Privacy Policy

DRIPFORMMNL ("we", "us") respects your privacy. This policy explains what personal information we collect when you shop with us, why we collect it, who we share it with, and the choices you have. We handle your information in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

What we collect

• Contact details: your name, email address and mobile number.
• Delivery details: your shipping address, including barangay, city, province and postal code, plus any landmark or delivery note you add.
• Order details: the items you order, the amounts, the shipping option you choose, and your order status.
• Payment proof: the reference number and screenshot you upload to prove your payment. We never ask for or store your card number or e-wallet PIN.
• Account details (if you create an account): your name, email, phone and password. Your password is stored in scrambled (hashed) form, so we can't read it.
• "Notify me" requests: your email address and the cap you're waiting for.
• Technical details: your IP address and browser information, used to keep the site secure and to limit abuse such as repeated login attempts.

How we use it

• To process your order, verify payment, arrange delivery and contact you about it.
• To send order emails (order received, payment confirmed, shipped) and, if you asked, a one-time "back in stock" email.
• To handle returns, refunds, exchanges and customer support.
• To keep our website and your account secure and prevent fraud and abuse.
• To keep records we need for accounting and legal purposes.

We do not sell your personal information.

Who we share it with

We share only what's needed, with the people and services that help us run the shop:

• Couriers such as J&T Express, LBC and Lalamove: your name, phone number and delivery address, so they can deliver your order.
• Payment providers (for example PayMongo, if you pay online): the details needed to process your payment.
• Service providers that host our website and database, store our images and uploaded payment screenshots (such as Cloudinary), and send our emails (such as Resend).
• Authorities, when the law requires us to.

Some of these providers keep data on servers outside the Philippines.

Cookies and browser storage

We use your browser's storage to remember your shopping cart, keep you logged in to your account, and remember the email you used for a "notify me" request. We don't currently use advertising or tracking cookies. If we add analytics or advertising tools in the future, we will update this policy.

How long we keep it

We keep order and payment records for as long as we need them to deliver your order, handle returns and support, and meet our accounting and legal obligations. Account and "notify me" information is kept until you ask us to delete it.

How we protect it

We use reasonable safeguards, including encrypted connections (HTTPS), hashed passwords, limits on login attempts, and restricted admin access. No online service is completely risk-free, but we work to protect your information.

Your rights

Under the Data Privacy Act, you have the right to:

• be informed about how your data is used,
• access the personal information we hold about you,
• correct information that is wrong or out of date,
• object to certain uses, and ask us to remove or block your information, and
• file a complaint with the National Privacy Commission if you believe your data was mishandled.

Some records, such as completed orders, may need to be kept for legal or accounting reasons.

Contact us about your data

To see, correct or delete your information, or if you have a privacy question, contact us:

Message us on Facebook (dripformmnl), Instagram (@dripform.mnl) or TikTok (@dripform.mnl).

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows when it last changed.

See also our Shipping & Returns Policy and Terms & Conditions.