Privacy Notice

When you place an order, you give us your name, mobile number, delivery address and barangay — and, if you choose to add them, an email address, a landmark, delivery notes, a preferred date and time slot, and how you would like to pay. We also record what you ordered, including the sweetness you picked for each bottle.

If you pay by GCash or bank transfer, you upload a screenshot of your payment. Please be aware that this screenshot usually shows your own name and mobile number as they appear in your payment app. We keep it only to confirm your payment.

If we owe you a refund by bank transfer, we may have to ask you for your account name and number, because a transfer receipt does not always tell us where to send money back. We use it for that refund and nothing else.

Automatically, our server notes the IP address of the connection you use to place an order, upload a payment screenshot, or track an order. It is used for one thing: limiting how often the same connection can do these, which is what keeps the shop from being flooded.

On your own device, your browser holds your unfinished checkout answers so a reload does not lose them. That stays on your device, is never sent to us on its own, and is cleared when you submit your order or close the tab.

We never see your card or bank account numbers. We use no advertising or analytics trackers of any kind, so nothing here follows you to other sites. You do not need an account to order.

To make and deliver your order, to reach you about it, and to confirm your payment. That is all. We do not sell your information, and we will not send you marketing unless you ask us to.

Two providers store this information for us: Supabase, which runs our database and file storage, and Vercel, which hosts the website. Their servers may be located outside the Philippines.

A rider delivering your order is told only what they need to find you: your name, address, landmark and mobile number. Beyond that, we share your information only where the law requires it.

Payment screenshots are deleted automatically 28 days after an order is completed or cancelled, by a job that runs every night. Order records themselves are kept as business and tax records. The IP-based limits described above expire on their own within minutes.

Under the Data Privacy Act you may ask to see the personal information we hold about you, have it corrected if it is wrong, object to how we use it, ask us to delete or block it, ask for a copy, and be told if it is ever compromised.

To exercise any of these, contact us at riansaliendra@gmail.com and we will respond within a reasonable period. You may also raise a concern with the National Privacy Commission at privacy.gov.ph.

Customer records are reachable only by the shop owner, behind a password-protected sign-in, and payment screenshots are not publicly accessible. No system is perfectly secure — if a breach ever affects your information, we will tell you and the National Privacy Commission, as the law requires.

If this notice changes, the date at the top changes with it.