Specz

Privacy policy

Last updated: October 14, 2026

1. Who we are

This website, https://www.specz.net, is operated by Specz Computer Shop, trading as Specz, with its address in Cebu City, Philippines ("Specz", "we", "us"). We are the personal information controller for the personal data described in this policy.

This policy explains what personal data we collect through the website, why we collect it, and the rights you have. We follow the Data Privacy Act of 2012 of the Philippines (Republic Act No. 10173) and its implementing rules. We also offer the general data protection rights described below to users outside the Philippines.

2. What this policy covers and what it does not

This policy covers the website, your Specz account, orders and payments, activation, downloads and our support communications.

It does not cover the data processed by Specz ISP after you install it on your own hardware. We have no access to the network traffic or subscriber data processed on your equipment. If you run Specz ISP for your own subscribers, you are the controller of their data and you are responsible for complying with the data protection, telecommunications and other laws that apply to you, including any lawful-intercept or data-retention rules.

3. Personal data we collect

  • Account data: your email address, name, company, business segment and country, a hash of your password (never the password itself), whether your email is verified, and when you accepted our terms. If you sign in with a third-party sign-in provider, we store the identifier and email that provider gives us to link it to your account.
  • Order and payment records: order numbers, items, amounts, currency, status, buyer name and email, the payment processor used and its transaction references. We do not receive or store your card details.
  • Subscriptions, licences and credits: your plans, their start and end dates, activation codes, prepaid credit purchases and their delivery to your billing account.
  • API tokens: the name you give a token, a hash of it, its first few characters so you can recognise it, and when it was created, last used or revoked.
  • Downloads: which software version you downloaded and when.
  • Contact form and sign-up requests: your name, email, company, country, segment, organisation size, the plan you asked about and your message.
  • Security and session data: session records (including your browser's user-agent string), one-time tokens used for email verification, password reset and email change, and your IP address, which we use for rate limiting to protect the website against abuse.
  • Audit log: a record of certain account and administrative actions, including who acted, what changed, when, and the IP address.
  • Server logs: basic technical logs of requests (such as the page requested, the response status and timing) used to run and secure the website.

4. Cookies and tracking

We use one strictly necessary session cookie to keep you signed in and to protect forms against cross-site request forgery. It is marked HttpOnly. If you choose "remember me", it lasts longer; otherwise it ends with your session. Because it is strictly necessary, it does not require consent.

We do not use advertising cookies, and the website does not currently load any third-party analytics or tracking tools. If we add analytics in the future, we will update this policy and ask for consent where the law requires it.

5. How and why we use your data

  • To create and manage your account and authenticate you (to perform our contract with you).
  • To process orders, issue activation codes and receipts, deliver credits and provide subscriptions and support (contract).
  • To send service emails such as verification, password reset and order confirmations (contract).
  • To answer your enquiries and requests for early access (your request and our legitimate interest).
  • To secure the website, prevent fraud and abuse, and keep audit records (legitimate interest and legal obligation).
  • To keep financial and tax records (legal obligation).

We do not sell your personal data and we do not use it for automated decisions that have legal or similarly significant effects on you.

6. Sharing your data

We share personal data only as needed to run the service:

  • Payment processors: PayMongo for payments in the Philippines and PayPal for international payments. They collect and process your payment details under their own privacy policies.
  • Service providers who host the website or send email on our behalf, under appropriate confidentiality and data protection obligations.
  • Authorities, when required by law or to protect our rights, users or the public.
  • A successor, if our business is reorganised, merged or sold, subject to this policy.

7. International transfers

Some of our service providers, including payment processors, may process data outside the Philippines. When this happens we take reasonable steps to make sure your data stays protected as required by the Data Privacy Act.

8. How long we keep data

We keep account data while your account is open. Order, payment and tax records are kept for as long as the law requires. Session records and one-time tokens expire automatically. Security logs and audit records are kept for as long as reasonably needed for security and accountability. When data is no longer needed, we delete or anonymise it.

9. Security

We protect your data with organisational, physical and technical measures, including hashed passwords and tokens, secure session cookies, rate limiting and access controls. No system is completely secure, so please use a strong, unique password and keep your API tokens private. If a personal data breach occurs that the law requires us to report, we will notify the National Privacy Commission and affected users.

10. Your rights

Under the Data Privacy Act, you have the right to:

  • be informed about how your personal data is processed;
  • access your personal data;
  • object to processing, including processing based on legitimate interest;
  • have inaccurate data corrected (rectification);
  • have your data suspended, withdrawn, blocked, removed or destroyed (erasure or blocking);
  • receive your data in a portable electronic format (data portability);
  • be compensated for damages caused by inaccurate, incomplete, outdated, false or unlawfully obtained data or unauthorised use of personal data; and
  • lodge a complaint with the National Privacy Commission.

If you are outside the Philippines, we also offer comparable rights: access, correction, deletion, restriction, objection, portability and withdrawal of consent, and you may contact your local data protection authority. We aim to follow these principles but do not claim certification under any foreign data protection law.

You can update most account details yourself in your account. For other requests, contact us as described below. We may need to verify your identity, and some data may be kept where the law requires it.

11. Children

The website and our services are intended for businesses and adults. We do not knowingly collect personal data from children.

12. Data Protection Officer

Our Data Protection Officer can be contacted at admin@specz.net or by post at Cebu City, Philippines.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new "Last updated" date, and tell you by email or on the website about significant changes.

14. Contact

For questions about this policy or your personal data, contact Specz Computer Shop at admin@specz.net.