Privacy Policy

1. Information We Collect

• Order details — your email address (required at checkout so we can deliver digital products and send your invoice), the products you buy, order amounts, and order status.
• Delivery details — for physical products, your name, delivery address and mobile number.
• Account details — if you create an account, your name, email address and password. Passwords are stored in hashed form and are never visible to us.
• Payment confirmation — the payment method type and the reference of your payment. Card numbers, e-wallet credentials and one-time PINs are entered on our payment provider’s page and never reach our systems.
• Download records — when and how many times a digital product was downloaded, used to enforce download limits and to help if you lose access.
• Technical and security data — IP address, browser and device information, used to keep the store running and to protect it against abuse (for example, limiting repeated login or checkout attempts).
• Usage and measurement data — pages viewed, products viewed, items added to cart, and completed purchases, collected through Google Analytics as described in Section 5.
• Messages you send us — the content of emails, calls and complaints.

2. How We Use Your Information

We use your information, on the lawful basis shown, to:

• process your order, take payment, deliver digital products and physical products, and handle cancellations, returns and refunds — to perform our contract with you;
• issue invoices and keep accounting and tax records — to comply with legal obligations;
• respond to enquiries and complaints — to perform our contract and comply with RA 11967;
• secure the store, prevent fraud and enforce our Site Terms — our legitimate interests;
• understand how the store is used and improve it — our legitimate interests; and
• send marketing emails, but only where you have opted in — your consent, which you can withdraw at any time.

3. Cookies and Browser Storage

The store uses a small number of first-party cookies that it needs in order to work:

• a cart cookie that remembers your basket;
• a region cookie that remembers your currency;
• a sign-in cookie, if you log in to an account; and
• a short-lived checkout cookie that lets you retrieve your downloads after paying as a guest.

The cart, sign-in and checkout cookies cannot be read by scripts on the page. We also keep a small record in your browser’s local storage so that a purchase is not counted twice in our analytics. Google Analytics sets its own cookies, described in Section 5. Blocking cookies in your browser may stop the cart and checkout from working.

4. Who We Share It With

We do not sell your personal data. We share it only with service providers that process it on our behalf, under agreements that require them to protect it, and with government authorities where the law requires:

• PayMongo — payment processing (cards, GCash, Maya);
• Resend — sending order confirmation and download emails;
• Supabase — secure storage of digital product files and security records;
• Railway and Vercel — hosting of our commerce system and website;
• Google — Google Analytics measurement (Section 5); and
• our accountants, auditors and legal advisers, where needed.

Transfers outside the Philippines. Some of these providers store or process data on servers outside the Philippines. Where they do, we remain accountable for your data and rely on contractual and technical safeguards to give it a level of protection comparable to the Data Privacy Act.

5. Analytics

We use Google Analytics 4 to understand how visitors use the store — for example, which products are viewed and how many checkouts are completed. Google Analytics sets cookies and receives information such as your IP address, device and pages viewed. We do not use Google Analytics data to identify you, and we do not run advertising or advertising pixels on the store; Google’s advertising signals are switched off.

You can prevent Google Analytics from collecting data by blocking its cookies in your browser or by installing the Google Analytics opt-out browser add-on. See also how Google uses data from sites that use its services.

6. How Long We Keep It

• Orders and invoices — for as long as Philippine tax and accounting laws require.
• Accounts — until you ask us to close your account, after which order records are kept as above.
• Download records — for as long as your download access lasts, and then as part of the order record.
• Security records — for short periods, typically minutes to days, unless needed to investigate abuse.
• Complaints and correspondence — for as long as needed to resolve the matter and defend any claim.

7. How We Protect It

We apply organisational, physical and technical safeguards, including encrypted connections, sign-in tokens that page scripts cannot read, time-limited and use-limited download links, and restricted access to personal data within our team. No system is completely secure; if a personal data breach occurs that is likely to put you at risk, we will notify you and the National Privacy Commission as the law requires.

8. Your Rights

Under the Data Privacy Act you have the right to:

• be informed of how your data is processed;
• access your personal data;
• object to processing, and withdraw consent where processing is based on it;
• have inaccurate data corrected;
• have data erased or blocked, subject to our legal duty to keep order records;
• obtain your data in a portable format;
• be indemnified for damages caused by inaccurate, incomplete, outdated, false or unlawfully obtained data; and
• lodge a complaint with the National Privacy Commission (NPC).

To exercise any of these rights, contact our Data Protection Officer below. We may ask you to confirm your identity before acting on a request.

9. Children

The store is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the most recent revision, and material changes will be highlighted on this page.

11. Contact Us

Personal information controller: Dendrotonics Corp., Inc., Altaraza Spine Road corner Bocaue Road, Brgy. Tungkong Mangga, San Jose Del Monte, Bulacan, Philippines.

Data Protection Officer: [email protected] · Phone: +63 927 854-4477