1. Information We Collect
When you create an account or place an order, we collect:
- Account information: full name, email address, phone number, and an address if you add one to your profile.
- Order information: items ordered, quantities, the name, email, and phone number given for the order, fulfillment preference (store pickup or third-party courier), courier drop-off address when applicable, and payment method. If you order in person, staff may record the same contact details for that order.
- Saved cart: items in your cart are saved to your account so they are still there when you log in again.
- Design files: images and artwork you upload as part of your order.
- Messages: messages you exchange with PMK about an order, and messages sent through the contact form (including your name and email if you are not logged in).
- Product reviews: the rating, title, and comment you post. Your name is shown publicly next to your review.
- Payment records: payment method, staff verification, transaction reference, proof where applicable, and deposit/balance confirmations. We do not store banking or e-wallet passwords or PINs.
- Technical data: your IP address and basic browser information, used for security and abuse prevention (for example, login rate-limiting and CAPTCHA checks).
2. How We Use Your Information
- To process and fulfill your orders.
- To contact you about your order status, payment confirmation, store pickup, or third-party courier handoff.
- To maintain your account and order history.
- To answer your messages and contact requests.
- To display the product reviews you post.
- To improve our services and website experience.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
3. Design File Storage
Design files are stored through the order-linked private upload workflow and used to process the relevant order. The latest design proof and every customer-approved proof are retained with the order record; administrative permanent deletions require a reason and audit entry.
4. Data Security
We store your account and order data in a secure database. Passwords are hashed and never stored in plain text. Access to your data is restricted to authorized PMK staff only.
5. Third-Party Services
We rely on a few trusted service providers to run our website and fulfill your orders. Each one only receives the data it needs for its specific function and is not permitted to use your information for its own purposes:
- Email delivery (EmailJS): sends verification codes, password-reset links, and staff-triggered messages when the service is configured. The website does not promise automatic status emails.
- Database hosting (Supabase): securely stores your account and order data.
- Website hosting (Vercel): delivers the website pages; it processes your IP address and requests in order to do so.
- Application server hosting (Render): runs our application server; it processes your IP address and requests in order to do so.
- CAPTCHA protection (Cloudflare Turnstile): guards our login and registration forms against automated abuse; it processes your IP address and basic browser signals.
- File storage (Cloudinary): privately stores your uploaded design files and payment screenshots. They are shown only to you and authorized PMK staff.
6. Cookies and Local Storage
Our website uses browser local storage to keep you logged in between visits and to remember preferences such as light or dark mode and which messages you have read. We do not use advertising or tracking cookies. Your cart is saved to your account on our server; logging out clears the copy kept in your browser.
7. Your Rights
Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to be informed, to access, to correct, to object, to erasure or blocking, to data portability, to damages, and to file a complaint with the National Privacy Commission. In practice:
- Access: You may request a copy of the personal data we hold about you.
- Correction: You may update your account information at any time via your account settings.
- Deletion: You may request deletion of your account through our contact form or by email, using the email address on your account so we can confirm the request is yours. Within 15 working days we close your account and remove your name, email address, phone number and address, your product reviews, your contact-form messages, and the messages you wrote on your orders. If an order is still in progress, we complete or cancel it first. Your order and payment records are kept without your contact details, as described below.
How long we keep records: order and payment records, including approved design proofs, payment screenshots and the messages and files linked to an order, are kept for five years after the end of the year the order was placed, as Philippine tax rules require for business records, and then deleted. General contact-form messages are kept for one year.
8. Children's Privacy
Our services are not directed at children under 13. We do not knowingly collect personal information from minors. If you believe a child has submitted information to us, please contact us so we can remove it.
9. Changes to This Policy
We may update this Privacy Policy periodically. We will notify registered users of material changes via email or an on-site notice. Continued use of our services constitutes acceptance of the updated policy.
10. Contact
For privacy questions or data requests, contact our Data Protection Officer or use the website contact form.
PMK to confirm: the Data Protection Officer's name and email, and PMK's public business address and phone number.