Privacy notice

Who this covers

This notice covers calmabasic.com, the Block Instrument at /h20, your Calma Blocks account, and component orders placed through the site. The site is run by Calma.Basic and Calma Blocks, by JP Calma.

Two other companies take part, and each is named where it applies: HOMEQUBE PTE LTD sells instrument credits, and MDCC TECH OPC supplies components, A-2 licensed sign and seal, and agreed Component E. Their terms are summarized in the E-Con Terms.

What we collect

Only what the service needs:

• Your account: your name, your mobile number or email, and an account PIN. The PIN is stored only as a salted hash, never in the clear.
• Your Blocks: the designs you generate and save, your budget, lot size and site notes, and the photos, lot documents or notes you choose to add.
• Your orders: quotes, scope requests, delivery details, stage receipts and the photos you upload for them, and the transfer reference or screenshot you give us for a bank payment.
• Payment records: what was paid, when, and for which order or credit pack. Card and wallet details are typed on Stripe's or PayMongo's own pages and do not reach our servers.
• Enquiries: what you send through the inquiry form or Telegram.
• Technical data: the usual server logs any website keeps, such as your IP address and the time of a request.

Why we use it

To run your account and save your Blocks, to prepare quotes and fulfil the orders you request, to take and record payments, to answer your enquiries, and to keep the service secure.

We do not sell your personal data, and we do not use it for advertising.

Who sees it

Only the people and companies the service needs:

• The project team and Desk staff who handle your Blocks and orders, through signed-in Desk accounts.
• MDCC TECH OPC, for component orders, A-2 and E that you request.
• HOMEQUBE PTE LTD, for instrument credit purchases.
• Stripe and PayMongo, to take your payment.
• DigitalOcean, which hosts the site and our private backup storage in Singapore.
• An installer, only if you ask for an installer referral or introduction, and only what that introduction needs.
• Authorities, when the law requires it.

Cookies and browser storage

The cookies we set are essential to the service. For example, calma_blocks_sid keeps you signed in, calma_blocks_draft and calma_blocks_draft_access keep an unsaved design on your device, and calma-voice remembers your language.

This site does not currently load third-party analytics or advertising trackers.

How long we keep it

We keep your account and saved Blocks while your account is open. Order, payment and delivery records are kept as long as needed to deliver, support warranty and claims, and meet accounting and legal duties. Ask us, and we will delete or de-identify what we are not required to keep.

Your rights

Under the Data Privacy Act you may:

• be informed about how your data is used, as this notice does;
• access the data we hold about you;
• object to how it is processed;
• have errors corrected;
• ask us to erase or block data we have no right to keep;
• receive a copy in a common format;
• claim damages for a violation of your rights; and
• complain to the National Privacy Commission at privacy.gov.ph.

How to ask us

Message us through the inquiry form or on Telegram at @jpcalma. Start with “Privacy request”, and give the mobile number or email on your account so we can find it. We will confirm who you are before we change or send anything, and we will tell you what we did.

How we protect it

The site uses encrypted connections. Account PINs are hashed. Records are kept on private storage, with backups on a private bucket, and staff reach Desk records only through signed-in Desk accounts. No system is perfectly secure. If a breach affects you, we will tell you and the National Privacy Commission as the law requires.

Children

The service is for adults. We do not knowingly collect data from children.

Changes

If this notice changes, the new version is posted here with a new date.