Privacy Policy

1. Personal Data We Collect

When you interact with our website or place an order, we collect only information strictly necessary for order processing, fulfillment, and customer care:

• Customer Identification: Full Name.
• Contact Details: Philippine mobile telephone number (required for courier delivery coordination and SMS status alerts) and optional email address.
• Delivery Information: Complete Philippine shipping address including Region, Province, City or Municipality, Barangay, Street/House number, and postal code.
• Order History: Product items selected, bundle selections (30-day, 90-day, or 180-day protocols), quantity, order timestamp, and payment method selected (Cash on Delivery / Online).
• Technical Diagnostics: IP address, device type, browser specifications, and temporary session identifiers used strictly for security, performance monitoring, and duplicate submission prevention.

2. Purpose of Data Processing

Your personal information is collected and processed exclusively for legitimate commercial purposes:

1. Order Execution: Creating your official order record, generating waybills, and packaging your supplements.
2. Logistics Integration: Synchronizing order records with our Pancake POS inventory system and dispatching delivery instructions to accredited domestic logistics partners (J&T Express, Ninja Van, Flash Express).
3. Fraud & Idempotency Protection: Preventing accidental duplicate submissions, unauthorized payment attempts, or fraudulent transactions.
4. Customer Service: Responding to order inquiries, managing tracking lookups, and processing 60-day satisfaction guarantee claims.

3. Data Sharing & Third-Party Disclosure

We do not sell, rent, trade, or monetize your personal data to advertisers or third-party marketing brokers.

We disclose your information only to authorized service providers bound by strict confidentiality and data protection obligations:

• Fulfillment & POS System: Pancake POS (used internally to coordinate warehouse packing and stock deduction).
• Courier Partners: Accredited domestic courier networks (J&T Express, Ninja Van, Flash Express) strictly for parcel delivery to your designated doorstep.
• Legal & Regulatory Authorities: When required by Philippine law, subpoena, or lawful government order.

4. Security Standards & Data Retention

We implement comprehensive organizational, physical, and technical measures to protect your personal data:

• All web communications and checkout transmissions are secured using industry-standard Transport Layer Security (TLS 1.3) encryption.
• Database access is restricted via strict role-based access control (RBAC), and server secrets are never exposed client-side.
• Customer order records are retained only for the duration necessary to satisfy warranty obligations, tax requirements, and accounting audits, after which records are anonymized or permanently deleted.

5. Your Rights as a Data Subject

Under Republic Act No. 10173, you are entitled to specific statutory rights regarding your personal information:

• Right to be Informed: To know whether your personal data is being processed.
• Right to Access: To request a copy of personal information we hold about you.
• Right to Rectification: To correct inaccurate or outdated records.
• Right to Erasure or Blocking: To request deletion of your data when retention is no longer necessary.

To exercise any of these rights, contact our Data Protection Officer at support@biocoreph.com.