1. Who is responsible for your information?
This website is operated for [Full legal name of shop owner or registered partnership], doing business as Burauen Main Flowershop ("the Shop", "we", "us", or "our"). The Shop determines why and how customer personal information is processed and is generally the Personal Information Controller for that information under the Philippine Data Privacy Act of 2012.
Website software and technical support may be provided by Petalvanta or [Full name of software provider]. Where that provider processes personal information only on the Shop's instructions, it may act as a Personal Information Processor under a separate written arrangement.
Privacy contact: [Privacy contact person's name or office]
Email: [Privacy email address]
Business address: [Shop business address]
2. Information we may collect
Depending on the features you use, we may collect:
- Account details: name, email address, mobile number, username, and account credentials.
- Order details: products, quantities, customisation instructions, order history, and order status.
- Delivery details: recipient name, delivery address, contact number, delivery instructions, and location details you provide.
- Payment details: selected payment method, payment status, GCash reference number, and payment evidence you submit for verification. We do not intend to collect your GCash password, MPIN, or one-time password.
- Communications: messages sent through the website, customer support requests, reviews, and feedback.
- Technical information: information generated when you use the website, such as log records, browser/device information, and security events, where enabled by the hosting or application configuration.
Please do not submit sensitive personal information unless it is genuinely needed for your order or a legal requirement.
3. Why we use your information
We use relevant information for purposes such as:
- creating and managing customer accounts;
- receiving, confirming, preparing, and delivering orders;
- contacting you about order details, substitutions, delivery, or customer support;
- checking GCash payment references and recording payment status;
- processing cash-on-delivery orders and collecting payment;
- sending service-related notifications and order updates;
- managing reviews, complaints, refunds, and cancellations;
- protecting the website, preventing fraud, and keeping business records; and
- complying with applicable legal, tax, accounting, and regulatory obligations.
We will not use your information for a materially different purpose without an applicable lawful basis and, where required, your consent.
4. Lawful basis and consent
We process personal information only when permitted by the Data Privacy Act and its implementing rules. Depending on the activity, the basis may include taking steps to fulfil your order or a contract, complying with a legal obligation, pursuing a legitimate interest that does not override your rights, or your consent where consent is required.
Where we rely on consent, you may withdraw it, subject to legal and contractual limits. Withdrawal does not make earlier lawful processing invalid.
5. Sharing and service providers
We may share only relevant information with people or organisations that need it to provide the service, including:
- Shop owners, managers, and authorised staff who handle orders, payments, customer service, or delivery;
- delivery personnel or third-party couriers, to the extent needed to complete delivery;
- website hosting, email, security, backup, and technical-support providers;
- payment providers or financial institutions when needed to verify or process a payment; and
- government agencies, regulators, courts, or law-enforcement authorities when disclosure is legally required.
We do not sell customer personal information. Service providers must be given access only as needed and should be subject to appropriate confidentiality and data-protection obligations.
6. Cookies and similar technologies
The website may use essential session or security technologies to keep you signed in, protect forms, and maintain website functionality. If analytics, advertising, or other non-essential tracking technologies are added, this policy should be updated and any required consent controls should be implemented before they are used.
7. How long we keep information
We keep personal information only for as long as reasonably necessary for the purposes described in this policy, to resolve disputes, protect the Shop, and meet legal, tax, and accounting obligations. Order and tax records may need to be retained for periods required by law. When information is no longer needed, we will securely delete, destroy, or anonymise it where reasonably practicable, subject to lawful retention requirements.
Shop-specific retention schedule: [Insert actual retention periods for accounts, messages, payment evidence, and order records after confirming legal requirements.]
8. Security
We use reasonable organisational, physical, and technical safeguards appropriate to the information we handle. These may include access restrictions, secure passwords, software updates, backups, and monitoring for suspicious activity. No website or electronic storage method can be guaranteed to be completely secure.
Please use a strong password, keep it confidential, sign out on shared devices, and contact us promptly if you believe your account has been accessed without permission.
9. Your data privacy rights
Subject to the conditions and exceptions under Philippine law, you may have the right to:
- be informed about the processing of your personal information;
- request access to your personal information;
- request correction of inaccurate or incomplete information;
- request blocking, erasure, or destruction where legally justified;
- object to certain processing or withdraw consent where consent is the basis;
- request data portability where applicable; and
- seek damages or lodge a complaint with the National Privacy Commission where the law allows.
To exercise a right, contact us using the details in Section 1. We may need to verify your identity before acting on a request and may explain if a legal exception applies.
10. Children
The website is not intended to invite children to provide personal information independently. A parent or legal guardian should make purchases and provide delivery information for a child. If you believe a child has submitted personal information inappropriately, contact us.
11. Links to other websites
Our website may link to third-party services. Their privacy practices are governed by their own policies, and we encourage you to review those policies before providing information to them.
12. Changes to this policy
We may update this policy when our services, technology, or legal obligations change. We will post the revised version on this page and update the effective or last-updated date. Where required, we will provide additional notice or obtain consent.
13. Contact and complaints
For privacy questions or requests, contact: [Privacy contact name], [email], [telephone number], or [business address].
You may also contact the National Privacy Commission through its official website: privacy.gov.ph.