Rescue 8 Trading Philippines, Inc. (“Rescue 8 Philippines,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. This Privacy Policy explains how we collect, use, store, and safeguard your personal information when you visit our website at rescue8ph.com or use our services.
1. Information We Collect
1.1 Information You Provide
We collect information that you voluntarily provide when you create an account, place an order, or contact us for customer support. This includes:
- Account information: Full name, email address, phone number, and password (stored as a cryptographic hash).
- Order details: Delivery address, ordered products, quantities, special instructions, and order history.
- Customer support communications: Messages, emails, or phone call records when you reach out to us.
- Marketing opt-in: If you choose to subscribe to our newsletter or promotional communications.
1.2 Information Collected Automatically
When you browse our website, we collect limited technical data necessary for the operation of the site:
- Authentication session data: Supabase auth session cookies that keep you logged in. These are strictly necessary for site functionality.
- Browsing data within our own database: Product views and search queries are logged in our first-party database for site improvement. This is not shared with any third-party analytics provider.
We do not use Google Analytics, Google Tag Manager, Meta Pixel, or any other third-party tracking or analytics service.
2. How We Use Your Information
We use your personal data for the following purposes:
- Order processing: To process and fulfill your orders, calculate shipping fees, and manage inventory.
- Delivery: To arrange shipping and provide delivery updates via your chosen courier.
- Customer support: To respond to your inquiries, process returns, and resolve issues with your orders.
- Account management: To maintain your account, authenticate your login, and secure your session.
- Marketing (opt-in only): To send you promotional emails or updates, but only if you have explicitly opted in. You may unsubscribe at any time.
- Legal compliance: To meet our obligations under Philippine law, including tax and business record-keeping requirements.
We do not sell, rent, or trade your personal data to any third party for marketing purposes.
3. Legal Basis for Processing
Our processing of your personal data is lawful under the Data Privacy Act of 2012 (RA 10173) based on the following grounds:
- Consent: You have given clear and informed consent when creating an account, placing an order, or opting into marketing communications.
- Contractual necessity: Processing is necessary to fulfill our contractual obligations to you, such as processing and delivering your orders.
- Legitimate interest: We process certain data to operate our business, secure our systems, and provide customer support.
- Legal obligation: We retain certain records to comply with Philippine tax and commercial regulations.
4. Cookie Usage
Our website uses only essential cookies required for authentication and site functionality. Specifically:
- Supabase auth session cookies: These maintain your authenticated session so you stay logged in. They are strictly necessary and cannot be disabled if you wish to use account features.
We do not use:
- Analytics cookies (no Google Analytics, no Adobe Analytics, etc.)
- Tracking cookies or pixels (no Meta Pixel, no LinkedIn Insight)
- Advertising cookies (no Google Ads, no Meta Ads cookies)
- Third-party embedded content cookies (no YouTube, no embedded iframes)
For more details, please see our Cookie Policy.
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy and to comply with our legal obligations:
- Account data: Retained for the duration of your active account. You may request deletion at any time (see Section 7).
- Order records: Retained for a minimum of five (5) years to comply with Philippine Bureau of Internal Revenue (BIR) record-keeping requirements.
- Customer support records: Retained for up to two (2) years after resolution.
- Marketing consent records: Retained until you withdraw consent, after which your data is removed from marketing lists.
6. Third-Party Data Processors
We engage the following third-party service providers to operate our website. Each acts as a data processor under our instructions, and we have taken steps to ensure they provide adequate safeguards for your personal data:
- Supabase: Provides our authentication and database infrastructure. Supabase stores authentication session tokens and user account data. Supabase employs encryption in transit (TLS) and at rest, and supports Row-Level Security (RLS) policies that we configure to restrict data access. See Supabase's Privacy Policy.
- Vercel: Hosts our web application and serves pages to your browser. Vercel processes minimal personal data (such as IP addresses) as part of content delivery. See Vercel's Privacy Policy.
We do not transfer your personal data to any entity outside of these processors for the purposes described in this policy. Both Supabase and Vercel may store data in cloud infrastructure located outside the Philippines; we rely on the safeguards described in their respective privacy policies and the contractual terms in place.
7. Your Rights Under the Data Privacy Act
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights regarding your personal data:
- Right to be informed: You have the right to be informed whether personal information about you is being processed, and this policy serves that purpose.
- Right to access: You may request a copy of the personal data we hold about you.
- Right to object / rectification: You may request correction of any inaccurate or incomplete personal data.
- Right to erasure or blocking: You may request the deletion or blocking of your personal data, subject to legal retention obligations (e.g., BIR-mandated order records).
- Right to data portability: You may request that your personal data be provided in a structured, commonly used, and machine-readable format, where technically feasible.
- Right to damages: You may be entitled to indemnification if you suffer damages due to inaccurate, incomplete, or unlawfully disclosed personal data.
To exercise any of these rights, please contact us at info@rescue8ph.com. We will respond to your request within thirty (30) days, as required by the National Privacy Commission's rules.
8. Security Measures
We implement industry-standard technical and organizational measures to protect your personal data:
- Row-Level Security (RLS): Our Supabase database is configured with RLS policies that enforce access controls at the database level, ensuring users can only access their own data.
- Encryption: All data in transit is encrypted using TLS/HTTPS. Data at rest in Supabase is encrypted by the provider.
- Secure authentication: User passwords are stored as cryptographic hashes by Supabase Auth. We never store or transmit passwords in plaintext.
- Access controls: Internal access to user data is restricted to authorized personnel only, on a least-privilege basis.
- No third-party tracking scripts: Our site does not load Google Analytics, Meta Pixel, or any third-party tracking scripts, reducing the surface area for data leakage.
Despite these measures, no system can be guaranteed 100% secure. If a data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify you and the National Privacy Commission in accordance with RA 10173.
9. Children's Privacy
Our services are intended for businesses, institutions, and individual professionals. We do not knowingly collect personal data from children under the age of eighteen (18). If you believe we have inadvertently collected data from a minor, please contact us at info@rescue8ph.com and we will promptly delete it.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The “Last updated” date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
You may also file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.
