Privacy Notice
Prepared with the Data Privacy Act of 2012 (Republic Act No. 10173) in mind. The business owner should review this notice with counsel before launch.
Who we are
Tastes from the Greens ("we") operates this online ordering website for its branches in Talavera, Rizal, Muñoz, Bongabon and Aliaga. We are the personal information controller for data collected here.
What we collect
- Order details: your name, mobile number, chosen branch, items, order type and special instructions.
- Delivery details (delivery orders only): address, landmark and delivery area.
- Payment details (e-wallet / bank transfer only): the payment reference number and a screenshot you choose to upload. We never ask for card numbers, PINs, or passwords.
- Technical data: a one-way hash of your IP address, used only to prevent abuse (we do not store the IP address itself).
You do not need an account to order. If you tick "Remember my details", your name and number are saved only in your own browser.
Why we use it
- To receive, prepare, deliver and hand over your order and contact you about it.
- To verify payments and handle refunds or disputes.
- To keep sales and accounting records and to prevent fraud or abuse.
Our legal bases are the performance of your order (a contract you request), our legal obligations (e.g. bookkeeping), and our legitimate interest in preventing abuse.
Who can see it
Only authorized staff of the branch you ordered from and the business owner. Branch staff cannot see other branches' customers. Payment screenshots are stored privately and viewed through short-lived secure links. We use Supabase (database and storage) and Cloudflare (website hosting) as service providers. We do not sell your data.
How long we keep it
Order and payment records are kept for as long as required for accounting and tax purposes (generally up to 10 years under Philippine rules), after which they are deleted or anonymized. Payment screenshots may be deleted earlier once the payment is settled.
Your rights
Under RA 10173 you may be informed, access, object, correct, erase or block, and port your personal data, and file a complaint with the National Privacy Commission (privacy.gov.ph). To exercise these rights, contact us through any of our branches.
Security
Data is encrypted in transit (HTTPS), protected by role-based access controls and database row-level security, and every administrative change is logged.