1. Introduction
TerraEco ("we", "our", or "us") respects your privacy and is committed to protecting your personal information in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.
2. Information We Collect
We collect the following information when you register an account or use our services:
- Email address — used for account identification and login
- Password — stored as a cryptographic hash, never in plain text
- Verification codes — sent to your email for account verification
- Serial numbers (SN) — the outer SN and inner verification code from your TerraEco roll, used for anti-counterfeit verification
- Points balance — earned from verified genuine products
- IP address — used for brute-force protection on the verification endpoint
3. How We Use Your Information
- To create and manage your account
- To verify the authenticity of TerraEco products
- To award and track points for verified genuine rolls
- To prevent fraud and unauthorized access
- To send transactional emails (verification, password reset)
- To improve our products and services
4. Data Storage and Security
Your personal information is stored on secure servers. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.
Passwords are hashed using industry-standard cryptographic functions. Inner verification codes are stored as SHA-256 hashes with a server-side pepper — the plaintext codes are never stored in our database.
5. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- When required by law or legal process
- To protect our rights, property, or safety
- With service providers who assist in operating our website (under strict confidentiality obligations)
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time by contacting us.
7. Your Rights
Under the Data Privacy Act of 2012, you have the following rights:
- Right to be informed — you have the right to know how your data is collected and used
- Right to access — you may request a copy of your personal data
- Right to correct — you may request correction of inaccurate data
- Right to erase — you may request deletion of your data, subject to legal obligations
- Right to object — you may object to certain processing of your data
- Right to data portability — you may request your data in a structured format
- Right to complain — you may file a complaint with the National Privacy Commission
8. Cookies
We use cookies to maintain your session and improve your browsing experience. You may disable cookies in your browser settings, but some features of the Site may not function properly.
9. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be effective immediately upon posting. Your continued use of the Site after changes constitutes acceptance of the new policy.
11. Contact Us
For questions about this Privacy Policy or to exercise your rights, contact us at support@terraeco.store.
You may also file a complaint with the National Privacy Commission.