PRIVACY POLICY

Last Updated: August 2026

This Privacy Policy applies to BKES Information Technology Solutions, doing business and operating publicly as BKE Digital Solutions (“BKE,” “we,” “us,” or “our”).

1. Overview

BKE respects your privacy and is committed to protecting personal information entrusted to us.

This Privacy Policy describes how we collect, use, store, disclose, and protect personal information when you interact with BKE, including when you:

• visit or use our websites and online platform;

• create or manage a BKE account;

• purchase or subscribe to software or digital products;

• obtain or manage a software license;

• activate BKE software on a device;

• download software made available through BKE;

• participate in a software trial;

• make or manage a purchase, payment, invoice, or subscription;

• communicate with us; or

• otherwise use products or services provided through BKE.

These websites, applications, software-commerce functions, licensing services, download services, customer portals, administrative systems, and related services are collectively referred to in this Privacy Policy as the “Services.”

BKES Information Technology Solutions is established in the Philippines and processes personal information in accordance with applicable Philippine laws, including Republic Act No. 10173, the Data Privacy Act of 2012, its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission.

This Privacy Policy should be read together with any applicable Terms of Service, software license terms, subscription terms, or other agreements governing a particular BKE product or Service.

---

2. Our Role in Processing Personal Information

For the BKE platform, customer accounts, purchases, software licensing, subscriptions, downloads, and related business operations, BKES Information Technology Solutions generally determines why and how personal information is processed.

For these activities, BKE acts as a Personal Information Controller.

BKE may also provide technology or services in circumstances where information is processed on behalf of another person, business, or organization.

Where BKE processes personal information solely according to the lawful instructions of another Personal Information Controller, BKE may act as a Personal Information Processor.

In those circumstances, the relevant customer or organization is primarily responsible for determining the purposes of processing and for providing appropriate privacy information to its data subjects.

---

3. Information We Collect

The information we collect depends upon how you interact with BKE and which Services you use.

3.1 Account and Identity Information

When you create or use a BKE account, we may collect:

• name;

• email address;

• account identifier;

• account type;

• organization information, where applicable;

• email-verification status;

• authentication information;

• password credentials in securely protected form;

• passwordless authentication information;

• account recovery information;

• session information; and

• other information necessary to create, secure, and maintain your account.

BKE does not need to know your plaintext password. Passwords should be stored using appropriate cryptographic password-protection mechanisms rather than in readable form.

Administrative accounts may require additional authentication information, including multi-factor authentication information.

---

3.2 Purchase and Transaction Information

When you purchase or obtain a BKE product or service, we may process:

• customer identity;

• products purchased;

• product edition or plan;

• order information;

• order items;

• transaction amounts;

• transaction status;

• payment status;

• payment-provider references;

• invoice information;

• subscription information;

• discounts or promotional offers;

• trial information; and

• other information necessary to complete and maintain records of the transaction.

BKE may use third-party payment providers to process payments.

Payment-card, bank, electronic-wallet, or other financial credentials submitted directly to a payment provider may be processed by that provider rather than stored directly by BKE.

BKE may receive transaction information from the payment provider necessary to determine whether a payment succeeded, failed, was cancelled, refunded, or otherwise changed status.

---

4. Software Licensing Information

Software licensing is a core function of BKE.

When BKE software uses our licensing infrastructure, we may process information necessary to determine whether a product, user, license, or installation is authorized.

This information may include:

• product identifier;

• product edition;

• software version;

• license identifier or license key;

• entitlement information;

• installation identifier;

• device activation information;

• device or machine identifiers where required for licensing;

• activation status;

• authorization status;

• subscription or license status;

• timestamps;

• Internet Protocol address;

• request and response metadata;

• technical information associated with authorization requests; and

• security information necessary to detect abuse or unauthorized access.

