Privacy Policy

KB Networks IT Solutions ("KB Networks," "we," "our," or "us") is an internet service provider headquartered in Manapla, Negros Occidental, Philippines. We operate the website at www.kbnetworksph.com, the KB Networks Customer Portal, and supporting web applications and billing systems (collectively, the "Services").

This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and how you can exercise your rights. By using our Services, you agree to the practices described in this Policy. If you do not agree, please discontinue use and contact us to close your account.

We are committed to complying with the Republic Act No. 10173 — Data Privacy Act of 2012 (DPA) of the Philippines and its implementing rules and regulations.

We collect information you provide directly to us, information generated automatically when you use our Services, and information from third parties where applicable.

When you apply for service, register a portal account, or contact support, you may provide:

• Full name and date of birth
• Home or business address and barangay
• Contact number (mobile or landline)
• Email address
• Government-issued ID details (for identity verification and billing)
• Payment information such as GCash number or bank account details
• Service plan preferences and installation details
• Support ticket descriptions, attached photos, and correspondence
• Feedback, survey responses, or communications sent to us

When you access our website or portal, we may automatically collect:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time on page, and navigation path
• Device identifiers and screen resolution
• Referring website or URL
• Session authentication tokens (managed via Supabase Auth)
• Network equipment identifiers (MAC address, PPPoE username) for provisioned subscribers
• Usage statistics from router or access point equipment on our network

We use the information we collect to:

• Provision, activate, and manage your internet service subscription
• Generate invoices, collect payments, and maintain billing records
• Authenticate your identity when you log in to the customer portal
• Respond to support tickets, complaints, and inquiries
• Send service-related notifications such as due date reminders, planned maintenance, and outage alerts
• Perform network diagnostics, troubleshoot connectivity issues, and manage infrastructure
• Detect, investigate, and prevent fraud, abuse, or unauthorized access
• Comply with legal obligations including court orders, NTC regulations, and tax reporting
• Analyze usage trends to improve our Services and plan network expansion
• Communicate updates to our policies, terms, or service offerings

We do not sell your personal information to third parties for marketing purposes.

We may share your information only in the following circumstances:

• Service providers — cloud hosting (Supabase/Vercel), payment processors, and communication platforms that process data on our behalf under strict confidentiality agreements
• Legal compliance — government agencies, regulators, or courts when required by law, subpoena, or valid legal process
• Protection of rights — when we believe disclosure is necessary to protect our rights, property, or the safety of our staff or subscribers
• Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity
• With your consent — for any other purpose with your explicit prior consent

We do not share personal data with third-party advertisers or data brokers.

We retain personal information for as long as your account is active or as needed to provide Services. After account closure we may retain data for:

• Billing and payment records — 5 years (BIR and tax compliance)
• Support ticket and correspondence history — 3 years
• Access logs and network usage data — 12 months
• Identity verification documents — duration of service plus 1 year
• Legal hold data — for the duration required by the applicable proceeding

Once data is no longer required, we securely delete or anonymize it in accordance with our internal data retention schedule.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include:

• TLS/HTTPS encryption for all web and API traffic
• Row-level security (RLS) policies on our database, ensuring users can only access their own data
• Role-based access control (RBAC) restricting staff access based on job function
• Hashed credential storage — passwords are never stored in plain text
• Regular security reviews of authentication flows and admin access
• Audit logging of sensitive administrative actions

While we take reasonable precautions, no method of transmission over the internet is 100% secure. If you discover a security vulnerability, please report it immediately to support@kbnetworksph.com.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information:

• Right to be informed — you have the right to know how your data is collected and used (this Policy)
• Right of access — you may request a copy of the personal information we hold about you
• Right to rectification — you may request correction of inaccurate or incomplete records
• Right to erasure / "right to be forgotten" — you may request deletion of your data under certain conditions (see our Data Deletion Policy)
• Right to data portability — you may request your data in a structured, machine-readable format
• Right to object — you may object to processing for direct marketing or other purposes
• Right to file a complaint — you may lodge a complaint with the National Privacy Commission (NPC) at www.privacy.gov.ph

To exercise these rights, please contact us at support@kbnetworksph.com with a valid proof of identity.

Our website and customer portal use the following types of cookies and similar technologies:

• Essential cookies — required for authentication session management (Supabase Auth tokens stored as secure, HTTP-only cookies)
• Preference cookies — remember your theme (light/dark mode) preference
• Analytics cookies — basic page-view statistics (if enabled) to understand how the site is used

We do not use third-party advertising or cross-site tracking cookies. You can configure your browser to block or delete cookies; however, disabling essential cookies will prevent you from logging in to the portal.

Our Services are built on and integrated with the following third-party providers:

• Supabase (Supabase Inc.) — database, authentication, and file storage. Data is stored in servers within their infrastructure. See: supabase.com/privacy
• Vercel (Vercel Inc.) — web application hosting and edge delivery. See: vercel.com/legal/privacy-policy
• Google OAuth — optional sign-in via Google accounts. When used, Google shares your email and profile name with us under Google's privacy policy
• GCash / payment gateways — payment processing for billing. These services have their own privacy practices
• Telegram — optional service notifications sent to staff channels. No subscriber personal data is included in notification content beyond reference numbers

We encourage you to review the privacy policies of these providers. KB Networks is not responsible for their data practices.

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children. Internet service subscriptions require the account holder to be at least 18 years old or to have a parent or guardian co-sign the service agreement.

If you believe a child has provided us with personal information without parental consent, please contact us at support@kbnetworksph.com and we will promptly investigate and delete such information.

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Post a prominent notice on our website or customer portal
• Notify active subscribers via email or SMS where the change significantly affects their rights

Continued use of our Services after the effective date constitutes acceptance of the updated Policy.

If you have questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please contact us:

• Email: support@kbnetworksph.com
• Phone: +63 981 435 8868
• Address: Main Office, Manapla, Negros Occidental, Philippines
• Business hours: Monday–Saturday, 8:00 AM – 5:00 PM (PHT)

You may also visit our Contact page to send us a message directly.