Privacy Policy

When you place an order. Your name (so the counter can call it out), your mobile number (so the branch can reach you about the order), your email address if you choose to give it, and any kitchen notes you write, such as allergies. We also record what you ordered, the branch, the pickup time you chose, any promo code you used, the amounts, and the status of the order and its payment. You can order without an account.

When you sign in. Your email address, which is how we send you a one-time login code. If you save them on your account page, your pickup name and mobile number, so checkout can fill them in for you. While you are signed in, your cart is saved to your account so it follows you between devices, and your orders are listed in your order history.

When you send a franchise inquiry. Your name, email address, phone number, and the city and message you write, if any.

When you turn on notifications. If you allow order updates or promo alerts in your browser, we store the technical address your browser gives us for delivering them (a push endpoint and its encryption keys) and which orders it should hear about. It contains no name or contact details. Promo alerts are a separate choice from order updates, and you can turn either off in your browser at any time.

Automatically. To stop abuse, such as repeated login codes or bulk orders, we count requests per IP address and per email or phone number for a short window. IP addresses and email addresses are stored for this only as one-way hashes, not as you typed them; a guest’s mobile number is used as written so a counter can be kept per number. If you ask the site to find the nearest branch, your browser asks for your permission first, and your location is used for that one calculation and not stored.

What we never see. Card numbers, bank details, and e-wallet logins. Payment is completed on PayMongo’s side, and we receive only the result.

• To take, prepare and hand over your order, and to contact you about it if something changes (a sold-out item, a delay, or a refund). This is necessary to fulfil the order you asked for.
• To take payment and to issue refunds, through PayMongo.
• To let you sign in, see your order history, and reorder.
• To answer a franchise inquiry you sent us.
• To apply promo codes fairly, including limits on how many times one customer may use a code, which are counted by account or mobile number.
• To keep the site secure and working: preventing abuse, and finding and fixing errors.
• To keep the business and tax records the law requires us to keep.

We do not sell your personal data, and we do not use it for advertising profiles. The site runs no analytics or advertising trackers.

We use the following service providers to run the site. Each handles personal data only to provide its service to us.

• Supabase: our database and login service. Orders, accounts, saved profiles, carts, franchise inquiries and notification subscriptions are stored there, in Singapore.
• Vercel: hosts the website and runs its server code, in Singapore.
• PayMongo: processes payments and refunds. We send it the amount, the order reference, and your name, mobile number and email (if given) as billing details.
• Resend: delivers emails, namely your login codes and, for franchise inquiries, the alert that passes your inquiry to our franchise team.
• Sentry: receives reports when a page or the server fails, so we can fix it. Before a report leaves the site, IP addresses, cookies, form contents and account details are removed, and email addresses and mobile numbers in error text are blanked out.
• Google Maps and Mapbox: show branch maps and work out distances to a branch. A map you open is loaded from Google, and Mapbox receives your location only when you ask for the nearest branch.

Some of these providers store or process data outside the Philippines, including in Singapore. Wherever it is processed, we remain responsible for it under the Data Privacy Act. We may also disclose personal data where the law requires it, for example to a court or a government agency with authority to ask.

The site uses only what it needs to work. None of it tracks you across other sites.

• A login cookie, if you sign in, which keeps you signed in.
• A cookie remembering which branch you chose, for up to one year.
• A cookie remembering which promo codes this browser has already used, stored in a form that does not show the codes, for up to one year.
• Your cart, and a few display preferences such as whether order alerts make a sound, kept in your browser’s own storage.

You can clear all of these from your browser settings at any time.

[To be supplied by the owner: how long orders, accounts, franchise inquiries and abuse-prevention records are kept, and when they are deleted or anonymised]

Notification subscriptions are removed when your browser reports them as no longer valid, and you can withdraw one yourself at any time by turning notifications off.

Data travels to and from the site encrypted. Access to the database is restricted by rules that let a customer see only their own orders and let staff see only what their role requires, and every staff change to an order, a refund or a setting is logged. Login uses one-time codes sent to your email, so there is no password to steal.

If a breach puts your personal data at real risk, we will notify you and the National Privacy Commission as the law requires.

Under the Data Privacy Act you have the right to:

• be informed about how your personal data is processed, which is what this page is for;
• access the personal data we hold about you;
• have inaccurate or incomplete data corrected;
• object to processing, and withdraw consent you have given;
• have your data erased or blocked where the law allows;
• receive your data in a portable electronic format;
• be compensated for damages caused by unlawful processing; and
• file a complaint with the National Privacy Commission.

You can update your pickup name and mobile number yourself on your account page. For anything else, including closing your account or asking for a copy of your data, contact our Data Protection Officer below. We may need to confirm it is you before acting on a request, and some records, such as completed sales, may have to be kept for as long as tax law requires even after you ask us to delete them.

• Name: [To be supplied by the owner: Data Protection Officer's name]
• Email: [To be supplied by the owner: Data Protection Officer's email]
• Phone: [To be supplied by the owner: Data Protection Officer's phone]
• Post: [To be supplied by the owner: registered business address]

If you are not satisfied with our answer, you may complain to the National Privacy Commission at privacy.gov.ph.

The site is not aimed at children, and we do not knowingly collect personal data from anyone under 18 without a parent or guardian’s consent. If you believe a child has given us personal data, contact the Data Protection Officer and we will delete it.

When what we collect or how we use it changes, we will update this page and its effective date. If a change is significant, we will say so on the site before it takes effect.