Privacy Policy

Effective: 9 July 2026  ·  Controller: Odaz Kato Corp. (“O/K Studios”, “OK Studios”, “we”)  ·  Contact: admin@odazkatocorp.com

1. Who we are

OK Studios is a creative & automation studio operated by Odaz Kato Corp., based in the Philippines and working with clients worldwide. We are the data controller (in Philippine terms, the Personal Information Controller) for the personal data described here. For anything about your data, email admin@odazkatocorp.com.

2. What we collect

We only collect what you deliberately give us, plus the minimal technical data any website receives.

Data you provide

• Contact / project enquiries. When you use our contact form, we collect your name, email address, the topic you select, and the project details you write.
• Newsletter. If you subscribe on our blog, we collect your email address. Subscription is confirmed opt-in — you must click a link in a confirmation email before you receive anything.

Data collected automatically

• Server & security logs. Our host (Cloudflare) processes standard request data — IP address, browser/user-agent, timestamp, and the page requested — to serve the site and protect it from abuse.
• Anti-spam signals. When you submit a form we record a timestamp and how long the form was open, purely to filter automated spam. A hidden “honeypot” field detects bots. Neither is used to profile you.
• Analytics — only if you consent. We use Google Analytics 4 to understand, in aggregate, how the site is used (pages viewed, approximate location by country/region, device and browser type). It runs under Google Consent Mode and is off by default: nothing is measured until you press Accept on our cookie banner. Decline it (or simply ignore it) and no analytics cookies are set and no analytics data is sent. When you accept, Google sets first-party cookies (such as _ga) to recognise returning visits. We never use it for advertising, and we do not store your IP address ourselves.

What we do not use

We do not use advertising pixels, cross-site trackers, or ad-profiling of any kind — no Meta Pixel, no ad networks — and we never sell your data. Apart from the consent-based Google Analytics described above, the only things stored in your browser are functional: your light/dark theme preference and your cookie choice, both kept in localStorage so the site remembers them. Those are strictly functional, never leave your device, and identify no one.

Your choices on cookies

We split cookies into two groups. Necessary storage (your light/dark theme and your cookie choice) is always on — the site needs it to work and it identifies no one. Analytics (Google Analytics 4) is optional and off by default: it only runs if you press Accept on the cookie banner.

You can change or withdraw your choice at any time — just click “Cookie settings” in the footer of any page to reopen the banner and Accept or Decline again. You can also email admin@odazkatocorp.com and we’ll sort it for you.

3. Why we use it, and our legal basis

• To respond to your enquiry and scope work — basis: steps taken at your request prior to a contract, and our legitimate interest in running the studio.
• To send the newsletter — basis: your consent, which you can withdraw at any time by unsubscribing.
• To measure and improve the site with analytics — basis: your consent, given through the cookie banner and withdrawable at any time (see “Your choices on cookies” in section 2).
• To keep the site secure and functioning — basis: our legitimate interest in preventing abuse and delivering the service you requested.

4. Who we share it with

We never sell your data or share it for advertising. We use a small set of processors strictly to run the studio:

• Cloudflare — website hosting, CDN, and security.
• Our own automation server (n8n) — self-hosted; routes form submissions to us.
• Our email provider — delivers the resulting messages and any newsletter to us and to you.
• Google (Analytics) — aggregate, consent-based website analytics; only ever engaged after you accept the cookie banner.

We may also disclose data where required by law, or to protect our rights and the safety of others.

5. International transfers

We operate from the Philippines and serve clients globally, and our hosting provider runs a worldwide network. As a result, your data may be processed in countries other than your own, including outside the EU/EEA and the Philippines. Where that happens we rely on providers that offer appropriate safeguards for the data (such as recognised contractual protections). To ask for details of the safeguards used, email admin@odazkatocorp.com.

6. How long we keep it

• Enquiries — for as long as needed to respond and, if we work together, for the duration of the engagement plus a reasonable period for business and legal records. If nothing comes of it, we delete it on request or during routine clean-up.
• Newsletter — until you unsubscribe, after which we remove your address.
• Server logs — retained only for a short period for security and troubleshooting.
• Analytics — aggregate usage data held by Google Analytics under its own retention settings; withdraw consent at any time to stop further collection.

7. Your rights

Depending on where you live, you have the right to access your data, have it corrected or erased, object to or restrict its processing, request a portable copy, and withdraw consent at any time. Under the EU/UK GDPR and the Philippine Data Privacy Act of 2012 these rights apply to you. To exercise any of them, email admin@odazkatocorp.com — we’ll respond within the timeframe the law requires.

8. Automated decisions

We do not make decisions that produce legal or similarly significant effects about you using automated processing or profiling.

9. Children

Our site and services are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

10. Complaints

We’d like the chance to resolve any concern first — email admin@odazkatocorp.com. You also have the right to complain to a data protection authority: in the Philippines, the National Privacy Commission; in the EU/EEA or UK, your local supervisory authority.

11. Changes to this policy

If we change how we handle data, we’ll update this page and move the effective date at the top. Material changes will be made clear.