Privacy Policy

1. Introduction

LoyalSiBes ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our loyalty program platform.

We are the Personal Information Controller responsible for your personal data under the Data Privacy Act of 2012.

2. Information We Collect

2.1 Information Provided by Businesses

When businesses register for LoyalSiBes, we collect:

• Business name, email address, and phone number
• Business type and location
• Payment information (processed securely by third-party providers)
• Business settings and configuration preferences

2.2 Customer Information (via Business Accounts)

Businesses may collect and store their customers' information through our platform:

• Phone number (required for account creation)
• Name, email address (optional)
• Birth date (optional, for birthday rewards)
• Transaction history and points balance
• Appointment booking history
• Reward redemption records

2.3 Automatically Collected Information

• Device information (type, operating system, browser)
• IP address and general location data
• Usage data and analytics (page views, features used, time spent)
• Cookies and similar tracking technologies

3. Legal Basis for Processing

Under the Data Privacy Act of 2012, we process your personal data based on:

• Consent: You have given explicit consent for us to process your personal information for specific purposes
• Contract Performance: Processing is necessary to fulfill our service agreement with you
• Legal Obligation: We must process your data to comply with Philippine laws and regulations
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, system security)

4. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain our loyalty program platform
• Process transactions and manage customer rewards
• Send appointment reminders and promotional notifications (with consent)
• Analyze platform usage and improve our services
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations and respond to lawful requests
• Send important notices about service changes or updates
• Provide customer support and respond to inquiries

5. Data Sharing and Disclosure

5.1 We DO NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5.2 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our platform:

• Cloud hosting providers (Supabase, Vercel)
• Payment processors (GCash, PayMaya, credit card processors thru PayMongo)
• Email and SMS service providers
• Analytics providers

These providers are contractually obligated to protect your data and use it only for specified purposes.

5.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid court orders or subpoenas
• Government agency requests (e.g., National Privacy Commission)
• Legal processes and law enforcement investigations
• Protection of our rights, property, or safety

5.4 Business Transfers

If LoyalSiBes is involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for data transmission
• Encrypted data storage at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee training on data protection
• Regular backups and disaster recovery procedures

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: Data is retained while your account is active
• Closed Accounts: Data may be retained for up to 5 years for legal and compliance purposes, unless you request deletion
• Transaction Records: Retained for 7 years as required by Philippine tax and accounting laws
• Anonymized Data: May be retained indefinitely for analytics and research purposes

8. Your Rights Under the Data Privacy Act

Under the Data Privacy Act of 2012, you have the following rights:

To exercise these rights, contact us at privacy@loyalsibes.com

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Necessary for platform functionality
• Analytics Cookies: Help us understand how users interact with our platform
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling cookies may affect platform functionality.

10. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing personal information.

11. Children's Privacy

LoyalSiBes is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we discover that we have collected data from a minor without parental consent, we will delete it immediately.

12. International Data Transfers

Your personal data may be stored and processed on servers located outside the Philippines. We ensure that such transfers comply with the Data Privacy Act's requirements for international data transfers, including:

• Ensuring adequate data protection standards
• Using standard contractual clauses approved by the National Privacy Commission
• Implementing appropriate safeguards for your data

13. Data Breach Notification

In the event of a personal data breach that may pose a real risk to your rights and freedoms, we will:

• Notify the National Privacy Commission within 72 hours of becoming aware of the breach
• Notify affected individuals without undue delay if the breach poses a high risk to their rights
• Take immediate steps to contain and remediate the breach
• Document the incident and our response measures

14. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date at the top of this page
• Sending email notification for material changes (if you've provided your email)

Your continued use of LoyalSiBes after changes take effect constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: