Your Privacy Matters
We collect only the information needed to process your order, and we never sell your data. This policy explains what we collect, why, and how we protect it.
1. Information We Collect
When you place an order or create an account, we collect:
| Data | Why we need it |
|---|---|
| Full name | To identify your order at pickup |
| Email address | To send order confirmations and account notifications |
| Phone number | To contact you about your order if needed |
| Delivery address | Only if you select a delivery option (not pickup) |
| Order history | To show you past orders and manage stock |
| Password (hashed) | For account login — stored as a one-way bcrypt hash |
We do NOT collect your GCash account number, credit card details, or any payment credentials. All payment processing is handled directly by PayMongo.
2. How We Use Your Information
- Process orders — to prepare your item and coordinate pickup or delivery.
- Communicate with you — order confirmations, status updates, and (if you opt in) occasional updates.
- Maintain your account — so you can view past orders and check out faster.
- Improve the service — understand which products are popular and how the site is used in aggregate.
3. Third-Party Services
We share the minimum necessary data with these trusted providers:
PayMongo
Payment processor. Receives your order amount, name, and email to complete the GCash transaction. Privacy policy →
Supabase
Database and authentication provider. Stores your order details and account credentials (hashed) in encrypted form. Privacy policy →
We do not sell, rent, or share your personal information with any advertiser, data broker, or third party outside the providers listed above.
4. Cookies & Local Storage
We use your browser's localStorage to remember your shopping cart between visits. We do not use tracking cookies, ad pixels, or third-party analytics. Clearing your browser data will reset your cart.
5. Data Retention
Order records are retained for up to 1 year for accounting and inventory purposes. Account data is retained until you delete your account. Abandoned carts are cleared after 30 days.
6. Your Rights
Under the Data Privacy Act of 2012 (RA 10173), you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correct — update inaccurate or incomplete information.
- Delete — request erasure of your account and personal data.
- Object — opt out of non-essential communications.
To exercise any of these rights, email us at the address in the Contact section below. We will respond within 15 business days.
7. Security
All traffic to this site is encrypted via HTTPS. Account passwords are hashed using bcrypt and are never stored or transmitted in plain text. Payment data never touches our servers — it goes directly to PayMongo. While no system is 100% secure, we follow industry best practices to protect your information.
8. Children's Privacy
This Platform is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates the most recent revision. We will notify registered users of material changes via email.
10. Contact
For privacy-related questions, data access requests, or complaints:
University of Caloocan City — Congressional Campus
oreobites@ucc.edu.ph
If you are unsatisfied with our response, you may file a complaint with the National Privacy Commission.