Privacy Policy

Who this covers

This website is operated by Phil-Nippon Kyoei Corporation (PNKC), a company registered in the Philippines with its office at S705 Royal Plaza Twin Towers Condominium, 648 Remedios St., Malate, Manila. This policy applies to this website only. It does not cover any dealings you have with us by phone, by email outside the website, or in person, which are governed by our ordinary business practice.

We handle personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

What we collect

We collect only what you type into a form and choose to send. There is no account system, no profiling, and no purchase of data from third parties. Depending on the form, that is:

• Enquiry and product inquiry forms — your name, email address, company, the subject of your enquiry, an enquiry title, and your message. The product inquiry modal also records which product you were viewing.
• Careers and internship applications — your surname, first name and middle initial, contact details, the role or department you are applying to, any profile links you supply, and an optional CV or supporting file of up to 4 MB.

Fields marked as required on the form are required because we cannot act on the enquiry without them. Anything else is yours to leave blank.

Why we are allowed to

The Data Privacy Act requires us to have a lawful basis for handling your information, and to tell you which one we rely on. There are three here, and which applies depends on what you did:

• Your consent — you chose to fill in a form and send it. You can withdraw that consent at any time using the details under contacting us, though it does not undo an email already delivered to a mailbox.
• Steps taken at your request — answering an enquiry, preparing a quotation, or assessing an application are things you asked us to do, and we cannot do them without the details you sent.
• Our legitimate interests — the bot check and the submission counters described below exist to stop this website being used to send mail in bulk from our account. We rely on this basis only for those security controls, they process the minimum that works, and none of it is used to build a profile of you.

How we use it

We use what you send to answer your enquiry, prepare a quotation, or assess your application — nothing else. We do not sell it, rent it, or use it for marketing you did not ask for.

Enquiries are routed to the PNKC mailbox responsible for that subject, so a supply enquiry reaches our sales team and an application reaches HR. The routing is determined by the subject you pick on the form.

How submissions are handled

This website has no database. A submitted form is turned into an email and delivered over an encrypted connection to the relevant PNKC mailbox. Nothing you submit is written to storage on the website itself; it lives in our email system, under the same controls as the rest of our business correspondence.

Because the message is sent from our own mail account, your email address is carried in the reply-to field so that the person handling your enquiry can respond to you directly.

We also email you back. When a submission goes through, this website sends a short receipt to the address you typed into the form, so you have proof it arrived. It names the team your submission reached, the reference we file it under, and the time it was received. It carries nothing you wrote — no message body, no answers, and no copy of any file you attached — because it is sent to an address anyone could type into a form, and it should never be capable of delivering your enquiry to someone else's inbox. The one detail of yours it does carry is inside that reference, which is built from your company name or surname.

In some circumstances the receipt is deliberately not sent — it is the only message this site addresses to somewhere a stranger typed, so it errs on the side of not sending. Your enquiry still reaches us either way, and you will still get an answer from a person.

We keep enquiry correspondence and application files for [retention period — to be confirmed by PNKC], after which they are deleted from our mailboxes.

IP addresses and technical data

Separately from anything you type, connecting to any website reveals your IP address and some details about your browser. Here is exactly what happens to yours on this site, who sees it, and for how long.

• Our hosting provider receives your IP address and ordinary request details — the page you asked for, your browser's user-agent, the time — for every request, as any web host necessarily does. It keeps them under its own operational logging.
• Our rate-limit provider stores your IP address as part of a counter, and this is the one place a technical identifier of yours is deliberately written down. It exists to count how many submissions have come from your connection. Every counter expires automatically, and none is kept longer than 48 hours. Nothing else about you is stored beside it — not your name, not your email address, and not a word of your message.
• Our bot-check provider receives your IP address, your browser's user-agent and characteristics of your connection, but only on the four pages that carry a form. It never runs on a page without one.
• Our font provider receives your IP address and browser details on every page load, because your browser fetches the typefaces from it directly. This is the one third-party request that happens site-wide.

