ProWrite Technical Writing Service
4th Floor, Topaz Tower Centre, Damosa IT Park, J.P. Laurel Avenue, Davao City, Davao del Sur 8000, Philippines
hi@prowrite.us+63 991 928 5836Privacy & security trust center
Clear data rules before you share anything.
This notice explains what ProWrite collects, why it is processed, where it is stored, how long it is kept, and how to exercise your rights.
Accountable organization
Who is responsible for your information.
ProWrite Privacy and Security Contact
This designated contact receives rights requests, privacy questions, and incident reports. A named DPO is not currently published.
Contact the privacy channelPublic facts, without invented credentials.
The operating name and contact details above are public. Government registration identifiers are not currently published and can be requested through the tracked channel below.
Request verificationController and processor roles
The role depends on the information and the engagement.
Business and intake information
ProWrite determines the purpose and means for processing website inquiries, contact details, account identity, service records, invoices, and governance requests.
Institution-controlled research information
When a hospital, university, sponsor, or researcher remains the controller, ProWrite processes only the authorized data and documented purpose in the written scope.
Processing lifecycle
Purpose, basis, minimum data, and deletion.
Readiness intake
Name, email, role, specialty, project stage, deadline, and low-data screening answers.
Processing basis: Consent and steps requested before a possible service engagement.Screening and proposal
Fit, ethics, authority, privacy risk, service scope, and correspondence.
Processing basis: Steps requested before contract and legitimate business administration.Active engagement
Approved project documents, version records, decisions, approvals, and teach-back evidence.
Processing basis: Contract performance, documented instructions, and applicable research authority.Closure and accountability
Final records, invoices, complaints, corrections, and necessary audit history.
Processing basis: Contract, legal claims, compliance, and documented legitimate business purposes.Retention schedule
Records are not kept indefinitely for an undefined future use.
A written contract, institutional rule, legal hold, or data subject request may require a shorter or longer period. Secure deletion from redundant infrastructure may take up to 30 additional days.
Declined or abandoned preliminary inquiries90 days after closure
Active project records and governed historyProject term plus 24 months
Uploaded project documentsProject term plus 24 months, unless a shorter written scope applies
Governance, complaint, and rights requests24 months after resolution
Security and access recordsUp to 12 months
Invoices, tax, and legal recordsAs required by applicable law
Security and service providers
Controls are described without claiming impossible certainty.
Identity and access
Public submissions receive reference numbers. Portal-based identity and access controls are being migrated and are not currently offered from DreamHost shared hosting.
Storage separation
Public form records are stored in a private server-side directory outside the public website. This public intake does not accept document uploads.
Transport and browser controls
HTTPS, no-store rules for form responses, anti-framing, content-type protection, and restrictive browser permissions are applied.
Minimum necessary intake
The public form accepts no attachments and prohibits patient identifiers. Any protected document-transfer method is arranged only after preliminary screening.
Operational providers
The public website and form handlers are hosted with DreamHost. Email delivery uses the hosting mail service when available.
International processing
Infrastructure providers may process or store information outside the Philippines. ProWrite remains accountable for documented provider safeguards and contractual limits.
Data-subject rights
Ask, correct, object, withdraw, erase, or complain.
Subject to applicable law and research-integrity limits, you may request information about processing, access, correction, objection, withdrawal of consent, erasure or blocking, and a review of a privacy concern.
Security concerns are acknowledged without requiring clinical details. If a report concerns immediate risk, call ProWrite directly and contact the relevant institution.
Policy history
Public changes remain visible.
Version 1.0 · July 24, 2026
Read the public service charter Initial publication of controller and processor roles, purposes, retention, providers, transfers, controls, rights, incident reporting, and the tracked request channel.