Your privacy matters to us. This Privacy Policy explains what personal information Thinking Baboon collects, how we use it, how we protect it, and what rights you have over it. We encourage you to read this document in full.
1
Who We Are
Thinking Baboon is a brand awareness and online reputation management company. We collect and process personal data in connection with providing our services to clients and in operating our website at www.thinkingbaboon.com.
For the purposes of applicable data protection law, Thinking Baboon is the data controller for personal information collected through our website and service engagements.
Data Controller Contact
2
Who We Are
2.1 Information You Provide Directly
We collect information you provide when you contact us, request a Brand Audit, complete an intake form, or enter into a Service Agreement. This may include:
- Name and contact details: email address, phone number, and business address.
- Business information: company name, industry, website URL, and social media handles.
- Payment information: billing details processed through our payment provider. We do not store full card numbers directly.
- Communications: emails, messages, and notes exchanged during the engagement.
- Brand and reputation assets: logos, bios, profile content, and other brand materials shared for the purpose of delivering services.
- Brand and reputation assets: logos, bios, profile content, and other brand materials shared for the purpose of delivering services.
2.2 Information We Collect in Delivering Services
As part of delivering Brand Awareness and ORM services, we collect and process information relating to the Client’s online presence, including:
- Search engine results, AI search appearances, and brand mentions across the web.
- Online reviews, ratings, and reputation data from platforms including Google, Yelp, Trustpilot, Facebook, TripAdvisor, and similar sites.
- Social media mentions, comments, and publicly available posts referencing the Client.
- Third-party directory listings, citation profiles, and business information published across the web.
This data is publicly available and is collected and processed solely for the purpose of delivering the agreed services.
2.3 Information Collected Automatically via Our Website
When you visit www.thinkingbaboon.com, we may automatically collect:
- Browser type, device type, and operating system.
- Pages visited, time spent on the site, and referring URL.
- IP address and approximate geographic location.
This data is collected through standard analytics tools and cookies. See Section 9 for details on our use of cookies.
3
How We Use Your Information
We use personal information for the following purposes:
- To deliver the services agreed in your Service Agreement, including conducting audits, building brand presence, managing reputation, and reporting on outcomes.
- To communicate with you about your engagement, including strategy calls, status updates, and reporting.
- To process payments and manage billing.
- To respond to inquiries submitted through our website or email.
- To improve our services and understand how clients use our offerings.
- To comply with legal obligations applicable to our business.
- To send service-related communications, including updates to our Terms and Privacy Policy.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
4
Legal Basis for Processing
Thinking Baboon processes personal data on the following legal grounds:
- Contract performance: processing necessary to deliver services under the Service Agreement.
- Legitimate interests: processing for business operations including fraud prevention, service improvement, and client communication, where these interests are not overridden by the Client's rights.
- Legal obligation: processing required to comply with applicable laws and regulations.
- Consent: where we rely on consent (for example, for optional marketing communications), you may withdraw consent at any time by contacting us at info@thinkingbaboon.com.
Thinking Baboon operates under and complies with the Republic of the Philippines’ Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. For clients and contacts located in the European Economic Area or United Kingdom, we also comply with the General Data Protection Regulation (GDPR) and UK GDPR as applicable.
5
How We Share Your Information
We do not sell your personal information. We share information only as follows:
5.1 Service Delivery Partners
We work with third-party tools and platforms to deliver our services. These may include PR distribution platforms, monitoring tools, analytics providers, and publishing platforms. These parties process data on our behalf and are contractually required to handle it securely and in accordance with applicable data protection law.
5.2 Payment Processors
Payment information is processed by our payment provider. We do not store full card numbers. Billing data shared with payment processors is governed by their own privacy policies.
5.3 Legal Requirements
We may disclose personal information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect our legal rights or prevent harm.
