Introduction and scope
ianmusa.com (the “website”) is the professional portfolio and personal brand website of Ian Musa, an individual based in the Philippines. In this policy, “I”, “me” and “my” refer to Ian Musa, who decides how personal information connected with the website is handled. “You” means anyone who visits the website or contacts me through it.
This policy covers personal information handled through the website and through enquiries that start on it (for example, an email you send me using the website’s contact form or links). It does not cover other websites you reach from links on this one, and it does not cover any later professional engagement, which would have its own terms.
Information collected
Information you choose to send me
The website’s “Start a conversation” form asks for your name, work email and a message, plus optional details: company, timeline and an enquiry topic. When you press send, the form passes these details to a small script on the website’s hosting server, which emails them to me at [email protected] through Z.com’s mail server, with your email address set as the reply address. The script does not save the message to a file or database on the website; it exists as the email I receive. The form also sends the time it took to fill in and a hidden field that people leave empty, which are used only to filter out automated spam. If sending fails, the form offers to open the same message in your own email application instead.
You can also contact me directly by email, by telephone, or through LinkedIn. In each case I receive whatever you choose to send, together with the details your email, phone or LinkedIn service includes (such as your email address, phone number or profile name).
Technical information handled by the hosting server
The website is hosted by Z.com on a standard cPanel hosting account, on servers in Japan. Like most web servers, it records technical details of each request in access and error logs, such as your IP address, the date and time, the page or file requested, your browser and device type (user agent), the referring page and the response status. These logs are used for security, troubleshooting and keeping the website running, and are kept for 60 days.
Information stored only in your own browser
The website stores two small items in your browser’s local storage. They stay on your device and are not sent to me (details in section 05).
Information received by Google Fonts
The website loads its typefaces from Google Fonts. To deliver them, your browser connects to Google’s servers, which receive your IP address and standard browser information (details in section 06).
What the website does not do
Based on a review of the website’s code on 25 October 2026, the website does not use analytics, advertising or tracking pixels, social media widgets, user accounts, or payment processing, and it does not keep a database of visitor information. I do not ask for sensitive personal information through the website, and I ask that you do not send it in an enquiry.
How information is used
- To reply to you and to discuss the work, role or question you contacted me about, including any follow-up steps you ask for.
- To keep the website secure and working, for example by detecting abuse or diagnosing errors from server logs.
- To keep records of correspondence where needed for an engagement that follows, or to meet a legal obligation.
Personal information from the website is not used for marketing lists, profiling, advertising, or automated decision-making. If I ever want to use it for a new purpose, I will update this policy first and, where the law requires it, ask for your consent.
Legal basis for processing
Which legal basis applies depends on the law that governs the processing. As the website is operated from the Philippines, the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules are expected to be relevant. Other laws may also apply depending on where you are and how the processing takes place.
In general terms, personal information connected with the website is processed because:
- you asked me to — when you contact me, your information is needed to respond and, where relevant, to take steps you request before any agreement is made;
- it is necessary for legitimate interests — such as keeping the website secure and functioning, provided those interests are not overridden by your rights and freedoms;
- you have given your consent, where consent is the appropriate basis — you can withdraw it at any time, without affecting processing that already took place;
- the law requires it, where a legal obligation applies.
Data retention
Personal information is kept only for as long as it is needed for the purpose it was collected for, and then deleted or securely disposed of, unless a longer period is required by law. How long that is depends on the purpose:
- Enquiry emails: kept while we are in contact and for 12 months after our last contact; longer only if they become part of an engagement or must be kept for legal reasons.
- Server logs: kept for 60 days.
- Browser storage (
theme,cx-draft): stays on your device until you clear it, or for the draft, until you send the form.
Data security
I take reasonable organisational and technical steps to protect personal information, for example by limiting access to the email account and hosting account to me, and by keeping the website simple, with no database of visitor information. The website is served over an encrypted HTTPS connection.
No website, email system or internet transmission is completely secure, so absolute security cannot be guaranteed. Please do not send sensitive personal information by email unless it is needed. If a personal data breach occurs, I will respond as required by applicable law.
International data transfers
I am based in the Philippines, and enquiries are read and handled there. Some of the services involved may process information in other countries:
- The website and ianmusa.com email are hosted by Z.com on servers in Japan.
- Google, which provides Google Fonts, operates servers in many countries, including the United States.
Where information moves between countries, it is handled in line with this policy and the applicable law, and these providers’ own security and privacy commitments apply to the information they process.
Your privacy rights
Your rights depend on the law that applies to you and to the processing. Under the Philippine Data Privacy Act of 2012, data subjects generally have rights to:
- be informed about how their personal information is processed;
- access their personal information;
- object to processing;
- have inaccurate information corrected (rectification);
- have information erased or blocked, in the circumstances the law allows;
- obtain a copy of their information in a commonly used electronic format (data portability), where applicable;
- be indemnified for damages, as provided by law; and
- file a complaint with the National Privacy Commission of the Philippines.
If you are located elsewhere, the law of your country may give you similar or additional rights.
To make a request, email [email protected] and say which right you want to exercise. I may need to confirm your identity before acting on a request, and I will reply within the time required by the applicable law. You can also manage the browser storage described in section 05 yourself by clearing this site’s data in your browser.
Children’s privacy
The website is a professional portfolio for businesses, recruiters and other professional contacts. It is not directed at children, and I do not knowingly collect personal information from children. If you believe a child has sent me personal information, please contact [email protected] and I will delete it.
Third-party websites
The website links to other sites and services, such as my LinkedIn profile, and these legal pages link to Google’s privacy policy and the Unsplash licence. Those sites have their own privacy practices and policies, which I do not control, so please review them when you visit.
Changes to this policy
I will update this policy if the website, the services it uses, or the applicable law changes. The current version is always published on this page with its effective date at the top. If a change materially affects how your personal information is handled, I will make that clear on the website.
Contact for privacy requests
For questions about this policy or to exercise your rights, contact:
General enquiries about work can also go to [email protected], the address used by the website’s contact form.