7. Philippines
Crewelo should appoint and publish the appropriate privacy contact/Data Protection Officer information, assess NPC registration or notification obligations, maintain data-subject rights procedures, and align cross-border processing/security/breach workflows with the Data Privacy Act and NPC issuances. Providers operating in the Philippines remain responsible for business permits, professional licensing, consumer law, tax, and their own direct-marketing practices.