We use this information to:

• issue and maintain software licenses;

• associate licenses with customers or purchases;

• determine whether software use is authorized;

• activate authorized installations;

• enforce permitted device or installation limits;

• administer trials;

• determine entitlement to particular products or versions;

• prevent unauthorized use or license abuse;

• provide software-download authorization;

• maintain licensing records; and

• protect BKE's software and customers.

Some BKE software may communicate with BKE licensing infrastructure automatically when performing authorization, activation, entitlement, or related licensing functions.

---

5. Software Download Information

BKE may provide software downloads to customers who are entitled to receive them.

To securely provide these downloads, we may process information such as:

• account identity;

• product entitlement;

• product and version requested;

• license status;

• download authorization;

• temporary download grants or tokens;

• download timestamps;

• IP address;

• request metadata; and

• security information.

BKE may use temporary or short-lived download authorization mechanisms to prevent unauthorized distribution of protected software.

---

6. Subscription and License Information

Certain BKE products may be offered under different commercial arrangements, including:

• perpetual licenses;

• monthly plans;

• annual plans;

• trials; or

• other product-specific arrangements.

Where applicable, we may process information concerning:

• plan type;

• subscription status;

• subscription period;

• renewal information;

• license status;

• entitlement status;

• transaction history; and

• related account information.

The exact licensing and subscription terms applicable to a product are determined by the applicable product offering and agreement.

---

7. Technical and Usage Information

When you access our websites, platform, software, or licensing services, certain information may be generated automatically.

This may include:

• IP address;

• browser type;

• operating system;

• device information;

• software version;

• product identifier;

• installation identifier;

• request timestamps;

• authentication events;

• session information;

• licensing requests;

• download requests;

• errors and diagnostic information;

• security events;

• access logs; and

• other technical information reasonably necessary to operate and protect the Services.

We use this information primarily for operation, security, troubleshooting, licensing, fraud prevention, and improvement of BKE Services.

---

8. Security and Audit Information

BKE may maintain security and audit records relating to activity within its systems.

These records may include:

• login attempts;

• authentication events;

• administrative actions;

• account changes;

• session activity;

• security events;

• license activity;

• device activations;

• payment or commerce events;

• administrative access; and

• other actions relevant to security, accountability, or investigation.

These records help BKE protect accounts, investigate suspicious activity, maintain accountability, troubleshoot problems, and protect the integrity of our systems.

---

9. Information From Third Parties

BKE may receive personal information from third parties when necessary to provide or operate our Services.

These may include:

• payment providers;

• hosting and infrastructure providers;

• email-delivery providers;

• authentication providers;

• software-distribution infrastructure; and

• other service providers supporting BKE operations.

For example, after you complete a transaction through a payment provider, BKE may receive information confirming the transaction and identifying the associated order.

We do not claim to purchase consumer profiles or commercially available personal-data sets unless BKE actually begins such processing and updates this Privacy Policy accordingly.

---

10. How We Use Personal Information

We may use personal information to:

Provide BKE Services

Including to create accounts, authenticate users, process orders, issue licenses, administer subscriptions, provide trials, deliver software, and operate customer-facing Services.

Process Purchases

Including to create orders, process payment status, issue invoices, administer discounts, and maintain transaction records.

Manage Software Licensing

Including to issue licenses, verify entitlements, authorize software installations, manage device activations, enforce license conditions, and prevent unauthorized use.

Provide Software Downloads

Including to determine whether an account is entitled to a product and securely authorize software downloads.

Secure Accounts and Systems

Including to detect suspicious activity, investigate unauthorized access, maintain security logs, prevent fraud, and protect BKE infrastructure.

Communicate With Customers

Including to send:

• email-verification messages;

• account-security messages;

• password or authentication messages;

• purchase confirmations;

• invoices;

• payment-related communications;

• licensing communications;

• subscription information;

• download information;

• important product notices;

• security notifications; and

• other communications necessary to provide the Services.

