend this by another 45 days where reasonably necessary, with notice.

Residents of other U.S. states

If you live in a state with a consumer privacy law (such as Colorado, Connecticut, Oregon, Texas, Virginia, and others), you may have similar rights to access, correct, delete, and obtain a copy of your data, and to opt out of targeted advertising, sale, and profiling. If I decline your request, you may appeal by replying to my decision; if your appeal is denied, you may contact your state Attorney General.

EEA, United Kingdom, and Switzerland

You have the right to access, rectify, or erase your data; to restrict or object to processing; to data portability; and to withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with your local data protection supervisory authority. I will respond within one month, which may be extended by two further months for complex requests.

Philippines

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to be informed, to access, to object, to erasure or blocking, to rectification, to data portability, and to damages. You may file a complaint with the National Privacy Commission.

Other countries

If you live elsewhere — for example Canada, Australia, Brazil, Japan, or Singapore — I will honor the rights provided by your local privacy law.

How to submit a request

Use the Inquiry Form, select “Privacy / Data Request,” and describe what you would like me to do. To protect your information, I will verify your identity by matching details you provide with information I already have. Requests are free unless they are manifestly unfounded or excessive.

9. Cookies & Tracking

This website does not set cookies and does not use analytics or advertising technologies. However:

• GitHub Pages may process technical data to deliver and secure the site.
• When you submit the Inquiry Form, Formspree may use cookies or spam-prevention tools (such as a CAPTCHA) on its pages, under its own privacy policy.
• If you message me on WhatsApp, your messages are end-to-end encrypted, but WhatsApp (owned by Meta) processes your account and usage information under its own privacy policy.
• Links to GitHub, Facebook, LinkedIn, and my project websites take you to third-party sites with their own privacy practices.

10. International Transfers

I am based in the United States, and my on-the-ground services are performed in the Philippines. Your information may be processed in the United States, the Philippines, and other countries where my service providers operate, which may have different data protection laws than your country. Where required, I rely on appropriate safeguards such as standard contractual clauses offered by service providers, or on transfers being necessary to perform a contract you requested.

11. Security

I use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information — including encrypted (HTTPS) connections, limited access on a need-to-know basis, confidentiality commitments from partners, and secure handling of physical documents and packages. No method of transmission or storage is completely secure. If a data breach affects your personal information, I will notify you and the relevant authorities as required by applicable law.

12. Children’s Privacy

My services are intended for adults 18 years of age or older, and this website is not directed to children. I do not knowingly collect personal information from children under 13 (or under 16 where local law sets a higher age). If I learn that I have collected information from a minor through the Inquiry Form, I will delete it. Minors may travel as passengers or be delivery recipients only when booked by a parent or legal guardian.

13. Information About Others

If you give me information about another person — such as a passenger, recipient, or someone involved in your request — you confirm that you have the right to share it and that the person has been told how it will be used. I will not accept requests to collect personal information about someone without a lawful basis.

14. Changes to This Policy

I may update this policy from time to time. The “last updated” date at the top shows when it was last changed. If I make material changes, I will post a notice on this website before the changes take effect.

15. Contact

For questions, concerns, or privacy requests, use the Inquiry Form and select “Privacy / Data Request.” I act as the data protection contact for this website.

See also the Terms of Service and FAQs.