Privacy Policy
Privacy Policy & Data Protection Statement
Rowell Mark Blanca is committed to safeguarding your privacy in compliance with the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018, and EU GDPR.
1. Data Controller Information
For the purpose of applicable data protection laws, the Data Controller responsible for your personal data collected through rowellblanca.dev is:
Rowell Mark Blanca
Senior Full-Stack Software Engineer & WordPress Architect
Website: https://www.rowellblanca.dev
Email: rowellblanca94@gmail.com
2. Legal Bases for Data Processing (UK GDPR Art. 6)
We process your personal information under the following lawful bases:
- Explicit Consent (Art. 6(1)(a)): When you voluntarily submit project inquiries, contact forms, or accept optional analytics cookies.
- Contract Performance (Art. 6(1)(b)): To take pre-contractual steps or fulfill software development and engineering contracts requested by you.
- Legitimate Interests (Art. 6(1)(f)): To maintain website security, prevent fraud, optimize performance, and manage CRM client communication.
3. Information We Collect
Depending on how you interact with our website, we may collect the following categories of data:
A. Contact & Inquiries
- Full Name
- Email Address & Phone Number
- Company Name & Industry
- Project Scope & Budget Details
- Timestamped Consent Audit Records
B. Technical & Analytics
- Anonymized IP Address
- Browser Type & Device Specifications
- Referral URLs & Session Duration
- Google Analytics 4 Pageview Metrics
- Essential Cookie Session Data
4. Cookies & Preference Management
We use cookies to enhance your browsing experience and measure site usage. You can manage or revoke your consent at any time via our persistent website cookie banner or your web browser settings.
Required for core website security, authentication state, and session routing. Cannot be disabled.
Collects anonymized traffic statistics to help us analyze visitor engagement. Loaded only after user consent.
5. Service Providers & Third Parties
We do NOT sell, rent, or trade your personal data. Data is shared strictly with compliant infrastructure subprocessors necessary to deliver our web platform:
- Hosting & Edge CDN: Vercel Inc. (Global CDN deployment with SSL encryption).
- Database Infrastructure: Neon Inc. (Managed PostgreSQL with serverless encryption).
- Analytics Provider: Google LLC (Google Analytics 4 with IP anonymization enabled).
- AI Services: Google Gemini API & OpenAI API (Processed transiently for chatbot inquiries without training on user data).
6. Data Security & Retention
We implement robust technical and organizational security measures, including HTTPS TLS encryption, database access controls, and strict RBAC privileges. Inquiry records are retained for up to 24 months for commercial communication unless erasure is requested.
7. Your Data Subject Rights
Under UK GDPR and EU GDPR, you hold the following statutory rights regarding your personal information:
8. Contact Information & Complaints
To exercise any of your data protection rights or submit a Subject Access Request (SAR), please email:
If you believe your data has been handled unlawfully, you also have the right to lodge a complaint with the United Kingdom supervisory authority: Information Commissioner's Office (ICO) at ico.org.uk.