Maintain Business Records

Including accounting, invoicing, taxation, reconciliation, auditing, legal compliance, and contractual administration.

Improve BKE

We may analyze technical and operational information to diagnose errors, improve reliability, strengthen security, and improve our products and Services.

Comply With Law

We may process information when necessary to comply with applicable legal, regulatory, tax, accounting, judicial, or governmental requirements.

---

11. Lawful Basis for Processing

BKE processes personal information only when there is an appropriate basis under applicable law.

Depending on the circumstances, this may include:

Consent

Where you have provided valid consent for a particular processing activity.

Contractual Necessity

Where processing is necessary to provide a product or Service you requested or to perform obligations under an agreement with you.

For example, we cannot provide a licensed software product without processing information necessary to establish your entitlement and authorize the software.

Legal Obligation

Where processing is necessary to comply with laws or lawful government requirements.

Legitimate Interests

Where processing is necessary for legitimate business purposes that are compatible with applicable privacy law, such as:

• protecting our systems;

• preventing fraud;

• preventing unauthorized software use;

• maintaining cybersecurity;

• maintaining appropriate business records;

• improving reliability;

• protecting customers; and

• establishing or defending legal rights.

Other Grounds Permitted by Law

We may process information under another lawful basis expressly permitted by applicable law.

---

12. Artificial Intelligence

BKE develops technology and automation solutions and may introduce features that use artificial intelligence or machine-learning services.

However, this Privacy Policy does not claim that personal information submitted to BKE is currently used to train generalized or public artificial-intelligence models.

If a BKE Service introduces an AI feature that processes customer personal information, BKE will evaluate the processing and provide additional notice or obtain consent where required before materially changing how personal information is used.

We will not treat the mere possibility of future AI functionality as authorization to use customer personal information for unrelated AI-model training.

---

13. Advertising and Marketing

BKE may communicate with customers about its own products, services, updates, or offers where permitted by law.

However, BKE does not represent in this Privacy Policy that it sells customer personal information to advertising networks or maintains a commercial personal-data marketplace.

If BKE later introduces targeted advertising, affiliate tracking, cross-site behavioral advertising, or materially different marketing-data practices, this Privacy Policy will be updated as required.

You may opt out of non-essential marketing communications using the unsubscribe mechanism provided with the communication or by contacting BKE.

This does not prevent BKE from sending communications necessary for:

• account operation;

• purchases;

• licensing;

• subscriptions;

• authentication;

• security;

• software delivery; or

• other transactional purposes.

---

14. Cookies and Similar Technologies

BKE websites may use cookies, local storage, session technologies, or similar mechanisms where necessary to:

• authenticate users;

• maintain sessions;

• remember preferences;

• protect accounts;

• prevent abuse;

• provide website functionality;

• measure system performance; and

• understand basic Service usage.

Where required by applicable law, BKE will obtain appropriate consent before using non-essential tracking technologies.

Users may manage cookies through their browser settings, although disabling necessary cookies may prevent some features from functioning correctly.

---

15. How We Share Personal Information

BKE may disclose personal information only when reasonably necessary for legitimate business, contractual, technical, security, or legal purposes.

Service Providers

We may use third-party service providers for functions such as:

• cloud hosting;

• databases;

• infrastructure;

• email delivery;

• payment processing;

• software delivery;

• monitoring;

• security;

• backups; and

• related technical operations.

These providers may process information necessary to perform services for BKE.

Where required, BKE will use appropriate contractual and organizational measures governing such processing.

Payment Providers

Information required to complete payments may be processed by third-party payment providers.

Their independent processing may also be governed by their respective privacy policies and terms.

At Your Direction

We may disclose information when you explicitly instruct or authorize us to do so.

Legal Requirements

We may disclose personal information where required or permitted by law, including in response to:

• lawful court orders;

• subpoenas;

• warrants;

• government investigations;

• regulatory requirements; or

• other valid legal processes.