5.4 Business Transfers
In the event of a merger, acquisition, or sale of all or part of Thinking Baboon’s business, personal data may be transferred to the acquiring entity. We will notify affected clients before any such transfer and ensure the receiving party is bound by equivalent privacy protections.
6
Data Retention
We retain personal data for as long as necessary to fulfill the purposes described in this Policy, or as required by law. Our standard retention periods are as follows:
| Data Type | Retention Period |
|---|---|
| Client account and engagement records | 7 years after engagement ends (for legal and tax compliance) |
| Payment and billing records | 7 years (legal requirement) |
| Communications and correspondence | 3 years after engagement ends |
| Website analytics data | 26 months from collection |
| Brand and reputation monitoring data | Duration of engagement plus 12 months |
| Prospective client inquiries | 12 months if no engagement begins |
When data is no longer required, it is securely deleted or anonymized.
7
Your Rights
Depending on your location and the applicable law, you may have the following rights in relation to your personal information:
| Your Right | What It Means |
|---|---|
| Right to Access | Request a copy of the personal data we hold about you. |
| Right to Correction | Request that inaccurate or incomplete data be corrected. |
| Right to Erasure | Request deletion of your personal data, subject to legal retention requirements. |
| Right to Restrict Processing | Ask us to limit how we use your data in certain circumstances. |
| Right to Data Portability | Receive your data in a structured, machine-readable format where technically feasible. |
| Right to Object | Object to processing based on legitimate interests or for direct marketing purposes. |
| Right to Withdraw Consent | Withdraw consent at any time where processing is based on consent. |
| Right to Lodge a Complaint | File a complaint with the National Privacy Commission (Philippines) or your local data protection authority. |
To exercise any of these rights, contact us at info@thinkingbaboon.com. We will respond within 30 days. We may need to verify your identity before processing the request.
8
Data Security
We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, disclosure, or misuse. These measures include access controls on internal systems, use of encrypted communication channels, and limited access to client data on a need-to-know basis within our team.
No method of transmission over the internet or electronic storage is completely secure. While we take these precautions seriously, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
9
Cookies and Tracking Technologies
Our website at www.thinkingbaboon.com uses cookies and similar technologies to improve user experience and collect analytics data. We use the following types of cookies:
- Strictly necessary cookies: required for the website to function properly. These cannot be disabled.
- Analytics cookies: help us understand how visitors interact with our site. Data is aggregated and anonymous. We use this to improve content and usability.
- Preference cookies: remember your settings and choices to provide a more personalized experience.
You can manage or disable cookies through your browser settings. Disabling analytics or preference cookies will not prevent you from using the website but may affect some functionality.
We do not use cookies to serve targeted advertising on behalf of third-party ad networks.
10
Third-Party Links and Platforms
Our website and service reports may contain links to third-party websites and platforms. These include PR publications, business directories, social media platforms, and review sites. Thinking Baboon is not responsible for the privacy practices or content of those third-party sites. We encourage you to review their privacy policies before providing any personal information.
11
Children's Privacy
Our services are intended for businesses and adults aged 18 and above. We do not knowingly collect personal information from children under the age of 18. If we become aware that a child has provided personal information, we will take steps to delete it promptly. If you believe a child has submitted information to us, please contact us at info@thinkingbaboon.com.
12
International Data Transfers
Thinking Baboon operates from the Philippines and serves clients internationally. Personal data may be transferred to, stored in, or processed in countries other than the Client’s country of residence in connection with our use of third-party service providers. Where such transfers occur, we ensure appropriate safeguards are in place, including contractual data protection clauses with our service providers.
13
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. The updated version will be published at thinkingbaboon.com/privacy with a revised effective date. For material changes, we will notify active clients by email at least 14 days before the changes take effect.
We encourage you to review this Policy periodically. Your continued use of our services after the effective date of any update constitutes acceptance of the revised Policy.
14
Contact and Complaints
For questions, requests, or concerns about this Privacy Policy or how we handle your personal data, please contact us:
