Effective Date: October 8, 2024
At Elhy Refreshment Stall (“we”, “us”, or “our”), we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, and store your personal information when you visit our website, The Coco Bar (accessible at www.thecocobar.com), or when you purchase our buko pies for events, gatherings, and family functions.
We are dedicated to being transparent about how we collect, store, and use your personal information, and ensuring that we comply with the General Data Protection Regulation (GDPR). This Privacy Policy also explains your rights under the GDPR and how you can exercise those rights.
The data controller responsible for processing personal data on this website is:
1. Data Control
Elhy Refreshment Stall
Cabaguio Street, Agdao, Davao City
Email: [email protected]
2. Personal Data We Collect
We collect the following types of personal data from you:
- Contact Information: Name, email address, phone number, and postal address when you place an order, make an inquiry, or subscribe to our newsletter.
- Order and Transaction Information: Purchase details, delivery information, and payment data.
- Technical Data: IP address, browser type, operating system, and usage details when you interact with our website.
- Communications: Any correspondence, feedback, or queries you submit via our website or email.
We do not collect sensitive personal data unless explicitly provided by you for specific purposes (e.g., allergy information for food orders).
3. How We Collect Personal Data
We collect your personal data in the following ways:
- Directly from you: When you place an order, contact us, or sign up for communications.
- Automatically: Via cookies and tracking technologies when you browse our website (see our Cookie Policy for more details).
4. How We Use Your Personal Data
We process your personal data for the following purposes:
- To process and deliver your orders, manage payments, and communicate order updates.
- To respond to inquiries, handle complaints, and provide general support.
- To send you promotional materials and information about our products, if you have consented to receiving such communications.
- To monitor and analyze usage patterns and improve the functionality and content of our website.
- To comply with applicable laws and regulations, such as accounting and tax requirements.
5. Legal Basis for Processing
We process your personal data based on one of the following legal grounds:
- When processing is necessary for fulfilling an order you placed with us.
- When you have given explicit consent to receive marketing communications.
- For improving our website, enhancing customer experience, or pursuing our business interests.
- When processing is necessary to comply with a legal requirement.
6. Data Sharing and Disclosure
We do not sell or rent your personal data. However, we may share your data with the following parties:
- Third-party vendors who provide services such as payment processing, order delivery, IT support, and website hosting.
- Where required by law, we may share your data to comply with legal requests, such as tax or law enforcement inquiries.
- In the event of a merger or sale of assets, your personal data may be transferred as part of the transaction, but only in accordance with applicable data protection laws.
All third-party service providers are contractually obligated to safeguard your personal data and comply with GDPR standards.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:
- Encryption of sensitive data.
- Secure storage of personal data on protected servers.
- Access controls to limit who can access your personal data.
- Regular monitoring of systems for vulnerabilities and threats.
While we strive to protect your personal data, please note that no transmission of information over the internet can be guaranteed as completely secure.
8. Data Retention
We will retain your personal data only as long as necessary for the purposes stated in this Privacy Policy or as required by law. Generally:
- Order Data: Retained for 7 years to comply with tax and accounting obligations.
- Marketing Data: Retained until you withdraw your consent or opt out of receiving marketing communications.
- Technical Data: Retained for a reasonable period to analyze and improve website functionality.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.
9. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your browsing experience and analyze website traffic. For more information on how we use cookies and how you can manage your cookie preferences, please see our Cookie Policy.
10. Contact Information
If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us:
Elhy Refreshment Stall
Cabaguio Street, Agdao, Davao City
Email: [email protected]
By using our website and services, you acknowledge that you have read and understood this Privacy Policy, and you agree to the collection, use, and storage of your personal data as outlined.
This Privacy Policy is designed to comply with the GDPR and reflects our commitment to transparency and user privacy.