Privacy Policy

OnlineStore ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or make a purchase.

By using our website, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access our website.

Personal Information: When you create an account, make a purchase, or contact us, we may collect your name, email address, phone number, shipping address, billing address, and payment information.

Account Information: If you sign in using Google OAuth, we receive your name, email address, and profile picture from Google. If you use phone number verification, we collect your phone number.

Order Information: We collect details about the products you purchase, order history, and delivery preferences.

Technical Information: We automatically collect certain information when you visit our website, including your IP address, browser type, device information, operating system, and browsing patterns.

Communication Records: We keep records of any correspondence between you and our customer support team.

To Process Orders: We use your information to fulfill orders, process payments, arrange delivery, and send order confirmations and updates.

To Communicate: We may contact you about your orders, account, customer service inquiries, and important updates about our services.

To Improve Our Services: We analyze usage data to understand how customers use our website and to improve our products, services, and user experience.

To Personalize Experience: We may use your information to personalize your shopping experience, including product recommendations and relevant content.

To Ensure Security: We use information to detect and prevent fraud, unauthorized access, and other security issues.

To Comply with Legal Obligations: We may use your information as required by applicable laws and regulations.

Service Providers: We share information with third-party service providers who help us operate our business, including payment processors (Stripe, HitPay), shipping carriers (J&T Express), email service providers, and cloud hosting providers.

Legal Requirements: We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers: In the event of a merger, acquisition, or sale of all or part of our assets, your information may be transferred to the acquiring entity.

With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

All payment transactions are encrypted using SSL/TLS technology. We do not store complete credit card numbers on our servers; payment information is processed securely by our payment providers.

We regularly review and update our security practices to maintain the protection of your data.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Account Information: We retain your account information for as long as your account is active. You may request deletion of your account at any time.

Order Information: We retain order and transaction records for a minimum of 5 years for tax and legal compliance purposes.

Communication Records: Customer service communications are retained for 3 years after resolution.

When information is no longer needed, we securely delete or anonymize it.

We use cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, and analyze website traffic.

Essential Cookies: Required for the website to function properly, such as maintaining your shopping cart and login session.

Analytics Cookies: Help us understand how visitors interact with our website, which pages are visited most, and how users navigate through the site.

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website.

For more information about cookies, please see our Cookie Policy.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and other applicable laws, you have the following rights:

Right to Access: You can request a copy of the personal information we hold about you.

Right to Rectification: You can request that we correct any inaccurate or incomplete information.

Right to Erasure: You can request that we delete your personal information, subject to legal retention requirements.

Right to Object: You can object to the processing of your personal information for certain purposes, including direct marketing.

Right to Data Portability: You can request a copy of your data in a commonly used, machine-readable format.

To exercise any of these rights, please contact us using the information provided below.

Our website is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18.

If we learn that we have collected personal information from a child under 18 without parental consent, we will delete that information as soon as possible.

If you believe we may have collected information from a child under 18, please contact us immediately.

Your information may be transferred to and processed in countries other than the Philippines, where our service providers are located.

When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

By using our website, you consent to the transfer of your information to these countries.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws.

We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our website after changes are posted constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@onlinestore.com

Phone: +63 912 345 6789

Address: 123 Commerce Street, Makati City, Metro Manila, Philippines 1200

Data Protection Officer: dpo@onlinestore.com