We may also disclose information when reasonably necessary to establish, exercise, or defend legal rights or protect BKE, our customers, or others against fraud, abuse, or unlawful activity.

Business Transfers

If all or part of BKES Information Technology Solutions or its relevant business assets are transferred, reorganized, or succeeded by another entity or owner, information reasonably necessary to continue the affected Services may form part of that transaction, subject to applicable law.

---

16. We Do Not Sell Personal Information as a Business Model

BKE's business is providing technology products and services.

Our business model is not the commercial sale of customer personal information.

We do not represent customer personal information as a product for sale to data brokers.

This does not prevent BKE from using service providers that necessarily process limited information on our behalf to operate the Services, or from making disclosures otherwise permitted or required under this Privacy Policy and applicable law.

---

17. International Processing

BKE operates from the Philippines, but some infrastructure or technology providers used to operate the Services may maintain systems outside the Philippines.

As a result, personal information may in some circumstances be processed or stored in another jurisdiction.

Where BKE transfers or permits processing of personal information outside the Philippines, we will take reasonable and appropriate measures required by applicable law to protect the information and maintain accountability for personal information under our control.

BKE does not claim certification under the EU-U.S. Data Privacy Framework or any similar international certification unless and until BKE has actually obtained the applicable certification.

---

18. Data Retention

BKE retains personal information only for as long as reasonably necessary for the purpose for which it was collected or as otherwise permitted or required by law.

The appropriate period depends on factors including:

• the nature of the information;

• the customer's relationship with BKE;

• whether an account remains active;

• product ownership;

• software licensing requirements;

• subscription status;

• transaction history;

• security requirements;

• fraud-prevention requirements;

• contractual requirements;

• tax and accounting requirements;

• legal obligations; and

• applicable limitation periods.

Certain records may therefore remain after an account, subscription, or license relationship ends.

These may include records reasonably necessary for:

• invoices;

• completed transactions;

• accounting;

• taxation;

• licensing history;

• fraud prevention;

• security;

• auditability;

• dispute resolution; and

• legal compliance.

When information is no longer reasonably necessary, BKE will delete, anonymize, securely dispose of, or otherwise cease actively processing it as appropriate.

---

19. How We Protect Personal Information

BKE uses reasonable and appropriate administrative, organizational, and technical safeguards designed to protect personal information.

Depending on the relevant system, these may include:

• authentication controls;

• password protection;

• multi-factor authentication for privileged access;

• role-based access controls;

• encrypted credentials or secrets;

• secure communications;

• session controls;

• security logging;

• audit logging;

• limited administrative access;

• monitoring;

• backups;

• software security controls; and

• incident-response procedures.

Security is an ongoing process.

No website, application, computer, network, database, or Internet transmission can be guaranteed to be completely secure.

Users are responsible for maintaining the confidentiality and security of their passwords, authentication mechanisms, devices, and accounts.

---

20. Personal Data Breaches

If BKE discovers a suspected or confirmed personal data breach, we will investigate and respond in accordance with applicable law.

Where notification is required, BKE will notify affected individuals and/or the National Privacy Commission in accordance with applicable legal requirements.

Where BKE is acting as a Personal Information Processor, we will cooperate with the relevant Personal Information Controller regarding breach investigation, containment, remediation, and legally required notification.

---

21. Children's Privacy

BKE's commercial Services are intended primarily for customers, businesses, organizations, professionals, and other persons capable of lawfully entering into transactions or using the relevant products.

BKE does not intentionally solicit personal information from children for the purpose of creating ordinary commercial software-purchasing accounts.

If we discover that personal information relating to a child has been collected without an appropriate lawful basis or necessary authorization, we will take reasonable steps to address the information in accordance with applicable law.

---

22. Third-Party Websites and Services

BKE may link to third-party websites or services, including payment services, software dependencies, external resources, or other technology providers.

A link from BKE does not mean that BKE controls the third party.

