Privacy Policy
Plain language. No legal theatre. This page explains exactly what information BraneBox collects when you use this site, why we collect it, and what we do — and don't do — with it.
Last updated: March 2026
Who is responsible for your data.
BraneBox is a sole proprietorship owned and operated by Marquis Kobayashi Mendoza — Kenzo's legal name in the Philippines — registered in Nagoya, Japan on 27 February 2019 and currently operating from the Philippines.
“BraneBox,” “we,” “us,” and “our” all refer to the same entity. If you have any question about this policy or your data, the right person to contact is Kenzo — directly, at kenzo@branebox.com.
What information we collect.
We collect only what we need to do the work. Nothing more.
Contact & Enquiry Form
When you submit the contact form, we receive your name, email address, and the message you write. This information is used to respond to your enquiry and, if you proceed, to manage your project. It is not used for cold outreach or shared with marketing platforms.
Payment Information
Payments are processed through PayPal or direct bank transfer. BraneBox never receives or stores your card number, CVV, or bank credentials. That data goes directly to PayPal or your bank — both of which have their own security and privacy programmes.
We retain a record of the transaction amount, date, and your name for accounting and tax purposes, as required under Philippine law.
Site Analytics
This site uses Google Analytics 4. It collects anonymised data about page views, traffic sources, and device type to help us understand how the site is performing. IP addresses are anonymised. We do not use this data to identify individual visitors.
If you prefer not to be tracked, you can install the Google Analytics Opt-out Browser Add-on.
Hosting & Infrastructure
This site is hosted on Vercel. Vercel may log standard HTTP request data (IP address, user agent, referrer) as part of normal server operation. These logs are governed by Vercel's Privacy Policy.
How we use your information.
The information we collect is used for exactly one of the following purposes — nothing outside this list:
- To respond to your enquiry — If you fill out the contact form, we use your name and email to reply to you. That is all.
- To deliver your project — Project communication, file delivery, revision rounds, and post-launch support.
- To process payment — Transaction records are kept for accounting and legal compliance.
- To improve this website — Anonymised analytics help us understand which pages are useful and which are not.
We do not sell your data. We do not share it with advertisers. We do not add you to any mailing list without your explicit request.
Who else sees your data.
Three external services interact with data on this site:
Google Analytics
Anonymised site traffic data. No personal identifiers.
Vercel
Site hosting. Standard server logs only.
PayPal
Payment processing. Card/bank data handled entirely by PayPal.
No other third parties receive your data. No CRM platforms, no advertising networks, no analytics resellers.
Cookies on this site.
This site uses one category of cookies: analytics cookies set by Google Analytics. These are small text files stored in your browser to distinguish unique visitors and track sessions across pages.
No advertising cookies, no remarketing pixels, no social media tracking. If you block all cookies via your browser settings, the site will function normally — you will simply not be counted in our analytics data.
How long we keep your data.
Contact enquiries that do not lead to a project are kept for 12 months in case you follow up, then deleted.
Project correspondence and payment records are retained for five years to comply with Philippine tax and accounting requirements, then permanently deleted.
Analytics data is retained by Google for 14 months by default, as configured in our Analytics property settings.
What you can ask us to do.
Under the Philippines Data Privacy Act of 2012 (Republic Act 10173), and where applicable, the European General Data Protection Regulation, you have the right to:
- Be informed about what personal data we hold about you
- Access a copy of any personal data we have collected
- Correct inaccurate or outdated information
- Request deletion of your data (where we have no legal obligation to retain it)
- Object to how we are using your data
- Withdraw consent at any time, where consent was the basis for processing
To exercise any of these rights, email kenzo@branebox.com with the subject line “Data Request.” We will respond within 30 days.
How we protect your information.
This site is served over HTTPS. Access to project files and client correspondence is limited to a single person — the founder. There are no junior staff, offshore contractors, or agency partners with access to your data.
No system is perfectly secure. If there is ever a data breach that affects your personal information, we will notify you promptly and report it to the National Privacy Commission as required by Philippine law.
Changes to this policy.
If we change how we collect or use data in a material way, we will update the “Last updated” date at the top of this page and, if the change affects active clients, notify them directly by email.
Routine updates — fixing typos, clarifying language, reflecting minor process changes — do not warrant a notification.
Questions about your privacy?
One email. One person reads it. You will hear back within 24 hours.
kenzo@branebox.com