Legal

Privacy Policy

Effective 29 September 2026

This Privacy Policy explains how LOKI ECOMMERCE BUSINESS OPC ("we", "us") collects, uses, shares and protects personal information when you visit the websites of the brands we operate, place an order, or contact our support team. We process personal information in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

Controller: LOKI ECOMMERCE BUSINESS OPC · SEC registration no. 2024060155234-01 · 4th Floor Sanzworld Bldg., 2508 Jose Abad Santos Ave., Barangay 219, Zone 020, Tondo, City of Manila, 1012, Philippines · [email protected]

Information we collect

Order details you give us: name, mobile number, delivery address, landmark, the products and quantity you order, and any notes you add.
Checkout and device information: the web address and advertising campaign parameters of the page you ordered from, your browser's user-agent string, and advertising cookie identifiers set on our websites (such as Meta's _fbp and _fbc).
Order and delivery records: order status (for example confirmed, shipped, delivered, returned or cancelled), payment on delivery, and courier tracking.
Communications: calls and text messages with our support team about your order.

How we use it

To confirm, pack, ship and deliver your cash-on-delivery order, and to handle returns and after-sales questions.
To send order and delivery updates by call or SMS.
To prevent duplicate, fraudulent or test orders and to keep accurate business and tax records.
To measure and improve our advertising. When our team confirms an order, we may send Meta Platforms a record of that purchase through Meta's Conversions API: the order value and time, a one-way hashed (SHA-256) copy of your mobile number, your browser's user-agent and the advertising cookie identifiers above. We do not send your name, address, the contents of your order notes, or any information about health conditions.

Who we share it with

Couriers and logistics partners, only what is needed to deliver your order.
Service providers that run our operations on our behalf, such as our website builder, order management (point-of-sale) system, SMS provider and hosting provider.
Meta Platforms, for ad measurement as described above, under Meta's Business Tools Terms.
Authorities, when required by law.

We do not sell your personal information.

How long we keep it

We keep order records for as long as needed to fulfil your order, handle returns and support, and meet accounting and legal requirements, and then delete or anonymise them.

How we protect it

Access to customer information is limited to staff and providers who need it for your order. Systems use access controls and encrypted connections, and credentials are stored encrypted.

Your rights

Under the Data Privacy Act you may ask to be informed about, access, correct, or object to the processing of your personal information, ask for its deletion or blocking, and file a complaint with the National Privacy Commission. Contact us at [email protected].

Data deletion requests

To ask us to delete your personal information, email [email protected] with the subject "Data deletion request" and include the mobile number used for your order. We will confirm and act on your request within 30 days, except for records we must keep by law.

Changes

We may update this policy. The effective date above shows the latest version.