Privacy Policy.

This Privacy Policy describes the privacy practices of JRM Digital Solution, operating jrmrc.space under the JRM brand ("JRM," "we," "us," or "our"). It explains how we handle personal data about website visitors, prospective clients, clients, business contacts, and other people who directly interact with JRM.

JRM is based in the Philippines. Our handling of personal data is intended to follow applicable privacy and data-protection requirements, including the Philippine Data Privacy Act of 2012 and its implementing rules where applicable.

This policy applies when you:

• visit or use jrmrc.space;
• submit an inquiry or contact request;
• book a discovery call or appointment;
• request a quote, proposal, consultation, or service;
• purchase, receive, or discuss JRM services;
• communicate with JRM by email, phone, SMS, messaging apps, social media, or similar channels;
• provide information needed for a website, CRM, GoHighLevel, automation, integration, AI, Voice AI, or related project.

This policy does not replace a client's own privacy notice or a separate data-processing agreement that may govern data JRM processes strictly on a client's behalf.

Depending on your interaction with JRM, we may collect the following categories of personal data:

Contact data

Name, business name, email address, phone number, messaging handle, and other contact details you provide.

Business data

Company, role, industry, business requirements, project goals, budget-related information, service interests, and other information relevant to a proposed or active project.

Project data

Brand assets, copy, forms, workflows, calendars, pipeline information, configuration details, account invitations, integration requirements, testing data, support history, and other materials needed to perform agreed services.

Communications

Emails, messages, call details, meeting notes, support requests, approvals, feedback, and other correspondence with JRM.

Transaction data

Invoice status, service purchased, payment confirmation, billing-related records, and transaction references. Payment-card or banking credentials may be processed directly by a payment provider rather than stored by JRM.

Technical data

IP address, browser or device information, referral source, pages viewed, timestamps, basic server logs, security events, and similar technical data that may be generated when you use the website.

Please do not send sensitive personal information, regulated records, passwords, financial credentials, health records, government identifiers, or other high-risk data unless it is genuinely required for an agreed project and an appropriate method of handling it has been established.

We may collect personal data:

• Directly from you when you contact us, submit a form, book a call, purchase a service, respond to a message, provide project materials, or communicate with us.
• Automatically through hosting logs, security tools, cookies, analytics, or similar technologies if those tools are enabled on the website.
• From third-party services you choose to use such as scheduling, social-media, messaging, payment, CRM, or integration platforms.
• From a business or client when that organization provides information necessary for us to perform work on its behalf.

We do not intentionally collect personal data from unrelated sources merely to build profiles about people who have no reasonable connection to JRM's business or services.

JRM may use personal data to:

• respond to inquiries and communicate with prospective or existing clients;
• schedule calls, meetings, consultations, demonstrations, or project reviews;
• prepare proposals, scopes, estimates, invoices, agreements, and project plans;
• deliver, test, troubleshoot, document, maintain, and support agreed services;
• configure websites, CRM systems, GoHighLevel accounts, workflows, integrations, AI systems, Voice AI, forms, calendars, pipelines, and communications;
• process payments and maintain accounting or business records;
• protect accounts, systems, users, and JRM from fraud, abuse, unauthorized access, security incidents, or misuse;
• improve our website, service quality, workflows, documentation, and customer experience;
• send service-related notices and, where permitted, marketing communications;
• comply with applicable law, enforce agreements, and establish or defend legal claims.

We do not use personal data for a materially incompatible purpose without taking any notice, consent, or other step required by applicable law.

Depending on the circumstances and applicable law, JRM may process personal data because:

• you have given consent for a specific purpose;
• processing is necessary to take steps at your request or perform a contract with you;
• processing is necessary to comply with a legal obligation;
• processing is necessary for a legitimate business interest that is not overridden by your applicable privacy rights; or
• another lawful basis recognized by applicable law applies.

Where consent is the appropriate basis, you may withdraw that consent for future processing, subject to legal and contractual limits. Withdrawal does not automatically invalidate processing that was lawful before withdrawal.

The website or services used with the website may use cookies, local storage, pixels, scripts, server logs, or similar technologies for essential functionality, security, preferences, performance measurement, or analytics.

Some browser or device information may be processed automatically when you visit a website, even if you do not submit a form. If JRM enables non-essential analytics or advertising technologies that require consent or an opt-out choice in your jurisdiction, we will provide the controls or notice required by applicable law.

You can usually control cookies through your browser settings. Disabling some technologies may affect website functionality.

Many JRM services involve configuring systems that a client controls, such as GoHighLevel, CRM platforms, websites, forms, calendars, pipelines, email/SMS workflows, cloud services, integrations, and automation tools.

When JRM accesses personal data only to perform work on a client's instructions, JRM may act as a service provider or personal information processor rather than deciding the purpose of that client's data processing. The client remains responsible for determining the lawful purpose of its collection and use of personal data, issuing its own required notices, obtaining required consent, and respecting the rights of its customers, leads, employees, or other data subjects.

JRM will use Client Data only as reasonably necessary to perform the agreed services, comply with instructions and applicable law, protect systems, and satisfy legitimate recordkeeping or dispute-resolution needs.

Where the nature of a project warrants it, the parties may enter into separate data-processing or security terms.

JRM services may include AI-powered chat, AI receptionist, Voice AI, automated qualification, routing, appointment booking, transcription, summarization, lead responses, or other automated workflows.

Depending on the client's configuration, these systems may process names, phone numbers, email addresses, appointment details, messages, call audio, call transcripts, business inquiries, or other information submitted during an interaction.

