Privacy Policy

1 Who we are

BidaBoss (“we”, “us”, “our”) operates an e-commerce and seller empowerment platform for Filipino entrepreneurs, available at bidaboss.ph and related services (including our seller hub, image hosting, supplier tools, and mobile app).

When you create an account, place an order, apply as a seller, contact support, or otherwise use BidaBoss, you agree to the practices described in this Privacy Policy.

2 What we collect

Depending on how you use BidaBoss, we may collect the information below. We only collect what we need to run the platform, fulfill orders, support your account, and keep the service secure. Each item explains what we collect and why.

Account & profile

• Full name — to identify your account, personalize your profile, print shipping labels, and communicate with you about orders or support.
• Email address — to create your login identity, send password-reset OTPs, deliver order or account notices, and respond to support requests.
• Mobile phone number — to contact you about deliveries, order issues, account verification, and customer support follow-ups.
• Username and password — to let you sign in securely. Passwords are stored using one-way hashing so we cannot read your plain password.
• Date of birth — to understand age-related account needs (including when a user is under 18), support age-appropriate handling of your account, and help prevent misuse of age-restricted features where applicable.
• Gender — to complete your customer profile and, where relevant, improve product recommendations or seller/customer experience personalization on the platform.
• Delivery address (house/street, barangay, city, province, region) — to ship orders and seller kits to the correct location and calculate or assign logistics options.
• Optional Facebook URL and referral codes — Facebook links help sellers/customers connect socially when they choose to share them. Referral codes attribute sign-ups or applications to the correct referrer or branch.
• Profile pictures, cover photos, and other uploads — to display your chosen avatar or store identity and support features that rely on user-uploaded media.

Seller & business information

• Store name, Facebook selling account, branch assignment, and seller application details — to register and operate your seller store, assign you to the correct branch or support team, and show accurate store identity to customers.
• Product listings, inventory, pricing, and sales records — to publish products, manage stock, process customer purchases, and show sellers their performance and order obligations.
• Seller kit delivery details (recipient, phone, email, address) — to ship starter kits or related materials to the person and address you designate.
• Bank or e-wallet payout details (GCash, Maya, GrabPay, InstaPay banks, and similar) — to send seller earnings and withdrawals to the account you choose. Incorrect details can delay or misroute payouts.
• Payment QR codes or similar payout credentials saved in settings — to speed up payouts or payment collection workflows you configure in your seller account.

Orders, payments & commerce

• Cart items, order history, product selections, shipping fees, payment method (including COD), and order status — to complete checkout, track fulfillment, resolve disputes, show order history in your account, and support refunds or returns where applicable.
• Tracking and logistics details — to hand packages to courier partners (such as J&T, LBC, or Philex) and keep buyers and sellers updated on delivery progress.
• Seller subscription and renewal payment records processed through Paymongo (QRPh, cards, GCash, Maya, GrabPay, and other supported methods) — to activate or renew paid seller access, confirm successful payment, issue receipts or records, and prevent duplicate or fraudulent billing.
• Reviews, ratings, and optional review photos — to help other customers make purchase decisions and help sellers improve product quality and service.

Communications

• Customer and seller chat messages — to enable order questions, product clarification, and marketplace communication inside BidaBoss, and to review reports of abuse when needed.
• Contact-form submissions (name, email, optional phone, message) — to respond to inquiries sent through our Contact Us and support channels.
• Transactional emails and OTPs (for example from noreply@bidaboss.ph) — to reset passwords securely, confirm important account events, and deliver service notices you need to use the platform.

Technical & security data

• IP address, browser/user agent, device information, and login activity logs — to protect accounts against unauthorized access, investigate suspicious activity, and improve platform reliability and security.
• Session identifiers (website and mobile app) — to keep you signed in while you browse, place orders, or manage a seller account without repeatedly logging in.
• Browser localStorage / sessionStorage preferences — to remember interface choices (such as theme or temporary UI state) on your device so the experience stays consistent between visits.