Unless that third party is specifically processing information on behalf of BKE, its handling of personal information is governed by its own privacy policy and terms.

Users should review those policies before providing personal information to an independent third party.

---

23. Your Rights Under Philippine Data Privacy Law

Subject to applicable law, individuals whose personal information is processed by BKE may exercise rights provided by the Data Privacy Act of 2012.

These include, where applicable:

Right to Be Informed

You have the right to receive information regarding the collection and processing of your personal information.

Right of Access

You may request access to personal information concerning you that BKE processes, subject to lawful limitations.

Right to Object

You may object to certain processing of your personal information where provided by law.

Right to Rectification

You may request correction of inaccurate, outdated, false, or incomplete personal information.

Right to Erasure or Blocking

Under circumstances provided by law, you may request suspension, withdrawal, blocking, removal, or destruction of personal information.

This right is not absolute. Information may need to be retained where processing remains necessary or permitted for legal, contractual, taxation, accounting, fraud-prevention, security, licensing, or other lawful purposes.

Right to Data Portability

Where applicable, you may request certain personal information in an electronic or structured format as provided by law.

Right to Damages

You may be entitled to compensation for damages resulting from inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal information as provided by applicable law.

Right to File a Complaint

You may raise a privacy concern directly with BKE.

You may also file a complaint with the National Privacy Commission of the Philippines where permitted by applicable law.

---

24. Exercising Your Rights

To exercise a data-subject right or raise a privacy concern, contact BKE using the contact information provided below.

We may request information reasonably necessary to verify your identity before fulfilling a request.

This protects customer information against unauthorized access or fraudulent deletion, modification, or disclosure requests.

Where BKE processes information solely on behalf of another Personal Information Controller, we may refer the request to that controller or cooperate with the controller in responding to the request.

---

25. Automated Processing

Certain BKE systems necessarily perform automated technical decisions.

For example, BKE's licensing infrastructure may automatically determine whether a software installation is authorized based on relevant license, entitlement, product, version, subscription, or activation information.

Security systems may similarly identify suspicious authentication or access activity.

These systems are used to operate and secure BKE products and enforce applicable software entitlements.

Where applicable law imposes additional requirements for automated decision-making that materially affects a data subject, BKE will comply with those requirements.

---

26. Changes to This Privacy Policy

BKE may update this Privacy Policy when necessary to reflect changes in:

• our products;

• our Services;

• our technology;

• our business operations;

• our service providers;

• our data-processing activities; or

• applicable law.

The “Last Updated” date at the beginning of this Privacy Policy identifies the current version.

Where a material change requires notice or consent under applicable law, BKE will provide that notice or obtain consent as required.

Continued use of a Service does not waive any data-subject right that cannot lawfully be waived.

---

27. Contact Us

For questions, requests, complaints, or concerns regarding this Privacy Policy or BKE's processing of personal information, contact:

BKES Information Technology Solutions

Operating as BKE Digital Solutions

Philippines

Privacy Contact:

[PRIVACY EMAIL]

Business Location: Philippines

General Contact:

[GENERAL BUSINESS EMAIL / CONTACT]

Where applicable, BKE will publish the contact details of its designated Data Protection Officer or other responsible privacy contact.

You may also contact the:

**National Privacy Commission

Republic of the Philippines**

through its official communication and complaint channels.

---

28. Relationship With Other BKE Agreements

This Privacy Policy explains how BKE processes personal information.

Individual BKE products and transactions may additionally be governed by:

• Terms of Service;

• Terms and Conditions;

• End-User License Agreements;

• Software License Agreements;

• subscription terms;

• purchase terms;

• refund policies;

• Data Processing Agreements; or

• product-specific agreements.

Those agreements govern the relevant commercial or product relationship, while this Privacy Policy governs BKE's processing of personal information.

Nothing in this Privacy Policy is intended to waive, restrict, or eliminate any right that a data subject possesses under applicable law.