Privacy Policy

1. Who we are

[REGISTERED BUSINESS NAME]
[BUSINESS ADDRESS, DASMARIÑAS, CAVITE]
Email: [CONTACT EMAIL] · Phone: [CONTACT NUMBER]

2. Information we collect

Information you give us when you check out:

• Your first and last name
• Email address and mobile number
• Delivery address (street, barangay, city, province, region and postal code)
• The products or package you chose and your payment method
• For QR payments (GCash, QR Ph, Maya, BPI and similar), the screenshot or photo of your payment receipt that you upload

If you fill in your details and continue to the payment page but don't finish your order, we keep those details so we can follow up with you about it.

Information collected automatically:

• Where you came from, such as the ad, campaign or website (for example Facebook, Instagram, TikTok or Google) that brought you to our site. We store this in a cookie so we can tell which of our ads are working.
• Your cart and the checkout details you've typed, kept in your browser for the current session so you don't have to type them again.
• After you place an order, your name, contact details and delivery address are saved in your browser on that device only, so your next checkout is filled in for you. They are not sent to us from there, and you can remove them anytime with “Not you? Clear” on the checkout page.

We do not collect or store your GCash, Maya, bank or card login details. You pay directly in your own payment app.

3. How we use your information

• To process, confirm, deliver and track your order
• To check your payment receipt and match it to your order
• To contact you about your order, delivery or payment
• To follow up on checkouts you started but didn't finish
• To answer your questions and give customer support
• To understand which ads and campaigns bring customers, so we can improve them
• To keep records required by law, such as for tax and accounting
• [IF YOU SEND PROMOS BY SMS, VIBER, MESSENGER OR EMAIL, SAY SO HERE AND HOW TO OPT OUT — OTHERWISE DELETE THIS LINE]

4. Who we share it with

We only share your information with those who help us run the store and deliver your order:

• Supabase, which stores our order database and payment receipts
• [HOSTING PROVIDER, E.G. VERCEL], which hosts our website
• Telegram, which we use to receive new-order alerts (your name, mobile number, city and what you ordered)
• [COURIER(S), E.G. J&T EXPRESS, LBC], which receive your name, mobile number and delivery address to deliver your order

We do not sell your personal information. We may disclose it if the law or a government authority requires us to.

5. How we protect and keep your information

Your order details and payment receipts are stored in a secured database. Payment receipts are kept private and can only be viewed by our staff. Only authorised staff can access our admin system.

We keep order records and payment receipts for [RETENTION PERIOD, E.G. 5 YEARS FOR TAX RECORDS], and details from unfinished checkouts for [E.G. 90 DAYS]. After that, we delete or anonymise them.

6. Your rights

Under the Data Privacy Act, you have the right to:

• Be informed about how your personal information is used
• Access the personal information we hold about you
• Correct information that is wrong or incomplete
• Object to processing, or withdraw your consent
• Ask us to delete or block your information
• Get a copy of your information in a commonly used format
• Be compensated for damages caused by misuse of your information
• File a complaint with the National Privacy Commission (privacy.gov.ph)

To use any of these rights, contact our Data Protection Officer below. We may need to confirm your identity first. Some records, like completed orders, may have to be kept for legal reasons even if you ask us to delete them.

7. Cookies

We use one cookie to remember which ad or website brought you to us. We also use your browser's session storage for your cart and checkout details, which are cleared when you close your browser, and its local storage to remember your contact and delivery details from your last order on that device until you clear them. You can block or delete cookies in your browser settings; the store will still work.

8. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it took effect at the top.

9. Contact us

Data Protection Officer: [DPO NAME]
Email: [PRIVACY CONTACT EMAIL]
Phone: [CONTACT NUMBER]
Address: [BUSINESS ADDRESS]