Last updated: October 8, 2026
This Privacy Policy explains how John Gabriel Catarong (“I,” “me,” or “my”) handles personal information through johngabrielcatarong.com, a portfolio and professional-services website. It covers website visits, inquiries, cookies, analytics, and related communications.
John Gabriel Catarong operates this website from Cagayan de Oro, Philippines. For privacy questions or requests, email [email protected].
Information you provide: When you submit a contact form or email me, I receive your name, email address, selected service interests, message, and any other information you choose to share. Follow-up discussions may include project requirements and business contact information. Please avoid sending passwords, payment-card information, identification documents, or other sensitive information through the general contact form.
Technical and usage information: The website and its service providers may process IP addresses, browser and device details, referring pages, pages visited, approximate location derived from technical information, timestamps, cookie identifiers, interaction events, and security or error logs. Microsoft Clarity may also collect clicks, scrolling, navigation, and session-replay information.
I use information to respond to inquiries, discuss and provide requested services, manage related correspondence, understand and improve the website, record cookie preferences, troubleshoot problems, and prevent spam, fraud, and abuse. Information may also be used to meet legal obligations and establish, exercise, or defend legal claims.
Where applicable law requires a legal basis, processing may rely on your consent, steps requested before entering a contract or performance of a contract, legal obligations, or legitimate interests in operating and securing the website and handling business inquiries. Where consent is required for optional tracking, you can withdraw that consent.
This website uses cookies and similar technologies for essential functions, security, preference storage, analytics, and understanding website interactions. CookieYes provides the cookie banner and preference controls. It stores your choices and may maintain consent records, including a consent identifier, date and time, selected categories, and a partially masked IP address.
You can accept or reject optional cookie categories or adjust your choices through the website’s cookie preference controls. You can also manage cookies in your browser. Blocking essential cookies may affect some features. Rejecting optional analytics does not prevent you from contacting me. Where consent is required, I obtain your consent before enabling optional cookies and tracking. Limited cookieless measurement may occur where enabled and permitted by applicable law.
The cookie preference panel provides details of detected cookies and their purposes and lifetimes. Cookie lists may change as the website and third-party services change. See CookieYes’s Privacy Policy.
Google Analytics 4: I use GA4 to understand visits, traffic sources, page usage, and interactions such as inquiry-related events. Google may process device and browser information, online identifiers, approximate location, and event data. GA4 does not log or store individual IP addresses. I do not intentionally send contact-form names, email addresses, or message contents to GA4. See Google’s Privacy Policy and Google’s Analytics opt-out browser add-on.
Microsoft Clarity: I use Clarity’s heatmaps and session replays to understand how visitors navigate and interact with the website and to identify usability problems. These tools reconstruct website interactions; they are not recordings from your camera or microphone. Clarity uses cookies and other technologies and may process usage information and online identifiers. Microsoft also processes this information for purposes described in its privacy statement, which may include product improvement and advertising. See the Microsoft Privacy Statement and Clarity privacy information. Please avoid entering sensitive information into website fields.
Google Tag Manager: GTM manages the deployment of website tags, including analytics tags. The data collected depends on the tags enabled and their consent settings. I do not intentionally include contact-form names, email addresses, or message contents in analytics event payloads.
Google Search Console: I use Search Console to monitor indexing, search visibility, clicks, impressions, and technical issues. Its reports describe the website’s performance in Google Search; it does not require visitors to sign in to this website or add a separate visitor-tracking script.
The website uses WordPress, Elementor, hosting services, and caching tools to deliver its pages and process inquiries. Hosting and technical providers may process request information and operational logs.
Cloudflare provides content delivery, performance, and security services. Traffic may pass through its network, where IP addresses, request details, browser information, and security signals may be processed. Cloudflare Turnstile helps distinguish genuine contact-form submissions from automated abuse. It processes technical signals such as IP address, browser information, and the website origin. When Cloudflare Web Analytics is enabled, its beacon also measures visits and website performance. See Cloudflare’s Privacy Policy and its Turnstile Privacy Addendum.
The website may load Google Fonts to display its typography. When fonts are requested directly from Google, Google receives technical request information, including your IP address and browser information. Fonts served locally do not require that direct request to Google.
Contact-form submissions may be stored in WordPress when submission storage is enabled, delivered to my email inbox, and recorded in mail-delivery logs. These records can include the information you submit, delivery status, and error details.
FluentSMTP connects the website to my authorized Gmail account to send website-generated inquiry notifications and related messages. Information sent through this connection may include the recipient address, subject, and submitted message content. Website visitors are not asked to authorize access to their own Google accounts.
The website’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google account information accessed through this connection is used for the disclosed email functionality and is not used for advertising.
Information is shared with providers as needed for hosting, security, consent management, analytics, email delivery, and requested services. I may also disclose information when legally required or reasonably necessary to protect rights and prevent abuse. I do not sell contact-form information.
Providers may process information outside the Philippines, including in the United States and other countries where they operate. Applicable safeguards depend on the provider, service, and relevant law. Each provider’s linked privacy notice explains its own processing practices.
I retain inquiry and correspondence records for as long as reasonably necessary to respond, manage a potential or ongoing engagement, maintain relevant business records, and meet legal obligations. Mail logs, backups, cookie records, and analytics data have separate retention periods governed by the configured service settings and provider policies. Deletion from active systems may not immediately remove copies in backups.
I use reasonable technical and organizational measures to protect information. No website, storage system, or transmission method can guarantee absolute security.
Depending on the applicable law, including the Philippine Data Privacy Act of 2012, you may have rights to be informed, access your personal information, request correction, object to certain processing, withdraw consent, request erasure or blocking, and obtain data portability where applicable. Some requests may be limited by legal obligations or other lawful grounds.
To make a request, email [email protected] with enough information to identify the relevant record. I may ask for reasonable identity verification before releasing or changing personal information. You may also raise concerns with the Philippine National Privacy Commission or the relevant authority in your jurisdiction.
This website is intended for people seeking professional services and is not directed at children. If you believe a child has provided personal information, please contact me so I can review and address it.
Links to other websites, including LinkedIn, lead to services governed by their own privacy policies. This policy does not cover their independent practices.
I may update this policy when website features, providers, or information practices change. The date above indicates the latest revision. Material changes will be communicated where required by applicable law.
