Privacy Notice
This notice explains how Bisnar & Associates (the "Firm") processes personal data collected through this website, in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules, and issuances of the National Privacy Commission (NPC). For this purpose, the Firm is the personal information controller. This notice covers the website only; clients receive a separate, fuller privacy notice as part of their engagement letter.
Inquiry form. When you use the contact form, we collect your name, email address, organization (if provided), and the general description of your inquiry, including the names of other parties you identify. We use this to respond to you and to perform a conflict-of-interest check, which professional responsibility rules require before any engagement. Please do not submit confidential details or documents through the form.
Consultation booking. When you book an initial consultation, we collect your name, email address, and your selected schedule, used to confirm and hold the appointment.
Website analytics. This site uses Cloudflare Web Analytics, a cookieless, privacy-preserving measurement tool. It does not use cookies, does not track you across sites, and does not build individual profiles. We do not use advertising or tracking cookies on this site.
We process this data based on: your consent, given when you submit the form or complete a booking; the legitimate interests of the Firm in responding to inquiries and in performing conflict checks; and compliance with legal and professional obligations applicable to Philippine legal practice, including the Code of Professional Responsibility and Accountability.
The website itself is hosted as static files and stores nothing. Data you submit is handled by the following service providers acting as personal information processors: Formspree, Inc. (inquiry form delivery), Cal.com, Inc. (consultation scheduling), and Microsoft Corporation (the Firm's email and document environment, Microsoft 365). These providers may process data on servers outside the Philippines; each operates under its own security and data protection commitments, and the Firm limits what is submitted to them accordingly.
Information you share with the Firm in the course of seeking legal services is treated as confidential in accordance with the rules on professional responsibility, whether or not an engagement follows. This is also why the inquiry form asks for general descriptions only: fuller confidential discussions take place through more controlled channels after the conflict check clears.
Inquiries that do not lead to an engagement are retained for up to two years and then deleted, except that party names are retained in the Firm's conflicts register, which professional responsibility requires the Firm to maintain. Data relating to clients is retained under the Firm's engagement terms and record-retention policy.
Under the Data Privacy Act, you have the right to be informed about the processing of your personal data; to access it; to correct it; to object to processing; to request erasure or blocking where legally applicable; to data portability; and to lodge a complaint with the National Privacy Commission. To exercise any of these rights, email gerardobisnar@bisnarandassociates.com. We will respond within the periods provided by the DPA and NPC issuances. Note that some data, such as conflicts-register entries, may be retained where the law or professional responsibility rules require it.
The Firm applies organizational, physical, and technical security measures appropriate to the data it handles, including encrypted storage, access controls with multi-factor authentication, and restrictions on where confidential information may be processed.
This notice may be updated from time to time; the effective date above reflects the current version. Material changes will be posted on this page.
Bisnar & Associates
Attn: Gerardo Alfredo M. Bisnar, Principal
gerardobisnar@bisnarandassociates.com