3 How we use your information

• Create and manage customer, seller, coach, and related accounts — including recognizing when a customer is under 18 so we can handle their data with extra care.
• Process orders, deliveries, refunds, payouts, and seller subscription payments.
• Verify account activity, prevent fraud, and protect platform security.
• Enable in-platform messaging, notifications, and customer support.
• Improve product features, seller tools, training materials, and overall user experience.
• Send important service messages (security alerts, password resets, subscription reminders). Marketing or newsletter messages are only used when you interact with those features, and we do not target minors with unrelated promotional campaigns.
• Respond to parent/guardian requests about a minor’s account where identity and authority can be reasonably verified.
• Comply with Philippine laws (including the Data Privacy Act) and respond to lawful requests from authorities.

4 Sharing & disclosure

We do not sell your personal information. We may share data only as needed to operate BidaBoss:

• Payment partners: Paymongo and related payment channels for seller subscriptions and payment processing.
• Logistics partners: Couriers such as J&T, LBC, and Philex for order and kit delivery.
• Hosting & infrastructure: Service providers that host our websites, databases, email delivery, and media storage (including image and supplier subdomains).
• Other users: Information needed for marketplace activity — for example, a seller’s store name and listing details shown to buyers, or delivery details shared for fulfillment.
• Legal requirements: When disclosure is required by law, regulation, court order, or to protect rights, safety, and platform integrity.

5 How we protect your data

• Passwords are stored using modern one-way hashing (not plain text).
• Web sessions use secure cookie settings where HTTPS is available (HttpOnly; SameSite restrictions appropriate to web or mobile API use).
• Access to operational systems and personal data is limited to authorized personnel who need it to perform their roles.
• Payment card and wallet transactions for subscriptions are handled by Paymongo; we do not store full card numbers on BidaBoss servers.

6 Data retention

• Account and profile data are retained while your account remains active and as needed to provide services.
• Order, payment, and transaction records may be retained longer where required for accounting, dispute resolution, tax, or legal compliance.
• Support messages, chat history, uploads, and logs may be retained for operational, security, and quality purposes.
• You may request deletion or restriction of your personal data, subject to legal retention obligations we cannot waive.

7 Your rights under the Data Privacy Act

Under Republic Act No. 10173 and its implementing rules, you may have the right to:

• Be informed about how your personal data is processed.
• Access a copy of personal data we hold about you.
• Object to certain types of processing.
• Erasure or blocking when grounds under the law apply.
• Rectification of inaccurate or outdated personal data.
• Data portability, where applicable.
• File a complaint with the National Privacy Commission.

To exercise these rights, contact us using the details in the Contact section below. We may need to verify your identity before fulfilling a request.

8 Cookies & similar technologies

BidaBoss uses essential session cookies to keep you signed in and maintain security. We also use browser storage for preferences and temporary interface state. We do not currently operate third-party advertising or analytics pixels on our public pages.

For full details, see our Cookie Policy.

9 Users under 18

BidaBoss welcomes customer users who may be below 18 years old. If you are under 18, you may create and use a customer account only with the knowledge and consent of a parent or legal guardian, who should supervise your use of the platform.

• We collect date of birth at registration so we can recognize when an account belongs to a minor and apply appropriate privacy care.
• Parents or guardians may contact us to review, correct, or request deletion of a minor’s personal data, subject to legal retention needs (for example completed orders).
• We do not knowingly use a minor’s personal information for unrelated marketing beyond what is needed to operate their account and fulfill orders.
• Some features that involve commercial selling, seller subscriptions, payouts, or other adult business obligations are limited to users who are at least 18 and legally able to enter those arrangements under Philippine law.

10 Changes to this policy

We may update this Privacy Policy to reflect product, legal, or operational changes. When we make material updates, we will revise the effective date on this page and, where appropriate, notify users through the platform or email. Continued use of BidaBoss after an update means you acknowledge the revised policy.

11 Contact us

For privacy questions, data-subject requests, or concerns:

• Email: support@bidaboss.ph
• Phone: +63 912 345 6789
• Address: U-514 Armal Plaza Bldg., C. Raymundo, Maybunga, Pasig City
• Hours: Monday–Friday, 8:00 AM–6:00 PM
• NPC: You may also reach the National Privacy Commission at privacy.gov.ph