Privacy Policy

Mrs. Penky ("we", "us", "our") respects your privacy and is committed to protecting your personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). This Privacy Policy explains what information we collect, how we use it, and the rights you have over it.

1. Information We Collect

• Contact & identity information: name, email address, phone number, shipping and billing address.
• Order information: products purchased, order value, order history, currency used.
• Payment information: processed directly by our licensed payment partners (such as PayMongo and Stripe); we do not store full card numbers or e-wallet credentials on our own servers.
• Technical information: IP address, browser type, device information, and basic usage data collected automatically when you use the Site.
• Communications: messages you send us via chat, email, or contact forms, including any information you choose to share in those messages.

2. How We Use Your Information

• To process and fulfill your orders, including coordinating shipment with our fulfillment and dropshipping partners.
• To communicate with you about your order, including confirmations, shipping updates, and customer support.
• To generate invoices and comply with tax and accounting obligations (via our accounting service provider).
• To improve the Site, prevent fraud, and maintain security.
• To send you marketing communications, but only where you have opted in, and always with the option to unsubscribe.

3. Who We Share Your Information With

We share personal data only as necessary with:

• Payment processors (e.g., PayMongo, Stripe) to process your payment securely.
• Fulfillment and logistics partners to ship your order to you.
• Accounting/invoicing providers (e.g., Zoho Books) for billing and tax compliance.
• Cloud hosting and infrastructure providers that store and process data on our behalf under appropriate data protection agreements.

We do not sell your personal data to third parties. Some of our service providers may process data on servers located outside the Philippines; where this occurs, we require that appropriate safeguards are in place consistent with the Data Privacy Act.

4. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, including order history for accounting and warranty purposes, or as required by applicable tax and consumer protection laws.

5. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the right to:

• Be informed that your personal data will be, is being, or has been processed;
• Access your personal data that we hold;
• Request correction of inaccurate or outdated personal data;
• Object to the processing of your personal data, including for direct marketing;
• Request erasure or blocking of your personal data under certain conditions;
• Data portability, where technically feasible;
• Be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data; and
• File a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated.

To exercise any of these rights, please contact us using the details in Section 9 below.

6. Data Security

We implement reasonable organizational, physical, and technical security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access, in line with the Data Privacy Act. In the event of a personal data breach that poses a real risk of serious harm, we will notify the NPC and affected individuals within the timeframe required by law (currently 72 hours from discovery, where applicable).

7. Cookies

The Site may use cookies and similar technologies to keep your shopping cart working correctly and to understand basic usage patterns. You can control cookies through your browser settings; disabling cookies may affect some Site functionality, such as the shopping cart.

8. Children's Privacy

The Site is not directed at children under 18. We do not knowingly collect personal data from minors without parental or guardian consent. If you believe a minor has provided us personal data without appropriate consent, please contact us so we can address it.

9. Contact Us / Data Protection Officer

For questions about this Privacy Policy or to exercise your data privacy rights, please contact our Data Protection Officer at: mrs.penkys.webshop@gmail.com.
Registered business name and address: remoteSalesForce.asia, Penky Benaning Kopplin (Founder & Managing Director), Purok 20, Acacia Street, Mandaguit Compound, Calinan, 8000 Davao City, Philippines.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will reflect the most recent revision.