Privacy policy
In short: we collect what you give us when you book a call or email us, share it with the provider only when you ask for an introduction, keep it for 24 months, and set no cookies unless you accept analytics. The booking calendar loads from Calendly only when you click to show it.
Last updated:
1. Who we are
This site is run by Joseph, an individual in Davao City, Davao del Sur 8000, Philippines ("Distal Desk", "we", "I"). We are the controller of the personal data described here. Joseph is our data protection officer and handles every privacy question and request. Contact him at hello@distaldesk.com.
Distal Desk introduces businesses to a staffing provider in Davao City, Momentum Outsourcing. The provider employs, supervises and bills the agents, at the rate shown on this site, and pays us a commission for clients we introduce. If you become its client, the provider handles your data under its own privacy notice and your contract with it.
2. What we collect
Data you give us
- Booking a call: your name, email, company, country, agents needed now, whether you are already in contact with the provider, and an optional note, as you enter them in the Calendly booking form.
- Emails you send us: whatever you choose to write.
Data collected automatically
- Attribution: the campaign tags in the link you followed (for example
utm_source), which the booking page passes to Calendly with your booking. - Server logs: the server that runs the site records standard request logs (IP address, time, page, browser) to keep the site running and to stop abuse.
- Analytics, only if you accept: Google Analytics records the pages you view, how you arrived, your device type and approximate location.
We do not ask for payment details, government ID numbers or sensitive personal information, and we ask you not to send them.
3. Why we use it, and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Answer your request, write your brief and introduce you to the provider | Steps you asked us to take before a possible contract (Article 6(1)(b)) |
| Keep a written record of each introduction and reconcile the provider's commission statements | Our legitimate interest in being paid correctly for introductions (Article 6(1)(f)) |
| Stop spam and abuse of the site | Our legitimate interest in keeping the site working (Article 6(1)(f)) |
| Measure which pages help visitors (Google Analytics) | Your consent, given in the cookie banner (Article 6(1)(a)); you can withdraw it at any time |
We do not send newsletters or marketing emails, and we do not use your data for advertising. The provider pays us a commission for clients we introduce, and we share your details with it only when you ask us to introduce you.
4. Who receives it
- Momentum Outsourcing, Davao City, Philippines: when you ask for an introduction, we send the provider your contact details and the details of your request. The provider is a separate company and handles your data under its own privacy notice.
- Google: we use Google for email. If you accept analytics, Google Analytics processes your visit data.
- Calendly: if you show the booking calendar or book a call, Calendly processes your visit to it and your booking.
- Our email forwarding service: it passes the emails you send to hello@distaldesk.com on to our inbox.
- A network service in front of the site, if we use one (for example Cloudflare): it passes your requests to our server and sees your IP address and the pages you ask for.
- Our web host: it runs the site and keeps its server logs on our behalf.
- Authorities: only when the law requires it.
5. Where it is processed
We are based in the Philippines, so your data is processed there and shared with the provider there. Google and Calendly may process it in the United States and other countries. The Philippines does not have an adequacy decision from the UK or the EU. For Google and Calendly, we rely on the data protection terms they offer, which include standard contractual clauses. We send your details to the provider only when you ask for an introduction, because the transfer is needed for the steps you asked us to take (UK and EU GDPR Article 49(1)(b)).
If you become the provider's client, it signs a data-protection agreement with you for UK and EU data and, for US health data, a HIPAA business associate agreement. Ask on the call whether that agreement includes the EU standard contractual clauses or the UK Addendum.
6. How long we keep it
- Requests and leads: 24 months from your last contact, then deleted, unless you become the provider's client.
- If you become the provider's client: the introduction record (company, contact, dates and the introduction email) for as long as we need it to reconcile commissions and meet tax rules, then deleted.
- Analytics: under the retention setting of our Google Analytics account.
- Server logs: up to 14 days, then deleted.
7. Cookies and analytics
This site sets no cookies and runs no analytics or advertising tools. If we add analytics later, it will load only after you accept it in a banner, and this section will say so.
The booking page loads nothing from Calendly until you click "Show the booking calendar". After that click, Calendly's scheduler runs inside the page from Calendly's own site and may set its own cookies, under Calendly's privacy notice. If you would rather not load it, email us and we will set up the call by email.
8. Your rights
Wherever you live, you can ask us to show you the data we hold about you, correct it, or delete it. Email hello@distaldesk.com from the address you used, or tell us how to confirm it is you. We reply within one business day and act on the request within one month. We do not charge for this.
9. Visitors in the UK and the EU
Under the UK GDPR and the EU GDPR you also have the right to restrict or object to our use of your data, to receive it in a portable format, and to withdraw consent at any time. Analytics cookies are set only with your consent, as the UK's Privacy and Electronic Communications Regulations (PECR) require. You can complain to the UK Information Commissioner's Office (ico.org.uk) or your local EU data protection authority. We would like the chance to fix the problem first.
10. Visitors in the United States
We collect these categories of personal information: identifiers (name, email address), professional information (company and role details in your request), and internet activity (pages viewed, only if you accept analytics). We collect them from you, for the purposes in section 3. The provider pays us a commission for clients we introduce, and we give it your details only when you ask us to introduce you. Because you direct that disclosure, and we do not use your information for cross-context behavioral advertising, we do not offer a "Do Not Sell or Share" link. To ask what we hold, or to have it corrected or deleted, email hello@distaldesk.com. We will not treat you differently for asking.
11. Visitors in Australia
This section is our notice under Australian Privacy Principles 1 and 5. We collect the details you give us when you book a call or email us so we can answer your request and introduce you to the provider. If you do not give them, we cannot make the introduction. We disclose them to Momentum Outsourcing in the Philippines, and to the services in section 4, which may be overseas. You can ask to access or correct your information at hello@distaldesk.com. To complain, email us first; we will reply within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
12. Philippine law
We are based in the Philippines, so the Data Privacy Act of 2012 (Republic Act No. 10173) also applies to how we handle your data. You can complain to the National Privacy Commission (privacy.gov.ph). The provider told us in writing on November 10, 2026 that it is not currently registered with the National Privacy Commission.
13. Changes and contact
If we change this policy, we update the date at the top of this page. If the change affects how we use data we already hold, we will email the people affected. Questions: hello@distaldesk.com.
This site is not meant for children and we do not knowingly collect data from anyone under 18.
See also our terms and how I'm paid.