Alongside those, one thing worth stating because it is true and unusual: this website's own application logs record neither your IP address nor your email address. The lines it writes when something is refused or retried name the kind of form and the reason — never who sent it.

Two further short-lived values are kept by the same provider to stop the same message being delivered twice: an identifier issued to your form, and a one-way fingerprint of the submission's content. Both expire within minutes, and a fingerprint cannot be turned back into the message it came from.

We describe the purpose and the lifetime of these controls, but not their thresholds or timings. Publishing the exact numbers would tell anyone wanting to abuse the forms precisely how to pace themselves around them, which would defeat the protection they give you.

Cookies and device storage

This website sets no cookies. Not few — none. There is no analytics package, no advertising pixel, and no cross-site tracking of any kind.

It does keep two small values in your browser, and because people reasonably call all of this "cookies" it is worth being exact about the difference. A cookie is sent back to a server with every request. Neither of these is a cookie, and neither is ever transmitted — to us or to anyone else. They are read only by the page you are on, and you can delete both by clearing site data.

• pnkc-consent — local storage. Your answer to the notice below. It holds four things: a version number, the date and time you answered, and true/false for each of the two optional categories. No name, no address, no identifier. It stays until you clear it or change your answer.
• pnkc-kai-nudge — session storage. The single value 1, set when you dismiss the chat assistant's greeting so it does not reappear on every page of the same visit. It is discarded when you close the tab, and it contains nothing that identifies you.

One qualification, because it is the honest one: the four pages with a form run our bot-check provider's check, described under third-party services below. It is a security control rather than tracking, and it may itself set a short-lived cookie or store a value in your browser to remember that the check on this page already passed. That is the only thing on this site outside our own control that could store anything, it is not used to recognise you anywhere else, and it appears on no page without a form.

We still ask you, because the honest answer is worth stating and because your answer has to be on record before anything changes. On your first visit a notice offers three categories:

• Strictly necessary — what the site cannot work without. Always on. Today this is one entry in session storage, used only to remember that you dismissed the chat assistant's greeting so it does not reappear on every page during the same visit. It is discarded when you close the tab, and it contains nothing that identifies you. The bot check on the form pages falls in this category too: declining it would mean not being able to contact us at all, so it runs whatever you choose here.
• Analytics — would count visits and show which pages are useful. Nothing of the kind is installed.
• Marketing — would let advertising or social platforms recognise you across sites. We run none of it.

Nothing beyond the two entries described above is stored regardless of what you choose. The setting decides what would be permitted if we ever added analytics; until we do, the answer is the same either way. We record it anyway so that your choice is on file before anything could change, rather than being assumed afterwards.

You can change or withdraw your answer at any time through Cookie settings at the bottom of any page. If we add anything that tracks you, we will describe it here and ask again rather than relying on an answer you gave about something else.

Third-party services

Five services are involved in running this website, and each sees something:

• Our hosting provider serves the pages and runs the form endpoint. Receives: your IP address and ordinary request details, on every request, as any web host necessarily does. Keeps: per its own operational logging.
• Our font provider supplies the typefaces, which your browser fetches directly from it. Receives: your IP address and browser details, on every page load — this is the one third-party request that happens site-wide. Keeps: per its own policy. Never receives: anything you type.
• Our mail provider carries form submissions to our mailboxes and carries the receipt back to you. Receives: everything in the submission, including any file you attached, because it is the thing delivering it. Keeps: the message, in our mailboxes, for as long as we keep the correspondence.
• Our bot-check provider checks that the person filling in one of our four forms is a person. It runs only on the pages that carry a form — contact, careers, internship, and the product inquiry window. Receives: your IP address, your browser's user-agent and connection characteristics, and the identifier of our form. Never receives: what you typed — the check runs before the form is sent, and the contents go to the mail provider instead. The provider states that these signals are used only to tell people from bots and that individuals cannot be identified from them.
• Our rate-limit provider holds the counters that stop the same form being submitted hundreds of times. Receives and stores: your IP address as part of a counter, an identifier issued to your form, and a one-way fingerprint of the submission's content. Keeps: each one expires automatically; none is held longer than 48 hours, and most expire within minutes. Never receives: the text of your message, your name, or your email address.

