Privacy Policy

Mrs. Penky ("we", "us", "our") respects your privacy and is committed to protecting your personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). This Privacy Policy explains what information we collect, how we use it, and the rights you have over it.

1. Information We Collect

• Contact & identity information: name, email address, phone number, shipping and billing address.
• Order information: products purchased, order value, order history, currency used.
• Payment information: processed directly by our licensed payment partners (such as PayMongo and PayPal); we do not store full card numbers or e-wallet credentials on our own servers.
• Technical information: IP address, browser type, device information, and basic usage data collected automatically when you use the Site.
• Communications: messages you send us via chat, email, or contact forms, including any information you choose to share in those messages.

2. How We Use Your Information

• To process and fulfill your orders, including coordinating shipment with our fulfillment and dropshipping partners.
• To communicate with you about your order, including confirmations, shipping updates, and customer support.
• To generate invoices and comply with tax and accounting obligations (via our accounting service provider).
• To improve the Site, prevent fraud, and maintain security.
• To send you marketing communications, but only where you have opted in, and always with the option to unsubscribe.

3. Who We Share Your Information With

We share personal data only as necessary with:

• Payment processors (e.g., PayMongo, PayPal) to process your payment securely.
• Fulfillment and logistics partners to ship your order to you.
• Accounting/invoicing providers (e.g., Zoho Books) for billing and tax compliance.
• Cloud hosting and infrastructure providers that store and process data on our behalf under appropriate data protection agreements.

We do not sell your personal data to third parties. Some of our service providers may process data on servers located outside the Philippines; where this occurs, we require that appropriate safeguards are in place consistent with the Data Privacy Act.

4. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, including order history for accounting and warranty purposes, or as required by applicable tax and consumer protection laws.

5. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the right to:

• Be informed that your personal data will be, is being, or has been processed;
• Access your personal data that we hold;
• Request correction of inaccurate or outdated personal data;
• Object to the processing of your personal data, including for direct marketing;
• Request erasure or blocking of your personal data under certain conditions;
• Data portability, where technically feasible;
• Be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data; and
• File a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated.

To exercise any of these rights, please contact us using the details in Section 9 below.

6. Data Security

We implement reasonable organizational, physical, and technical security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access, in line with the Data Privacy Act. In the event of a personal data breach that poses a real risk of serious harm, we will notify the NPC and affected individuals within the timeframe required by law (currently 72 hours from discovery, where applicable).

7. Cookies and Analytics

7.1 Strictly necessary storage

Your shopping cart is kept in your browser's local storage, and your cookie choice (Section 7.3) is stored the same way. Neither is sent to us or to anyone else, and neither can be switched off, because the shop cannot function without them. No consent is required for this.

7.2 Google Analytics — only if you agree

We use Google Analytics 4 (measurement ID G-4EY5857B0X) to count visits and see which pages people find useful. It is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, USA, and Google Ireland Limited.

• What it collects: pages viewed, time on page, approximate location derived from your IP address, referring website, and device and browser type. IP addresses are shortened before storage (IP anonymisation is enabled).
• How: through cookies set in your browser, typically named _ga and _ga_<container>, with a lifetime of up to two years.
• Purpose: understanding how the shop is used so we can improve it. We do not use it for advertising, and Google Signals and ad personalisation are not enabled.
• Transfer abroad: data is processed on Google servers, including in the United States. Google relies on the European Commission's Standard Contractual Clauses and its certification under the EU–US Data Privacy Framework. The United States does not have a data protection regime equivalent to the Philippine Data Privacy Act, and access by US authorities cannot be entirely ruled out.
• Legal basis: for storing anything on your device, your consent, given through the banner described below — Section 12(a) of the Data Privacy Act (RA 10173), and Article 6(1)(a) GDPR for visitors in the EU or UK. Before consent, only anonymous, cookieless page counts are transmitted, which rest on our legitimate interest in knowing how many people use the shop.
• Retention: Google retains user-level and event-level data for 14 months, after which it is deleted automatically.
• More from Google: policies.google.com/privacy and how Analytics uses data.

7.3 Your choice, and how to change it

No analytics cookie is set unless you accept it. On your first visit a banner asks. Until you say yes — and permanently, if you say no — Google Analytics runs in Google's consent mode: it registers that a page was viewed, but stores nothing on your device, keeps no identifier, and cannot recognise you on a later visit or across pages. Google uses those anonymous signals only to estimate overall visitor numbers. Declining costs you nothing; the shop, the cart and the checkout work exactly the same.

You can change your mind at any time:

• Reopen the cookie banner and choose again. Choosing "Decline" also deletes the analytics cookies already set on this device.
• Delete cookies through your browser settings, or install Google's opt-out browser add-on.

Withdrawing consent does not affect the lawfulness of processing that took place while consent was in force.

7.4 Third parties that see your request

One service is contacted by your browser when a page loads, because the page needs it to work: for product photographs, the supplier's image server at cf.cjdropshipping.com. It necessarily receives your IP address. It sets no cookies and is not used to track you. Our styling is served from this website itself and involves no third party. Payment pages are hosted by PayMongo and PayPal under their own privacy policies.

8. Children's Privacy

The Site is not directed at children under 18. We do not knowingly collect personal data from minors without parental or guardian consent. If you believe a minor has provided us personal data without appropriate consent, please contact us so we can address it.

9. Contact Us / Data Protection Officer

For questions about this Privacy Policy or to exercise your data privacy rights, please contact our Data Protection Officer at: mrs.penkys.webshop@gmail.com.
Registered business name and address: remoteSalesForce.asia, Penky Benaning Kopplin (Founder & Managing Director), Purok 20, Acacia Street, Mandaguit Compound, Calinan, 8000 Davao City, Philippines.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will reflect the most recent revision.