Privacy Policy
PetBuddy is committed to protecting your privacy and ensuring that all personal data collected from you are processed in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and other applicable laws.
Personal Data We Process
Depending on your interaction with PetBuddy, we may collect and process the following personal information:
- Full name
- Contact details (mobile number and email address)
- Home or delivery address
- Signature
- Transaction and purchase history
- Paw-yalty membership information (where applicable)
- Pet information, including your pet's name, breed, age, and grooming preferences
- Online account information (if applicable)
Our CCTV cameras may also capture your image, movements, and activities while you are inside our stores to help maintain the safety and security of our customers, employees, and premises.
Purposes of Processing
PetBuddy, its authorized personnel, and accredited service providers process your personal data for the following purposes:
- Processing your purchases and transactions
- Providing pet grooming and other pet care services
- Managing your Paw-yalty membership and rewards
- Delivering products and processing online orders
- Responding to customer inquiries, feedback, and concerns
- Improving our products, services, and customer experience through data analysis
- Sending promotional offers, updates, events, and marketing communications (with your consent where required)
- Complying with legal and regulatory obligations
- Protecting the security of our stores, employees, customers, and business operations
Lawful Bases for Processing
PetBuddy processes your personal data based on one or more of the following lawful bases:
- Your consent;
- The performance of a contract or transaction with you;
- Compliance with legal obligations;
- Our legitimate business interests, provided these do not override your fundamental rights and freedoms.
Storage of Personal Data
Physical records containing your personal information are securely stored within PetBuddy's facilities and are accessible only to authorized personnel.
Electronic records are securely stored in protected systems and servers maintained by PetBuddy or its authorized service providers, whether located in the Philippines or other jurisdictions with appropriate data protection measures. Whenever personal data is transferred outside the Philippines, PetBuddy ensures compliance with applicable data privacy laws and regulations.
Data Sharing
PetBuddy may share your personal information with:
- Its parent company, subsidiaries, affiliates, and related companies;
- Authorized employees and service providers who require access to perform their duties;
- Payment processors, logistics partners, IT service providers, and other accredited business partners;
- Government agencies, regulators, courts, or law enforcement authorities when required by law or lawful order.
All third parties receiving your personal information are required to implement appropriate safeguards to protect your data.
Data Retention
PetBuddy retains your personal information only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws and regulations.
Unless a longer retention period is required by law (such as BIR regulations), customer transaction records are generally retained for up to five (5) years from the date of the transaction.
CCTV recordings are generally retained for up to three (3) months, unless preservation is necessary for investigations, legal proceedings, or security incidents.
Risks
While PetBuddy employs reasonable measures to protect your information, processing personal data always carries some level of risk, including unauthorized access, disclosure, alteration, or loss.
To minimize these risks, PetBuddy continuously reviews and strengthens its privacy and security practices.
How We Protect Your Personal Data
PetBuddy implements appropriate organizational, physical, and technical safeguards, including:
- Appointment of a Data Protection Officer (DPO);
- Regular privacy awareness and data protection training for employees;
- Internal privacy and information security policies;
- Secure storage of physical records;
- Role-based system access controls;
- Periodic review of user access rights;
- Firewalls, antivirus protection, and network security technologies;
- Encryption and secure communication channels where appropriate;
- Regular vulnerability assessments and system monitoring.
Disposal of Personal Data
When personal information is no longer required, PetBuddy securely disposes of it using appropriate methods.
Physical documents are shredded, while electronic records are permanently deleted or securely erased. Where appropriate, anonymization techniques may also be applied to remove personally identifiable information.
Automated Processing
PetBuddy does not solely rely on automated decision-making or automated processing that produces legal or similarly significant effects on customers within its store operations.
Your Data Privacy Rights
As a data subject under the Data Privacy Act of 2012, you have the right to:
- Be informed about how your personal data is processed;
- Access your personal information;
- Correct or update inaccurate or incomplete personal data;
- Object to or withdraw consent to processing, where applicable;
- Request the deletion or disposal of your personal data, subject to legal limitations;
- Request a copy of your personal information in a portable electronic format, where applicable;
- File a complaint with the National Privacy Commission if you believe your rights have been violated;
- Claim damages in accordance with applicable laws.
If you wish to exercise any of your data privacy rights or have questions regarding this Privacy Notice, you may contact PetBuddy's Data Protection Officer (DPO) through:
Data Protection Officer
PetBuddy
Email: [Insert DPO Email Address]
Phone: [Insert Contact Number]
Address: [Insert Office Address]