Privacy Policy

SIDEKICK (“SIDEKICK”, “we”, “us”, or “our”) is a virtual assistant agency headquartered in Manila, Philippines. We provide remote support teams to businesses across the United States, Europe, and beyond. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website (sidekick.co) or engage our services.

By using our website or services, you agree to the practices described in this policy.

We collect personal information in the following ways:

Information you provide directly

• Name, email address, and company name submitted through our booking or contact forms
• Business information you share with us during onboarding or discovery calls
• Communications sent to us by email or through our website

Information collected automatically

• IP address and browser/device type
• Pages visited and time spent on the site
• Referring URLs and basic analytics data

We do not collect payment card details directly. Any payment processing is handled by third-party providers who maintain their own privacy and security standards.

We use the information we collect to:

• Respond to enquiries and schedule discovery calls
• Onboard and deliver services to clients
• Communicate important updates about your engagement
• Improve our website and service offering
• Comply with applicable legal obligations
• Prevent fraud and ensure the security of our platform

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

If you are located in the European Union or European Economic Area, we process your personal data under the following legal bases as set out in the General Data Protection Regulation (GDPR):

• Contract: to perform services you have requested or to take steps prior to entering into a contract
• Legitimate interests: to improve our services and communicate with prospective clients
• Legal obligation: where we are required by law to process your data
• Consent: where you have given explicit consent, which you may withdraw at any time

We share personal information only in limited circumstances:

• Service providers who assist us in operating our website and delivering services (e.g., scheduling tools, cloud storage, communication platforms), each bound by confidentiality obligations
• Our internal team members strictly on a need-to-know basis for service delivery
• Law enforcement or regulators where required by applicable law or legal process
• A successor entity in the event of a merger, acquisition, or business sale, with notice provided to you

Our website uses cookies and similar technologies to understand how visitors use the site and to improve your experience. These include:

• Essential cookies required for the site to function
• Analytics cookies that help us understand traffic patterns (e.g., page views, session duration)

You may disable cookies through your browser settings. Doing so may affect certain features of the website.

We retain personal information for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Client data is typically retained for the duration of the engagement and for a reasonable period thereafter for legal and accounting purposes. Enquiry data from prospective clients who do not proceed is deleted or anonymised within 12 months.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate or incomplete data
• Erasure: request deletion of your data, subject to legal retention requirements
• Restriction: request that we limit how we process your data
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests
• Withdrawal of consent: where processing is based on consent, withdraw it at any time

To exercise any of these rights, email us at hello@sidekick.co. We will respond within 30 days.

If you are located in the Philippines, you also have rights under the Data Privacy Act of 2012 (Republic Act No. 10173), including the right to be informed, the right to object, and the right to file a complaint with the National Privacy Commission (NPC).

SIDEKICK is based in the Philippines and serves clients globally. When you submit information through our website or engage our services, your data may be transferred to and processed in the Philippines and, where necessary, other countries where our service providers operate. We take appropriate steps to ensure that such transfers comply with applicable data protection laws and that your information receives an adequate level of protection.

We take reasonable organisational and technical measures to protect your personal information against unauthorised access, loss, or misuse. These include access controls, secure communication protocols, and confidentiality obligations for all team members. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Our website may contain links to third-party websites (including our social media profiles). We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after any changes constitutes acceptance of the updated policy.