Privacy Notice

ABCD Organics (“we”, “us”) sells essential oils, carrier oils, and herbal and mushroom tinctures from its headquarters and laboratory at Summit One Tower, Shaw Boulevard, Brgy. Wack-Wack, Mandaluyong City. This notice explains, in plain language, what personal information we collect when you use abcdorganics.ph, why we collect it, who else gets to see it, and what you can ask us to do with it.

We follow the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its rules.

1. What we collect

When you place an order

• Your name, email address, mobile number and delivery address.
• What you ordered — items, sizes, quantities, prices and the date.
• Gift options and your gift message, if you use them.
• Any note you leave for us with the order.
• Which payment method you used and the reference number our payment provider gives back to us.

When you use the AI search or chat with us

• What you typed into AI search, and the answer it gave.
• Your messages in the support chat, plus your name and email if you choose to give them so we can reply.
• A scrambled, one-way version of your internet address. We use it only to stop spam and abuse — it cannot be turned back into your actual address, and we never use it to identify you.

When you tell us something went wrong

• The search you ran, the answer you got, your note about the problem, the page you were on and what browser you used — so we can reproduce it and fix it.
• Your email address, only if you give it so we can follow up.

Other times

• Newsletter: your email address, so we can send you the welcome message and your discount code.
• Order tracking: the order or tracking number you type and the email you ordered with, so we can check it really is your order.

As you browse

We count visits so we know which products people are interested in and where the shop is confusing. We built this ourselves rather than installing Google Analytics, so no outside company receives a record of your browsing. For each page opened we record the page address, the website you arrived from, whether you're on a phone or a computer, and your country.

To count visitors without identifying anyone, we turn your internet address into a scrambled code that changes every day at midnight Manila time. That lets us say “40 people visited today”. It does not let us follow you from one day to the next, work out who you are, or connect your browsing to your orders — and because the scrambling only works one way, we cannot turn the code back into your internet address.

What we never see or store

We never receive your full card number, your card's security code, or your PayPal password. Those go straight from you to the payment provider on their own secure page. What comes back to us is a reference number and whether the payment went through — nothing you could pay with.

2. Why we use it

• To prepare, pack and deliver your order.
• To send you order confirmations, shipping updates and refund notices.
• To answer your questions and handle returns.
• To keep the shop working — spotting fraud, blocking spam and limiting abuse.
• To see which pages and products people visit, so we can fix what's confusing and stock what's wanted.
• To keep the sales records the Bureau of Internal Revenue requires us to keep.
• To understand what customers are looking for so we can stock and explain our products better.

We do not sell your personal information to anyone. We do not run advertising on this site, and we do not share your details with advertisers.

3. Who else sees your information

Only the companies that help us run the shop, and only the part each one needs to do its job:

• PayMongo — to accept your QR Ph payment.
• PayPal — to accept payment from your PayPal balance or your card.
• Couriers such as J&T Express and LBC Express — they get your name, delivery address and mobile number, because that is what a parcel needs to reach you.
• Resend — the service that actually delivers our emails to your inbox.
• Anthropic — runs the AI behind our search and chat, so what you type into those goes to them to be answered. Under their business terms, what you type is not used to train their AI models.
• Vercel and Supabase — the companies that host the website and store its database and product photos.

Some of these companies are based outside the Philippines, so your information may be processed abroad. We only use providers that commit to protecting it.

We will also share information when the law requires it — for example a lawful order from a Philippine court or government agency.

4. About our AI search and chat

Our AI search and support chat are shopping helpers. They are useful, and they are also sometimes wrong.

• They are not medical advice. Please don't use them to decide anything about your health. Talk to a doctor.
• Please don't type sensitive information into them — health conditions, government ID numbers, card details. They are there to help you find a product.
• Chat conversations are saved so that a real person on our team can pick up where the AI left off and see what you already asked.
• The public chat is deliberately not told who you are or what you have bought before. If you want us to look at your specific order, tell it your order number.

5. What gets stored in your browser

We do not use tracking or advertising cookies. There is no Google Analytics, no Facebook Pixel and no advertising tracker on this site — our visitor counting is our own and doesn't use cookies at all, which is why you don't see a cookie pop-up here.

Your browser does keep two small things so the shop works:

• Your shopping cart, so it survives when you reload the page or come back later.
• A support chat ID, so the chat can show you your earlier messages.

Both are stored by your own browser, not by us, and clearing your browsing data removes them. A separate login cookie is used when our own staff sign in to the admin area.

6. How long we keep it

• Order and payment records: at least 5 years. We are required to keep these for tax and audit purposes, so we can't delete them on request, even if you ask.
• Support chats and problem reports: up to 2 years, then removed.
• Visit counts: kept as they are for about a year. They aren't linked to you, so after the daily code expires there is nothing in them to trace back to a person.
• Newsletter email: until you unsubscribe.

7. How we protect it

• The whole site runs over an encrypted connection (HTTPS).
• The database is encrypted where it is stored.
• The admin area is behind a login, and only our own staff can reach it.
• Requests are rate-limited so nobody can hammer the site to pull out information.

No system is perfectly secure. If a breach ever affects your personal information, we will tell you and the National Privacy Commission, as the Data Privacy Act requires.

8. Your rights under the Data Privacy Act

You have the right to:

• Be informed that we are collecting your personal information, and why.
• Access the personal information we hold about you.
• Correct anything that is wrong or out of date.
• Object to how we are using it, and withdraw consent you previously gave.
• Have it erased or blocked, where the law allows it.
• Take it with you — get a copy in a format you can move elsewhere.
• Be compensated for damage caused by false, unauthorised or unlawful use of your information.
• Complain to the National Privacy Commission at privacy.gov.ph if you think we have mishandled your information.

To use any of these, email hello@abcdorganics.ph with what you'd like us to do. We'll aim to respond within 15 working days, and we'll tell you if a request will take us longer.

9. Children

This shop is meant for adults. We don't knowingly collect personal information from anyone under 18. If you believe a child has given us their information, email us and we'll remove it.

10. If you buy from us on Shopee or Lazada

We also sell through Shopee and Lazada. If you order there, that platform collects your information under its own privacy policy, not this one. We receive your order and delivery details from them so we can pack and ship what you bought, and we handle those details the same way we handle orders placed here.

11. Changes to this notice

If we change how we handle your information, we'll update this page and change the effective date at the top. Significant changes will be announced on the site.

12. Contact us

Questions about your privacy, or want to make a request about your information? Email hello@abcdorganics.ph, call 0961 567 8168, or write to us at ABCD Organics Essential Oils Trading, Summit One Tower, Shaw Boulevard, Brgy. Wack-Wack, Mandaluyong City, Philippines. We are registered with the Philippine Department of Trade and Industry under Business Name No. 2269482. You can also send us a message.