Privacy Policy

Effective: 6 September 2026
Notice version: ube-proof-privacy-v1.0-2026-09-06

Who controls the information

The Kreme Lab Trading Corp. operates Brief & Branch and its Ube Proof category program. It controls personal information collected through ube-powder.com.ph. Privacy questions and requests may be sent to info@briefandbranch.com, raised by phone at +63 917 149 7746, or mailed to 244 5th Avenue, East Grace Park, Caloocan City, Metro Manila, Philippines.

What the website collects

The public website currently provides commercial ube information, buyer tools, and a non-submitting Fit Assessment preview. It has no online store or public customer-account system. Standard hosting and security logs may record limited technical information such as the requested page, browser type, approximate network location, IP address, and request time.

When a live Fit Assessment is released, it may collect the business contact and project details stated on the form, such as name, work email, company, role, application, destination, volume band, timing, benchmark, and acceptance criteria. The form will not be released until its consent record, retention rule, access controls, notification owner, and delivery path have been tested.

Do not submit confidential formulas, trade secrets, customer lists, identity documents, or sensitive technical files through a public form. A qualified project can receive a separate controlled route when appropriate.

Why the information is used

Cookies and measurement choices

Non-essential measurement is denied by default. The website records the visitor’s privacy choice in a first-party cookie for up to 180 days. A visitor can choose necessary-only use, allow analytics, or allow analytics and advertising measurement, and can reopen Privacy choices to change that decision.

After analytics consent, the website may load the dedicated Ube Proof Google Analytics 4 stream and Microsoft Clarity directly. Clarity uses Strict masking. Website forms and calculator areas are designated for masking, and names, email addresses, telephone numbers, free-text project details, formulas, and confidential information must not be sent as analytics event parameters.

Google advertising storage, user-data use, and personalization remain denied unless the visitor selects the advertising-measurement option. The accepted-lead advertising event remains disabled until the live form, server acceptance, duplicate prevention, and accountable delivery record pass their release checks.

Legal basis

Necessary processing supports website delivery, security, and the legitimate operation of a business information service. Analytics and advertising measurement rely on the visitor’s recorded choice. A future Fit Assessment will record consent at submission and may also be processed for the legitimate commercial purpose of evaluating and responding to the enquiry, to prepare or perform a contract, and to meet legal obligations. Processing is intended to follow the Philippine Data Privacy Act of 2012 and other applicable requirements.

Service providers and sharing

Hostinger provides website hosting. Google may provide consented analytics and advertising measurement. Microsoft may provide consented Clarity session analytics. Authorized personnel of The Kreme Lab Trading Corp. may review operational records and future enquiries. Information may be shared with an approved manufacturing or technical partner only when necessary for a qualified project’s review or execution, or when disclosure is required by law. Personal information is not sold.

Some providers may process information outside the Philippines. Their contractual, technical, and organizational safeguards apply alongside the responsibility of The Kreme Lab Trading Corp. for selecting and governing the services used by this website.

Retention and security

Consent choices are retained for up to 180 days unless changed sooner. The Ube Proof Google Analytics property is configured for 14-month event-data retention. Hosting and security logs follow the operational retention of the hosting service. Future enquiries that do not become active projects will be reviewed for deletion no later than 24 months after the last meaningful contact. Active or completed project records may be retained for contractual, accounting, tax, dispute, and regulatory requirements. Records are deleted or anonymized when no longer required, subject to lawful holds and backup cycles.

Reasonable access, masking, minimization, and technical controls are used, but no internet service can guarantee absolute security.

Your choices and rights

You may request access to, correction of, or deletion of personal information, withdraw consent, object to certain processing, or ask how information is handled. We may need to verify identity before acting. Concerns may also be raised with the National Privacy Commission of the Philippines.

Updates

Material changes will be dated on this page. The notice version recorded with a future form submission will identify the wording that applied at that time.