Privacy Policy

Last updated: January 31, 2026

PH-iDols ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at https://phidols.com (the "Service"). Please read this policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Data You Provide

When you register and use PH-iDols, we may collect:

• Account Information: Name, email address, username, password (stored as a secure hash).
• Profile Information: Bio, location, website URL, profile photo, cover photo.
• Content: Posts, comments, messages, and media (images, videos) you upload.
• Communications: Direct messages you send to other users.

1.2 Automatically Collected Data

When you access the Service, we automatically collect:

• Log Data: IP address, browser type and version, pages visited, time and date of visit, time spent on pages, referring URL.
• Device Data: Device type, operating system, screen resolution, unique device identifiers.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, and similar technologies. See our Cookie Policy for full details.

1.3 Data from Third Parties

We may receive information from third-party advertising partners and analytics providers, including demographic data and interest-based data, for the purpose of serving relevant advertisements.

2. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: You have given explicit consent for processing for specific purposes (e.g., marketing emails, non-essential cookies, personalized advertising).
• Contractual Necessity: Processing is necessary to provide you the Service (account management, content delivery, messaging).
• Legitimate Interest: Processing is necessary for our legitimate interests (platform security, fraud prevention, service improvement), provided these do not override your fundamental rights.
• Legal Obligation: Processing is necessary to comply with applicable laws.

3. How We Use Your Information

We use the collected data for the following purposes:

• To create and manage your account.
• To display your profile and content to other users.
• To deliver your news feed, notifications, and messages.
• To personalize your experience, including content recommendations.
• To serve advertisements, including interest-based/personalized ads from third-party ad networks. Ad partners may use cookies and similar technologies to deliver relevant ads.
• To analyze usage patterns and improve the Service.
• To detect and prevent fraud, abuse, and security threats.
• To communicate with you about updates, features, and promotional offers (with your consent).
• To comply with legal obligations.

4. Advertising & Third-Party Partners

PH-iDols is an ad-supported platform. We work with third-party advertising networks and partners to display ads on the Service. These partners may:

• Use cookies, web beacons, and similar tracking technologies to collect information about your browsing activity on our Service and across other websites.
• Use this information to provide targeted advertisements that may be relevant to your interests.
• Collect data such as your IP address, device identifiers, browser information, and pages visited.

You can manage your ad preferences and opt out of personalized advertising:

• Through our cookie consent banner when you first visit.
• By visiting Your Online Choices (EU).
• By visiting Digital Advertising Alliance Opt-Out.
• By adjusting your browser's cookie settings.

5. Data Sharing & Disclosure

We do not sell your personal data. We may share your data with:

• Other Users: Your profile information, posts, and public content are visible to other users as part of the Service.
• Advertising Partners: Aggregated or pseudonymized data for ad targeting and measurement. Personal data is shared with ad partners only with your consent (via cookie preferences).
• Service Providers: Trusted third parties who help us operate the platform (hosting, analytics, email delivery), bound by data processing agreements.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained until you delete your account.
• Posts and content: Retained until you delete them or your account.
• Messages: Retained until the conversation is deleted by both parties or account deletion.
• Log data: Retained for up to 12 months for security and analytics.
• Ad-related data: Cookie data is retained according to cookie lifespans detailed in our Cookie Policy.

After account deletion, we may retain certain data in anonymized form for analytics purposes or as required by law.

7. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or a jurisdiction with similar data protection laws, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention requirements.
• Right to Restrict Processing: Request that we limit the processing of your data under certain circumstances.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests, including profiling for direct marketing or personalized advertising.
• Right to Withdraw Consent: Withdraw previously given consent at any time (this does not affect the lawfulness of processing before withdrawal).
• Right to Lodge a Complaint: File a complaint with your local Data Protection Authority (DPA).

To exercise any of these rights, contact us at privacy@ph-idols.com. We will respond within 30 days.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encrypted password storage using bcrypt hashing.
• CSRF protection on all forms and API endpoints.
• XSS prevention through output escaping.
• SQL injection prevention through prepared statements.
• Secure session management with HttpOnly cookies.
• File upload validation and restricted execution.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

PH-iDols is not intended for users under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

• Email: privacy@ph-idols.com
• Data Protection Officer: dpo@ph-idols.com