• The client is responsible for determining whether notice, consent, recording disclosure, opt-out, or other legal requirements apply to its use of AI, automated communications, call recording, transcription, or profiling.
• Only data reasonably necessary for the configured purpose should be provided to AI or automation systems.
• AI outputs may be inaccurate or incomplete and should not be used as the sole basis for high-risk decisions without appropriate human review.
• Third-party AI, telecommunications, CRM, and automation providers may process data under their own contracts and privacy terms.

JRM does not represent that every AI or automation configuration is automatically lawful in every jurisdiction or industry. Privacy and consent requirements depend on how the client deploys the system.

We may use the contact information you provide to respond to requests, schedule appointments, provide proposals, deliver services, send project updates, provide support, send billing notices, and otherwise manage our business relationship.

Where JRM sends marketing email or SMS, we will use consent or another lawful basis where required and provide a reasonable way to opt out. Transactional or service-related messages may still be sent when necessary to fulfill a request, administer a project, protect an account, or meet legal obligations.

If JRM configures email, SMS, calling, or AI outreach on behalf of a client, that client is responsible for the lawfulness of its lists, consent records, messaging content, campaign purpose, call-recording practices, sender registration, and opt-out handling unless a written agreement expressly assigns a specific compliance task to JRM.

JRM may disclose personal data only when reasonably necessary for legitimate business or legal purposes, including to:

• hosting, domain, cloud storage, scheduling, email, messaging, CRM, automation, AI, telecommunications, analytics, payment, accounting, collaboration, and security providers;
• professional advisers such as accountants, legal advisers, or consultants where reasonably necessary;
• a client or authorized project stakeholder where the information relates to that client's project;
• government authorities, regulators, courts, or other parties when disclosure is required by law or reasonably necessary to protect legal rights, safety, systems, or users;
• a successor or transaction counterparty in connection with a legitimate merger, acquisition, reorganization, financing, or sale of business assets, subject to applicable safeguards.

JRM does not disclose personal data merely because another business would like to market to you. If a practice is legally considered a "sale" or "sharing" of personal information in a jurisdiction that grants an opt-out right, JRM will provide the notice and choice required by that law where applicable.

JRM uses internet-based services and may work with clients or vendors in other countries. As a result, personal data may be stored or processed outside the Philippines or outside the country where you live.

Where applicable law requires safeguards for an international transfer, JRM will use an appropriate contractual, organizational, or legal mechanism or will rely on another permitted basis for the transfer.

Third-party platforms may independently determine where they host or process data. Their privacy and security documentation should be reviewed when location or cross-border processing is material to a project.

JRM keeps personal data only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain business and accounting records, manage security, resolve disputes, enforce agreements, and meet legal obligations.

Retention periods vary depending on the type of information, the project, the platform involved, contractual requirements, legal obligations, and whether an ongoing business relationship exists. We do not state a single fixed retention period where one would not accurately apply to all categories of information.

When personal data is no longer reasonably required, JRM will take appropriate steps to delete, anonymize, securely dispose of, or restrict it, subject to technical limitations and lawful retention requirements.

JRM uses reasonable administrative, technical, and organizational measures designed to protect personal data against unauthorized access, misuse, loss, alteration, or disclosure. Depending on the system and project, safeguards may include access controls, account permissions, authentication, secure cloud services, limited credential access, encrypted connections, backups, and vendor security controls.

No website, transmission method, cloud service, or storage system can be guaranteed to be completely secure. You should use strong passwords, multi-factor authentication where available, and secure methods for sharing sensitive access information.

If JRM becomes aware of a personal data breach requiring notification under applicable law, we will take reasonable steps to investigate, contain, document, and provide legally required notifications.

Your rights depend on where you live and which law applies. Under the Philippine Data Privacy Act, data subjects may have rights that include being informed, access, objection, correction, erasure or blocking, data portability, damages, and the ability to file a complaint.

Other jurisdictions may provide additional rights, such as requesting access, correction, deletion, restriction, portability, withdrawal of consent, objection to certain processing, or an opt-out of certain sale/sharing or targeted-advertising activities.

To exercise a privacy right relating to data controlled by JRM, contact us using the details in Section 19. We may need to verify your identity and may ask for information reasonably necessary to locate the relevant records. We will respond within the period required by applicable law.

If the data is controlled by one of JRM's clients and JRM only processes it on that client's instructions, we may direct your request to the appropriate client or assist that client as required by our agreement and applicable law.

Philippine data subjects can learn more about their rights from the National Privacy Commission ↗.

JRM's website and professional services are not directed to children. We do not knowingly seek to collect personal data from children through the website for ordinary business inquiries.

If you believe a child has submitted personal data to JRM without appropriate authorization, contact us so we can review the situation and take action required by applicable law.

jrmrc.space may link to or use third-party services such as scheduling tools, social networks, messaging services, payment providers, portfolio storage, CRM platforms, telecommunications providers, automation services, or other external platforms.

When you leave JRM's website or directly interact with a third-party service, that provider may collect and process information under its own privacy policy and terms. JRM does not control every independent privacy practice of those providers.

Links to third parties are provided for convenience or service functionality and do not by themselves mean JRM is responsible for that third party's independent data practices.

JRM may update this Privacy Policy when our website, services, technologies, vendors, or legal obligations change. The "Last updated" date at the top of the page identifies the current version.

When a change materially affects how we use personal data, we will provide any additional notice or consent required by applicable law.

For privacy questions, data-subject requests, consent withdrawal, or concerns about how JRM handles personal data, contact us using the information below.

Legal Business Name

JRM Digital Solution

Brand / Website

JRM / jrmrc.space

Email

Jhimrickofficial@gmail.com

Phone

+63 936 265 1815

Website

www.jrmrc.space

Privacy Request

Please include enough information for JRM to understand your request and identify the relevant interaction or records.

You may also have the right to complain to the National Privacy Commission or another competent privacy regulator, depending on your location and the law that applies to your personal data.