LEGAL
Privacy Policy
Effective September 6, 2026
OrasFlow provides online appointment-booking tools for local service businesses. This policy explains how personal information is handled when a business uses OrasFlow or a customer books through an OrasFlow page.
1. Who is responsible for your information
The business shown on a booking page decides why customer appointment information is collected and how it is used for that business. OrasFlow, based in Kitcharao, Agusan del Norte, Philippines, operates the booking platform and processes that information to provide the service. OrasFlow is responsible for information collected for its own business operations, including account, subscription, support, and sales-inquiry information.
2. Information we collect
- Appointment information: customer name, email address when supplied, phone number, selected service, price, appointment date and time, status, and appointment changes.
- Business-account information: business and owner names, email address, phone number, location, services, prices, operating hours, page settings, and subscription or payment records.
- Sales inquiries: contact name, mobile number, business type, location, and message.
- Technical and security information: account authentication details, timestamps, and limited records needed to keep the service secure and reliable.
3. Why we use information
We use personal information to create and manage appointments; show availability; prevent double bookings; send confirmations, reminders, and private appointment-management links; provide owner and administrator dashboards; respond to inquiries; maintain accounts and subscriptions; prevent misuse; troubleshoot problems; and comply with legal obligations.
4. Legal bases and consent
Information is processed when needed to provide a requested booking or contracted service, when the person has given consent, for legitimate and proportionate business or security purposes, or when required by law. A person may withdraw consent where consent is the applicable basis, although this does not invalidate earlier lawful processing.
5. When information is shared
Appointment information is shared with the business receiving the booking. Information may also be handled by service providers that support hosting, authentication, databases, and email delivery. These providers may process information only for the service they provide. We may disclose information when legally required, to protect users and the service, or during a legitimate business transfer subject to appropriate safeguards. OrasFlow does not sell personal information.
6. Storage, international processing, and retention
Service providers may process information in the Philippines or other countries where they operate. We use reasonable safeguards for such processing. Information is retained only as long as reasonably needed for appointments, accounts, security, disputes, and legal obligations. When a business account is placed in the OrasFlow recovery bin, it is scheduled for permanent deletion after 15 days unless restored. Some limited records may be retained longer when required by law or necessary to resolve a dispute.
7. Security
OrasFlow uses access controls, private owner areas, authentication, limited-access management links, and reputable infrastructure providers. No online system can guarantee absolute security. Suspected incidents are investigated and required notifications will be made in accordance with applicable law.
8. Your privacy rights
Subject to the Philippine Data Privacy Act of 2012 and applicable rules, you may request information about processing, access to your information, correction, objection, deletion or blocking when legally available, data portability where applicable, or withdrawal of consent. You may also file a complaint with the National Privacy Commission.
9. Children’s information
OrasFlow is a general appointment service and is not designed to collect information from children without appropriate involvement from a parent or guardian. A parent or guardian should assist a minor when the nature of the appointment or applicable law requires it.
10. Contact and policy changes
To ask a privacy question or exercise a privacy right, use the contact form on the OrasFlow home page. For an appointment-specific request, you may also contact the business named on the booking page. We may update this policy when the service or legal requirements change; the effective date above will be updated.