Skip to Content

PetBuddy Privacy Notice


PetBuddy is committed to protecting your privacy and ensuring that all personal data collected from you are processed in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and other applicable laws.


Personal Data We Process

Depending on your interaction with PetBuddy, we may collect and process personal information, including but not limited to, the following:

  • Full name
  • Contact details (mobile number and email address)
  • Home or delivery address
  • Signature
  • Transaction and purchase history
  • Paw-yalty membership information (where applicable)
  • Pet information, including your pet's name, breed, age, and grooming preferences
  • Online account information (if applicable)

Our CCTV cameras may also capture your image, movements, and activities while you are inside our stores to help ensure the safety and security of our customers, employees, and premises. CCTV footage may also be used for incident investigation, loss prevention, and to comply with applicable laws, regulations, and legal obligations, where necessary.


Purposes of Processing

PetBuddy, its authorized personnel, and accredited service providers process your personal data for the following purposes:

  • Processing your purchases and transactions
  • Providing pet grooming and other pet care services
  • Managing your Paw-yalty membership and rewards
  • Delivering products and processing online orders
  • Responding to customer inquiries, feedback, and concerns
  • Improving our products, services, and customer experience through data analysis
  • Sending promotional offers, updates, events, and marketing communications (with your consent where required)
  • Complying with legal and regulatory obligations
  • Protecting the security of our stores, employees, customers, and business operations, including the investigation of incidents and prevention of fraud or loss through CCTV monitoring.


Lawful Bases for Processing

PetBuddy processes your personal data based on one or more of the following lawful bases:

  • Your consent;
  • The performance of a contract or transaction with you;
  • Compliance with legal obligations;
  • Our legitimate business interests, provided these do not override your fundamental rights and freedoms.


Storage of Personal Data

Physical records containing your personal information are securely stored within PetBuddy's facilities and are accessible only to authorized personnel.

Electronic records are securely stored in protected systems and servers maintained by PetBuddy or its authorized service providers, whether located in the Philippines or other jurisdictions with appropriate data protection measures.


Data Sharing

PetBuddy may share your personal information with:

  • Authorized employees and service providers who require access to perform their duties;
  • Payment processors, logistics partners, IT service providers, and other accredited business partners;
  • Government agencies, regulators, courts, or law enforcement authorities when required by law or lawful order.

All third parties receiving your personal information are required to implement appropriate safeguards to protect your data.


Data Retention

PetBuddy retains your personal information only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws and regulations.

Unless a longer retention period is required by law (such as BIR regulations), customer transaction records are generally retained in accordance with applicable laws and PetBuddy records retention policies.

CCTV recordings are generally retained for up to three (3) months, unless preservation is necessary for investigations, legal proceedings, or security incidents.


Risks

Despite the implementation of appropriate security measures, no method of processing or storing personal data is completely free from risk.

To minimize these risks, PetBuddy continuously reviews and strengthens its privacy and security practices.


How We Protect Your Personal Data

PetBuddy implements appropriate organizational, physical, and technical safeguards, including:

  • Regular privacy awareness and data protection training for employees;
  • Internal privacy and information security policies;
  • Secure storage of physical records;
  • Role-based system access controls;
  • Periodic review of user access rights;
  • Firewalls, antivirus protection, and network security technologies;
  • Encryption and secure communication channels where appropriate;
  • Regular vulnerability assessments and system monitoring.


Disposal of Personal Data

When personal information is no longer required, PetBuddy securely disposes of it using appropriate methods.

Physical documents are shredded, while electronic records are permanently deleted or securely erased. Where appropriate, anonymization techniques may also be applied to remove personally identifiable information.


Automated Processing

PetBuddy does not solely rely on automated decision-making or automated processing that produces legal or similarly significant effects on customers within its store operations.


Your Data Privacy Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights:

  • The right to be furnished with the information required under Section 16(b) of the Data Privacy Act before your personal information is entered into our processing systems.
  • The right to access your personal data and be informed of how it is processed.
  • The right to object to the processing of your personal data, where applicable.
  • The right to access and obtain a copy of your personal data, subject to legal limitations.
  • The right to correct or rectify inaccurate or incomplete personal data.
  • The right to suspend, withdraw, or order the blocking, removal, or destruction of your personal data, subject to applicable laws.
  • The right to data portability, where applicable.
  • The right to lodge a complaint with the National Privacy Commission if you believe your data privacy rights have been violated.
  • The right to claim damages for any injury sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.

​