Privacy Policy

Last updated: October 6, 2026

DRAFT - not for publication until approved by Nutrifinds and legal counsel.

Nutrifinds ("we", "us") respects your privacy. This policy explains how we collect, use, share, protect and retain your personal information when you visit our website, create an account or place an order, in line with the Data Privacy Act of 2012 (Republic Act 10173). [[NEEDS APPROVAL: Legal - registered business name, address and registration details - suggested default: Nutrifinds, registered business name and address as on DTI/SEC records]]

1.Information we collect

Information you give us:

  • Account details: name, email address, phone number and password (stored in protected form)
  • Sign-in through Google or Facebook: we receive your name, email address and profile picture from that provider, depending on your settings with them
  • Delivery details: saved addresses (street, barangay, city, province, postal code) and the contact number for delivery
  • Order details: items bought, vouchers used, order status and order history
  • Wishlist, product reviews and photos you upload with reviews
  • Messages you send through the Contact Us form

Information collected automatically:

  • Payment status from our payment partners (we do not store your full card number, CVV or e-wallet credentials)
  • Device and usage data such as browser type and pages visited, and cookies needed to keep you signed in and remember your cart
  • [[NEEDS APPROVAL: Legal - confirm whether any analytics or advertising tools are used; none were found in the system - suggested default: state that no analytics or advertising cookies are used]]

2.How we use your information

  • To create and manage your account
  • To process payments, pack, ship and deliver your orders, and send order updates
  • To handle returns, exchanges, refunds and customer support
  • To apply vouchers and promotions
  • To publish your product reviews
  • To keep the website secure and prevent fraud
  • To comply with legal, tax and accounting obligations
  • To send news and promotions only if you have agreed to receive them. [[NEEDS APPROVAL: Business - will newsletters or marketing emails be sent? The system has no newsletter service yet - suggested default: remove this line until a newsletter exists]]

3.Who we share your information with

We share information only as needed to run the store, and we do not sell your personal information:

  • Payment providers (Dragonpay and Xendit) to process your payment and refunds. [[NEEDS APPROVAL: Business - confirm which payment providers and methods are live - suggested default: Dragonpay and Xendit]]
  • Courier partners (QuadX/GGX and J&T) to deliver your order and any return pickup. They receive your name, address, contact number and order details. [[NEEDS APPROVAL: Business - confirm live couriers - suggested default: QuadX/GGX and J&T]]
  • Sign-in providers (Google, Facebook) when you choose to sign in with them
  • Hosting, email and website service providers that process data for us under confidentiality terms
  • Government or law enforcement when required by law

4.Product reviews and uploaded content

Reviews and photos you submit may be shown publicly on our product pages with your display name. Do not include personal details in review photos or text.

5.Cookies

We use cookies to keep you signed in, remember your cart and keep the site secure. You can block cookies in your browser settings, but sign-in and checkout may not work.

6.Data security

We use reasonable organizational, technical and physical safeguards such as encrypted connections and access controls to protect your information. If a personal data breach affects you, we will notify you and the National Privacy Commission as required by law.

7.Data retention

We keep account and order information while your account is active and as long as needed for returns, warranty, tax and legal purposes, then securely delete or anonymize it. [[NEEDS APPROVAL: Legal - retention periods - suggested default: account data until deletion request; order and payment records 10 years for tax purposes]]

8.Where your data is stored

Our systems are hosted with cloud providers that may store data outside the Philippines. We require them to protect your data. [[NEEDS APPROVAL: Legal - confirm hosting region and cross-border transfer wording - suggested default: keep this section]]

9.Your rights

Under the Data Privacy Act you may:

  • Be informed about how your data is processed
  • Access and correct your personal information
  • Object to processing or withdraw your consent
  • Ask us to block, remove or delete your data
  • Be indemnified for damages from misuse of your data
  • File a complaint with the National Privacy Commission

You can update your details in your account profile, or contact us to make a request.

10.Children

Our website is not meant for children under 18 without a parent or guardian. [[NEEDS APPROVAL: Legal - minimum age - suggested default: 18]]

11.Contact us

For privacy questions or requests, contact our Data Protection Officer through the Contact Us form on our About Us page. [[NEEDS APPROVAL: Legal - Data Protection Officer name, email and NPC registration - suggested default: name a DPO and publish a dedicated privacy email]]

12.Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.

13.Items for Nutrifinds approval (internal - remove before publishing)

  • Legal: business name and registration details, DPO and NPC registration, retention periods, cross-border transfer, cookie and analytics statement, minimum age
  • Business: newsletter and marketing emails, live payment providers, live couriers
  • Final approval: Nutrifinds owner and legal counsel must approve this page before it is published