Who we are
My Tindahan is an online marketplace for buyers and sellers in the Philippines, operating at mytindahan.online. We are the personal information controller for the data described below, under Republic Act No. 10173, the Data Privacy Act of 2012.
The quickest way to reach us about anything on this page is the contact form. Messages go straight to the people who run the store.
What we collect, and why
| What | When | Why |
|---|---|---|
| Full name, email address, mobile number | When you create an account | To identify your account, sign you in, and let a seller or buyer reach you about an order |
| Your password, stored only as a salted hash | When you create an account or change it | To check your sign-in. We never store, and cannot read, the password itself |
| A one-time email verification code, stored only as a hash | At signup, and when you ask for a new one | To confirm the address is real and reachable. The code expires after 30 minutes |
| GCash or QR Ph reference number, the payment screenshot you upload, and the sender name | Only if you apply to become a seller and pay the ₱50 fee | So an administrator can check your payment by hand before approving your stall |
| Listings you publish: title, description, price, stock, category, condition, location, photos | When you list an item | These are public by design — they are the shop window |
| Cart contents | While you shop | To hold your items between visits |
| Delivery name, mobile number and address, delivery zone and fee | At checkout | So the seller can deliver the order. Sellers see these only for their own items |
| Orders and their status | When you buy or sell | To run the order, and as a record of the transaction |
| Ratings and reviews you write | When you review something you bought | These are public, shown with your name on the product |
| The IP address a contact-form message came from | When you use the contact form | Only to limit how often the form can be sent, so it cannot be flooded |
We do not ask for, and do not want, your date of birth, government ID, bank account details or card numbers. There is no payment processor on this site: the ₱50 seller fee is paid outside it, by QR, and we only record the reference number and the screenshot you send us.
Cookies and local storage
We do not use analytics cookies or tracking pixels of our own. The site stores two things in your own browser:
-
Your sign-in token (
tindahan.token), kept in local storage so you stay signed in between visits. Signing out removes it. - Your cookie choice, so the consent banner does not ask you again.
Advertising. We may show advertising supplied by a third-party ad network. When ads are on and you have accepted, that network's own code runs on the landing, browse and product pages and may set its own cookies or identifiers to choose which advert to show and to count views. That data goes to the ad network under its own privacy policy, not to us — we receive only aggregate earnings figures. Ads never appear on the cart, checkout, payment, verification or administration screens. If you decline, no advertising code loads and the store works exactly as before.
Who else sees your data
- Other members, in the ordinary course of a sale. A seller sees the delivery name, mobile number and address for the items you ordered from them. A buyer sees the seller's public shop name. Your listings and reviews are public to everyone.
- Our administrators, who can see member records, seller-fee payments and orders in order to run the marketplace and check payments.
- Amazon Web Services, which hosts the site, the database and the uploaded images, and delivers our email through Amazon SES. Data is stored in the AWS Europe (Frankfurt) region.
- The ad network, if advertising is switched on and you have accepted it, as described above.
We do not sell your personal information, and we do not share it for anyone else's marketing. We will disclose data if a Philippine court or a lawful order of a government authority requires it.
How long we keep it
- Account details — for as long as the account exists.
- Orders, and the delivery details attached to them — kept as a transaction record so both sides can refer to a completed sale.
- Seller-fee payment records and proof screenshots — kept as proof that the fee was paid and approved.
- Verification codes — 30 minutes, then they expire.
- Contact-form messages — kept until an administrator has dealt with them and deletes them.
Deleting an account removes the member record along with their listings, cart, reviews and their own order history.
Your rights under RA 10173
As a data subject in the Philippines, you have the right to:
- Be informed about how your data is processed — that is this page.
- Access the personal data we hold about you.
- Correct anything inaccurate. Your name, email and mobile number can be edited yourself under Account.
- Object to processing, and to withdraw a consent you previously gave.
- Erasure or blocking — ask us to delete your account and data.
- Data portability — ask for a copy of your data in an electronic format.
- Damages, and to lodge a complaint with the National Privacy Commission at privacy.gov.ph.
To exercise any of these, send us a message through the contact page from the email address on your account. We answer within a reasonable period, and at most 30 days.
How we protect it
Passwords are stored as salted hashes and never in readable form. Verification codes are hashed too, and limited in how many times they can be guessed. The whole site is served over HTTPS. Administrator access is restricted to accounts we grant it to by hand.
No system is perfect. If a breach ever affects your personal data, we will notify you and the National Privacy Commission as the law requires.
Children
My Tindahan is not intended for anyone under 18. We do not knowingly collect data from children; if you believe a child has created an account, tell us and we will remove it.
Changes to this policy
If this policy changes in a way that matters, we will update the date at the top of this page. Continuing to use the site after a change means you accept the updated policy.