Legal
Privacy policy
Last updated 30 September 2026
This policy explains what personal information we collect when you shop with us, why, and what you can ask us to do with it. We follow the Philippine Data Privacy Act of 2012 (RA 10173).
Jecella clo., Magalang, Pampanga, Philippines. Contact: jecellaclo@gmail.com.
What we collect
- When you order: your name, email, mobile number, delivery address and any notes for the rider, the pieces you ordered, and the payment reference number you send us. We never see or store your GCash, Maya, bank or card log-in details: you pay us directly through them.
- If you make an account (optional): your name, email, and, if you add them, your mobile number and saved address. Your password is stored only in scrambled (hashed) form.
- If you message us: what you write and your contact details.
We don't collect anything else: no advertising trackers, no profiling, no sale of your information.
Why we use it
- To take, confirm and deliver your order, match your payment, and send you order and shipping emails (to carry out our sale to you).
- To run your account, if you have one, and answer your questions.
- To keep sales records required by tax and accounting rules (a legal obligation).
- To keep the shop secure and working, and to prevent fraud (our legitimate interest).
We don't send marketing emails.
Who helps us
We share only what each one needs to do its job:
- Couriers (SPX Express, J&T Express, Lalamove, Grab): your name, mobile number and delivery address.
- Supabase (our database and photo storage, in Singapore) and Vercel (our website hosting, in Singapore).
- Brevo (sends our order emails).
- Google (a private Google Sheet we use to manage orders).
Some of these providers keep data outside the Philippines. We use only providers bound to protect it, and we remain responsible for it under Philippine law.
Cookies and similar storage
We use only what the shop needs to work, so we don't ask for cookie consent:
| Name | What it does | How long |
|---|---|---|
| jecella-bag-v1 | Remembers your bag (stored in your own browser, never sent to us) | Until you empty the bag |
| jecella-account | Keeps you signed in, only if you sign in to an account | 30 days, or until you sign out |
| payload-token | Keeps our staff signed in to the shop's admin (not set for shoppers) | Until they sign out |
We also measure how fast our pages load for real visitors (Vercel Speed Insights). It uses no cookies and doesn't identify you. We use no advertising or social media trackers.
How long we keep it
- Orders: for as long as Philippine tax and accounting rules require us to keep sales records, then deleted.
- Accounts: until you ask us to close yours (your past orders stay in our sales records as above).
- Messages: until your question is resolved, and no longer than a year.
How we protect it
The site runs only over encrypted connections (HTTPS). Only our staff can see orders, through a password-protected admin, and our database can't be reached directly from the internet. If a breach ever puts your information at risk, we'll tell you and the National Privacy Commission as the law requires.
Your rights
Under the Data Privacy Act you can ask to see the information we hold about you, correct it, get a copy of it, object to how we use it, or have it deleted or blocked (except what we must keep by law). Email jecellaclo@gmail.com and we'll reply within 15 days. You can also update your saved details yourself in your account.
If you're not satisfied with our answer, you can complain to the National Privacy Commission.
Children
The shop is for adults. If you're under 18, please order with a parent or guardian.
Changes
If we change this policy, we'll update it here and change the date at the top.