Privacy Notice
Last updated: 20 October 2026
This notice explains what personal information TapKo collects, why, who sees it, and what your rights are under the Data Privacy Act of 2012 (Republic Act No. 10173). We keep it short and plain on purpose.
1. Who we are
TapKo sells smart business cards and hosts the personal page that opens when a card is tapped or its QR code is scanned. TapKo is run by Heris Walter Gemperle in the Philippines, who decides what personal information is collected and why (the “personal information controller”). You can reach us at hello@tapkoph.com.
2. What we collect
| When you place an order | Your name or business name; how we can reach you (Messenger name or link, or mobile number); the package, quantity and color you choose; any notes you type; the time of the order; and the fact that you agreed to this notice and our Terms. |
|---|---|
| For your card page | What you ask us to put on your page: name, job title, organization, phone, email, social media links, website, address or map link, photos (profile, cover, portfolio), services and prices, opening hours, and custom buttons. For teams, the same for the company page. |
| When you use the site | Our hosting provider (Cloudflare) processes technical data such as your IP address and browser details to deliver and protect the site. To stop order spam, we keep a one-way scrambled version of your IP address for about one minute after an order. We do not run advertising trackers, and we do not use analytics on this site. |
The site and the card pages do not set cookies. We never ask for passwords, ID numbers, or payment card details on the site. Payments are arranged with you directly after we confirm your order.
3. Why we use it
- To receive, confirm, and follow up on your order, and to contact you about it (based on your consent when you tick the box and send the order).
- To design, program, print, deliver, host, and edit your card and page (to carry out the order you asked for).
- To keep the site secure, prevent spam and abuse, and keep recovery copies of our data (our legitimate interest in running a safe service).
- To comply with the law if we are legally required to.
We do not sell your personal information and we do not use it for advertising.
4. Your card page is public by design
Anything you ask us to put on your page can be seen by anyone who taps your card, scans your QR code, or has your link. The page also has a “Save contact” button that downloads those details as a contact file. We ask search engines not to list card pages, but that is a request, not a guarantee. Please only give us details you are happy to share publicly, and tell us if you want something removed.
5. Who we share it with
- Cloudflare hosts the website and stores the data. Its servers are spread around the world, so your information may be processed outside the Philippines.
- Telegram is used to send the owner an alert when an order arrives. The alert includes the order details (name, contact, package, notes).
- A printing shop may receive the text and images that are printed on your physical card, and nothing else.
- Authorities, if the law requires it.
6. How long we keep it
- Orders: for up to 12 months after the order is completed, so we can handle questions and warranty claims, unless we need to keep them longer by law.
- Card pages: for as long as your card is active and its hosting is valid. If hosting is not renewed, we may take the page offline and delete its data after we have messaged you first.
- Recovery backups: copies that we keep for disaster recovery are replaced or deleted in due course.
- If you ask us to delete your information, we will do so unless we must keep it for legal reasons.
7. How we protect it
Pages are served over HTTPS. The admin area that holds customer information is protected by a password, a limit on wrong tries, and short-lived sessions, and only the owner has access. No system is perfectly secure, but we use reasonable organizational and technical measures to protect your information and we will tell you and the National Privacy Commission if a serious breach affecting you happens, as the law requires.
8. Your rights
Under the Data Privacy Act you have the right to:
- be informed about how your personal information is processed;
- access the personal information we hold about you;
- object to processing, or withdraw your consent, for example by asking us to stop contacting you;
- correct information that is wrong or out of date;
- ask us to erase or block your information when it is no longer needed or is being used unlawfully;
- receive a copy of your information in a common electronic format (data portability);
- claim damages if you were harmed by inaccurate, unlawfully obtained, or misused information; and
- file a complaint with the National Privacy Commission at privacy.gov.ph.
To use any of these rights, email hello@tapkoph.com from the contact you gave us, or message us on the same channel you used to order. We may ask you to confirm it is really you before we change or share anything. Changes to a card page usually appear immediately.
9. Age
TapKo is meant for adults. If you are under 18, please order with the permission and help of a parent or guardian.
10. Changes to this notice
If we change how we handle personal information, we will update this page and the date at the top. Questions are welcome at hello@tapkoph.com.