Legal
Privacy notice
This notice explains what SOPhero does with the information you give us on this site. It is written to be read, not to hide behind.
Philippines · last reviewed October 2026
What we collect
When you submit a form we collect what you typed: your name, work email, phone or WhatsApp number if you give it, company, role, business type, size, market, any message you leave, and the consent you ticked. We also record which page you submitted from, how you arrived (referrer and campaign parameters such as utm_source), and which pages you viewed in that session. Analytics events are only recorded if you accepted cookies.
Why we collect it
To answer your enquiry, to send the resource or report you asked for, and to understand which parts of this site help operators most. We do not sell your data, and we do not add you to a marketing list you did not ask for.
Consent and your rights
Each form shows the consent wording and the law it relates to, records the exact text you agreed to, and stores the time you agreed. Depending on your market you may have the right to access, correct, withdraw consent for, or ask us to delete your data. Write to us and we will action it within one working day.
Cookies
Essential cookies keep the site working. Analytics cookies measure page views and form steps, and only run after you accept them. You can change your choice at any time by clearing site data for sophero.io.
Where your data is held and how long
Enquiry data is held in our application database and is readable only by SOPhero administrators. We keep enquiries while they are commercially live and for the period our professional advisers recommend, then delete them. Standards and operating data belonging to a client organisation stay owned by that organisation and are exportable at any time.
Working with regulators
For Singapore operators we align to the PDPA, including breach notification to the PDPC within three calendar days. For Malaysia we align to the amended PDPA, including the Data Protection Officer appointment and breach notification obligations in force since 1 June 2025. Where a group requires a data processing agreement, we sign one.
Not legal advice
SOPhero turns rules into operating steps. It is not legal advice. Compliance content is reviewed with local operators, dated on the page, and should always be confirmed with the named regulator.
Contact
Questions, access requests or a deletion request: email hello@sophero.io and a person will answer.