Beyond those, we have no embeds — no social widgets, no third-party video, no chat platform. The assistant on this site answers from content published on this website and sends nothing to an outside service.

The bot check and the counters exist for one reason: the forms send mail from a real mailbox, and without them anyone could use this site to send an unlimited amount of it. They are not analytics, and nothing they see is used to build a profile of you.

Processing outside the Philippines

All five providers above operate outside the Philippines, mostly in the United States and Europe. That means your information — the contents of a submission in the case of the mail provider, and technical data such as your IP address in the case of the others — is processed abroad.

PNKC remains accountable for it wherever it is processed. We use established providers operating under their own published privacy terms, we send them the least that makes the service work, and we do not authorise any of them to use what they receive for their own purposes. If you would like to know which providers we currently use, ask us using the details below and we will tell you.

How we protect it

No website can promise perfect security, and we are not going to. What we can tell you is what is actually in place:

• The whole site is served over HTTPS, so what you send is encrypted in transit.
• Submissions are handed to the mail provider over an encrypted connection.
• There is no database. Nothing you submit is written to storage on the website itself — it becomes an email and leaves. There is no store of past enquiries here to breach.
• Nothing you submit is ever written into this website's own logs.
• The form endpoint applies origin, volume and automation checks before it accepts anything.
• Uploads are size-limited and restricted to document formats — CVs as PDF or Word; enquiries may also attach a spreadsheet or an image. The form tells you if a file is too large rather than failing silently.
• We never ask for, and never handle, payment card details. No part of this website takes payment, and we will never email you asking for bank or card information.

You will notice this section says what is in place rather than how it is configured. That is deliberate. A description detailed enough to be useful to someone attacking the site is not a security measure, and the specifics are not what this policy exists to tell you — what happens to your information is.

If we ever become aware of a breach affecting your personal information, we will act on it in line with the Data Privacy Act, including notifying the National Privacy Commission and the people affected where the law requires it.

If you believe you have found a security problem with this website, please tell us at inquiry@philnippon.com.ph rather than publishing it, and give us a reasonable opportunity to fix it. We will not pursue anyone who reports a genuine issue to us in good faith and does not exploit it or access anyone else's data.

Children

This website is aimed at businesses and at people looking for work or an internship, and is not directed at children. We do not knowingly collect information from anyone under 18. Internship and careers applications assume an applicant of working age. If you believe a child has sent us something through this site, tell us using the details below and we will delete it.

Your rights

The Data Privacy Act gives you specific rights over your personal information. All of them apply to what you send us here:

• To be informed — to know that we hold information about you and why. That is what this page is for.
• To access — to ask what we hold about you and receive a copy of it.
• To rectification — to have anything inaccurate or incomplete corrected.
• To erasure or blocking — to ask us to remove or suspend our use of your information, where the law allows.
• To object — to tell us to stop processing your information, including withdrawing a consent you gave earlier.
• To data portability — to obtain what you gave us in a structured, commonly used electronic format.
• To damages — to be compensated for harm caused by false, inaccurate or unlawfully obtained use of your information.
• To complain — to lodge a complaint with the National Privacy Commission if you believe your rights have been breached. You do not have to come to us first, though we would rather have the chance to put it right.

Write to us using the details below and we will respond. We may need to confirm who you are before acting on a request, so that we do not hand someone else's information to the wrong person.

Contacting us

For any question about this policy, or to make a request about your information, email inquiry@philnippon.com.ph or call (02) 8400-5778 during office hours, Monday to Friday, 8:00 AM to 5:00 PM.

Our Data Protection Officer is [Data Protection Officer — name and contact details to be confirmed by PNKC]. Until those details are published here, send anything addressed to the Data Protection Officer to inquiry@philnippon.com.ph, marked for their attention, and it will be passed on.

If you need this policy in a different format, say so and we will provide one. Our accessibility statement covers how we try to keep this site usable for everyone.

Changes to this policy

If we change how we handle information, we will update this page and move the date at the top. Material changes will be described here rather than made quietly.