Privacy Policy

1. Who Controls Your Personal Data

For personal data processed to operate TindaNation, the personal information controller is TINDANATION APPLICATION HOSTING SERVICES, operating the TindaNation Platform, unless a separate notice identifies another controller. Privacy inquiries and data-subject requests may be sent to [email protected].

2. Scope

This Privacy Policy explains how TindaNation collects, uses, stores, discloses, protects, and otherwise processes personal data when you visit or use the Platform, register an account, place or fulfill Orders, communicate through TindaNation, submit documents, or contact support.

3. Personal Data We May Process

• Account and identity data: name, mobile number, email where used, user role, profile photo, account identifiers, OTP/authentication records, and account status.
• Customer delivery data: saved addresses, City, Barangay, landmarks, map pin, delivery coordinates, delivery instructions, and recipient details.
• Order and transaction data: Merchant, items, options, quantities, prices, delivery fees, payment arrangement, timestamps, status history, receipts, refunds, disputes, and transaction references.
• Merchant data: legal/business name, representative/owner data, geographic address, contact details, TIN/tax information, registration/permit details, logos/banners, listings, and compliance records.
• Operator/Rider data: identity, contact details, Operator affiliation, service area, driver’s licence and other permitted verification documents, vehicle details/plate number, wallet/settlement records, availability/status, delivery history, and incident records.
• Location data: precise or approximate Rider location when necessary for active delivery/dispatch and location data provided by Customers for service and delivery.
• Communications: in-app chat, support tickets, complaint records, call/SMS metadata where available, feedback, and other communications submitted to TindaNation.
• Device and technical data: IP address, device/app identifiers, browser/OS information, session/security logs, diagnostics, cookies or similar technologies, and fraud/security signals.
• Photos/documents: identity or permit images, Merchant media, delivery/receipt evidence, incident evidence, and profile images submitted through authorized features.

4. Why We Process Personal Data

• Create, authenticate, secure, and manage accounts.
• Show Merchants by location, validate service areas, match/select Operators, dispatch Riders, provide navigation/location functions, and complete Orders.
• Enable Merchant preparation, Customer delivery, payment/settlement records, receipts, refunds, and transaction support.
• Verify Merchants, Operators, and Riders and comply with e-commerce, consumer, transport, tax, regulated-product, court/government, and other legal obligations.
• Prevent fraud, identity misuse, unlawful goods, off-platform diversion, security incidents, abuse, harassment, and threats to users.
• Operate chat, notifications, customer support, internal complaint/redress, incident handling, and dispute resolution.
• Maintain business, accounting, audit, legal-claim, and security records.
• Improve reliability, usability, performance, capacity, and safety using appropriately limited analytics and diagnostics.
• Send marketing only where TindaNation has a lawful basis and any required consent; users may exercise applicable opt-out rights.

5. Lawful Bases

Depending on the data and purpose, TindaNation may process personal information because it is necessary to perform a contract or take steps requested before a contract; comply with a legal obligation; pursue legitimate interests that are not overridden by your rights; protect vital interests; or because you gave valid consent where consent is required. Sensitive personal information will be processed only when a lawful condition for such processing exists.

6. Who May Receive Personal Data

• Order participants: a Merchant may receive information necessary to prepare/support an Order; the selected Operator/Rider may receive delivery address, contact, order, payment, and instruction data reasonably needed to complete delivery; the Customer may receive necessary Merchant/Operator/Rider identification and status information.
• Service providers/processors: hosting/cloud, SMS/OTP, mapping/location, communications, security, analytics, document storage, customer support, and other vendors acting under appropriate contractual/security requirements.
• Professional advisers and insurers where reasonably necessary for claims, audits, legal advice, or risk management.
• Government agencies, courts, regulators, or law-enforcement authorities when disclosure is lawfully required or permitted.
• A successor or transaction counterparty in a lawful restructuring, sale, or transfer, subject to applicable privacy safeguards.

7. Cross-Border Processing

Some service providers or infrastructure may process or store data outside the Philippines. Where this occurs, TindaNation will use contractual, organizational, technical, or other reasonable means required by Philippine law to maintain a comparable level of protection and accountability.

8. Location Data

Customer location is used to determine service availability and delivery. Rider location may be processed during availability, dispatch, pickup, active delivery, safety, fraud-prevention, or related operational states as implemented by the Platform. TindaNation should configure the app to avoid collecting precise background location beyond what is reasonably necessary for the declared operational purpose.

9. Cookies and Similar Technologies

TindaNation may use session cookies, local storage, device identifiers, and similar technologies to keep users signed in, preserve settings, protect accounts, measure reliability, and support Platform functions. Optional analytics or marketing technologies should be separately controlled where consent or an opt-out is required.

10. Retention

TindaNation retains personal data only for as long as necessary for the declared purpose, performance of contracts, legitimate business records, security/fraud prevention, dispute handling, establishment/exercise/defence of legal claims, and periods required by applicable law. Account/profile data is generally retained while the account is active and for a reasonable post-closure period needed for those purposes. Transaction, accounting, verification, complaint, and legal records may be retained for the applicable statutory or claim period. Security and diagnostic logs are retained for shorter risk-based periods unless needed for an investigation. TindaNation will maintain an internal retention schedule and securely delete, anonymize, or block data when continued identifiable retention is no longer justified.

11. Security

TindaNation will implement reasonable and appropriate organizational, physical, and technical safeguards proportionate to the nature of the data, processing risks, size and complexity of operations, current security practices, and cost of implementation. Measures should include access controls, authentication/session security, secure development, vulnerability management, backups, logging/monitoring, incident response, least-privilege access, and processor oversight as appropriate.

12. Data Breaches and Security Incidents

TindaNation will assess suspected personal data breaches and comply with applicable notification and reporting requirements, including notification to affected data subjects and the National Privacy Commission when the legal conditions for notification are met. TindaNation may preserve evidence and cooperate with competent authorities when required.

13. Your Data-Subject Rights

Subject to the Data Privacy Act, its implementing rules, and lawful limitations, you may have rights to be informed, object, access, correct/rectify, erase or block data in appropriate circumstances, obtain data portability where applicable, withdraw consent where processing relies on consent, lodge a complaint with the National Privacy Commission, and claim damages where provided by law.

To exercise a right, contact [email protected]. TindaNation may verify your identity and may deny or limit a request where the law permits, such as when records must be preserved for legal obligations, fraud investigations, disputes, or lawful claims.

14. Children and Minors

TindaNation is not intended to enable minors to purchase age-restricted goods. Where a minor’s personal data is processed for an ordinary delivery or account interaction, TindaNation will apply applicable consent/capacity rules and heightened care appropriate to the circumstances. Parents/guardians should not permit minors to circumvent age gates or identity checks.

15. Automated Decisions and Profiling

TindaNation may use automated rules for service-area matching, dispatch, fraud/safety flags, account security, or recommendations. If TindaNation implements automated decision-making or profiling that is subject to specific notice, registration, or data-subject rights under NPC rules, TindaNation will provide the required information and controls.

16. Changes to This Privacy Policy

The current version and effective date will be published. Material changes affecting the nature, purpose, extent, recipients, or other important aspects of processing will be communicated as required by law. Where new processing requires consent, TindaNation will seek valid consent before relying on it.

17. Privacy Contact

TINDANATION APPLICATION HOSTING SERVICES

[email protected]