Legal
Privacy Policy
Effective Date: October 6, 2026 · Last Updated: October 8, 2026 · Website: Basics of Tagalog – https://basics-of-tagalog.com/ · Data Controller: Milany Guab (Vaasa, Finland) · Contact: [email protected]
At Basics of Tagalog (“we”, “us”, “our”), your privacy is important. This Policy explains what information is processed when you visit our website. We comply with the EU General Data Protection Regulation (GDPR) and other applicable data protection and electronic communications laws.
1. Data Controller and Data Protection Officer
Milany Guab is the data controller for this website.
Contact: [email protected].
No Data Protection Officer (DPO) has been appointed because the processing activities carried out through this website do not require the designation of a DPO under Article 37 GDPR. For privacy inquiries, contact the controller above.
You have the right to lodge a complaint with your supervisory authority. In Finland: Office of the Data Protection Ombudsman – tietosuoja.fi. Outside the EU: your local authority.
2. What Data We Process
We ourselves have designed this site to collect as little data as possible and do not collect personal data via forms or accounts:
- No accounts, no newsletter, no direct personal data collection. We do not ask for your name, email, or phone on this site.
- Technical request data automatically processed by hosting provider: Our hosting provider Cloudflare, Inc. (Cloudflare Pages – pages.dev) automatically processes technical request data to deliver the site securely. This may include IP address, user agent, date/time, requested URL, and country-level geolocation derived from an IP address. For personal data processed on our behalf in connection with the Site, Cloudflare acts as our processor under Article 28 GDPR, subject to the applicable Cloudflare Data Processing Addendum. See Cloudflare Privacy Policy.
We do not currently use third-party analytics services, advertising pixels, or tracking technologies for advertising or cross-site tracking. The Site itself does not intentionally set HTTP cookies for these purposes. However, our hosting and security provider, Cloudflare, Inc., may set strictly necessary cookies when particular Cloudflare security, bot-protection, traffic-management, or challenge features are used. These cookies are intended to be used only where they are strictly necessary for a service explicitly requested by the user and therefore do not require consent where the applicable ePrivacy rules provide an exemption. The specific cookies and retention periods depend on the Cloudflare services enabled for the Site. See Cloudflare's Cookie Policy for details.
3. Purpose and Legal Basis
We distinguish between whether consent is required to store or access information on your device (ePrivacy) and the GDPR lawful basis if personal data is processed.
- Deliver and secure the website, prevent abuse – ePrivacy: No separate consent is required for information strictly necessary to provide the service requested by the user. GDPR lawful basis: Legitimate interest – Art. 6(1)(f) GDPR – our interest in providing a secure, performant, educational site.
4. Cookies and Similar Technologies
If we introduce non-essential cookies in the future (e.g., for analytics or advertising), we will implement a consent banner that meets Finnish requirements (express consent before placement, refusing as easy as accepting), update this Policy, and ensure any required consent mechanism is in place before those technologies are activated.
5. Future Advertising
There are currently no advertisements on this site.
We may in the future introduce third-party advertising (such as Google AdSense) to support maintenance. If we do, this Policy will be updated to include: (a) the identity of advertising partners, (b) the use of cookies/personalized advertising, (c) legal basis where consent is legally required (Art. 6(1)(a)), and (d) instructions to opt out or withdraw consent.
No advertising will be loaded before consent is obtained where required by law.
6. Third-Party Links
This site contains links to third-party platforms, e.g., Tutoroo for booking private classes. Links use rel="noopener noreferrer" to improve security. We do not control those platforms. When you click a third-party link, your IP address and referrer may be visible to that platform and its privacy policy applies. Any data you provide to a third-party platform is subject to that platform's privacy policy.
7. International Data Transfers
Cloudflare may process log data on servers outside the EU/EEA, including in the United States. Where required, such transfers are protected by an applicable adequacy decision, the EU Standard Contractual Clauses, the EU-US Data Privacy Framework where applicable, and other safeguards provided under Cloudflare's Data Processing Addendum. See Cloudflare's privacy and DPA documentation for details.
8. Data Retention
- Hosting logs (including IP addresses): We do not independently retain visitor access logs. Cloudflare may process and retain technical and security-related data for the periods applicable to the Cloudflare services used by the Site. Retention periods vary by service, dataset, plan, and configuration. Cloudflare acts as our processor for this data under Article 28 GDPR, subject to the applicable Cloudflare Data Processing Addendum.
9. Your Rights
Under GDPR and applicable laws, you have the following rights, subject to conditions and exceptions in the law:
- Right of access – obtain confirmation and a copy of personal data we process
- Right to rectification – correct inaccurate data
- Right to erasure – request deletion where applicable
- Right to restriction – restrict processing in certain cases
- Right to object – object to processing based on legitimate interest
- Right to data portability – where processing is based on consent or contract and automated
- Right to withdraw consent – where processing is based on consent
- Right to lodge a complaint – with your supervisory authority, e.g., in Finland tietosuoja.fi
Because we do not maintain user accounts, we do not store UI preferences locally. Hosting logs are processed by our processor Cloudflare — see its policy for retention. To exercise rights, contact: [email protected].
10. Children's Privacy
This educational site is not specifically directed at children, and we do not knowingly request or collect personal information from children. If we learn that we have collected personal data from a child protected under applicable law, we will take appropriate steps to delete it. If you believe we have inadvertently collected such data, contact us to delete it.
11. Security
We use HTTPS and Cloudflare's security infrastructure. However, no method of transmission over the Internet is 100% secure. We apply technical and organizational measures appropriate to the nature and limited scope of the processing.
12. Changes to This Policy
We may update this Policy from time to time. Changes will be posted on this page with a new effective date. For material changes involving new tracking or advertising, we will provide a prominent notice and seek consent where required.