Privacy Policy

WiFiTayo operates the WiFiTayo Shop at shop.wifitayo.com. For purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), WiFiTayo is the personal information controller for the shop data described here.

This Policy covers the shop, checkout, order pages, and shop-related support. Separate notices may apply to the WiFiTayo merchant platform, hotspot users, or other WiFiTayo services.

Depending on how you use the shop, we may collect:

• Account data: your Clerk account identifier, name, email address, and sign-in details made available by Google or another sign-in provider. We do not receive your Google password.
• Order and delivery data: purchased products or packages, quantities, prices, order history, recipient name, phone number, street address, barangay, city, province, postal code, and delivery area.
• Payment data: payment status, amount, timestamps, and PayMongo transaction or payment references. QR Ph payment is processed by PayMongo and the participating wallet or bank. We do not collect card details or your wallet or online-banking password.
• Installment and service data: package balance, payment schedule, router-license entitlement, fulfillment status, shipment details, and support history.
• Device and usage data: IP address, browser and device information, cookies, session identifiers, security events, request logs, and basic activity needed to operate and protect the shop.
• Communications: information you provide when you ask a question, request support, report a problem, or exercise a privacy right.

We collect data from you, your sign-in provider, payment providers, couriers, and our systems.

We process personal data only for legitimate and declared purposes, including to:

• create and secure your account and authenticate your requests;
• calculate prices and shipping, accept orders, verify payments, deliver purchases, and issue updates;
• administer package installments, licenses, warranties, returns, and customer support;
• detect fraud, abuse, security incidents, duplicate payments, and violations of our terms;
• maintain business, tax, accounting, audit, and legal records;
• improve reliability and understand aggregate shop performance; and
• send marketing only when permitted by law and allow you to unsubscribe.

Our legal bases include performing our contract with you, complying with legal obligations, pursuing legitimate business and security interests, and your consent where consent is required.

We and our authentication provider use cookies or similar technologies to keep you signed in, prevent fraud, and maintain essential shop functions. Your browser may also store cart contents locally on your device. Blocking essential storage may prevent sign-in, checkout, or order access. If we later introduce non-essential advertising or analytics cookies, we will provide any notice or choice required by law.

We disclose only what is reasonably necessary to:

• Clerk and sign-in providers for account authentication;
• PayMongo, QR Ph participants, banks, and wallet providers to initiate, verify, refund, and reconcile payments;
• couriers and fulfillment partners, including J&T Express when selected, to quote, book, track, and deliver shipments;
• hosting, database, email, security, and technical service providers that process data for us under appropriate safeguards;
• professional advisers, authorities, or other parties when required by law, needed to protect rights or safety, or involved in a lawful business transfer.

We do not sell personal data. Our providers may independently process data under their own notices.

Some providers may process or store data outside the Philippines. Where required, we use contractual, organizational, and technical safeguards intended to preserve a comparable level of data protection.

We use reasonable safeguards such as access controls, encrypted connections, authentication, logging, and restricted administrative access. No online system is completely secure, so please protect your account and notify us promptly if you suspect unauthorized use.

We keep personal data only as long as needed for the purposes above. Order, payment, and accounting records may be retained for the period required by tax, consumer-protection, anti-fraud, and other applicable laws. Security logs and unsuccessful checkout data are generally kept for shorter operational periods. We then delete, anonymize, or securely archive data unless a dispute, investigation, or legal hold requires longer retention.

Subject to the Data Privacy Act and its rules, you may have rights to be informed; access, correct, or object to processing; withdraw consent; request erasure or blocking; obtain data portability; and claim damages where legally available. Withdrawing consent does not affect prior lawful processing and may prevent us from providing a service that requires the data.

To make a request, email support@wifitayo.com using the address connected to your account. We may verify your identity before acting. You may also lodge a complaint with the National Privacy Commission of the Philippines.

The shop is intended for persons who can enter into a binding purchase contract. We do not knowingly solicit shop accounts or orders from children below 18 without the involvement of a parent or legal guardian. Contact us if you believe a child provided data improperly.

We may update this Policy when our practices or legal duties change. We will post the revised version with a new effective date and provide additional notice when a change materially affects your rights.

For privacy questions or requests, contact WiFiTayo at support@wifitayo.com.