Privacy Policy

1. Who Controls Your Data

Personal Information Controller: We Dont Add Value
Trading as: NO ADDED VALUE
Address: [[REGISTERED_ADDRESS_LINE_1]], [[CITY_MUNICIPALITY]], [[PROVINCE]], Philippines
Data Protection Officer: [[DATA_PROTECTION_OFFICER_NAME]]
Privacy contact: info@wedontaddvalue.com

2. What We Collect

Category	Data	When
Identity & contact	First and last name, email address, mobile number	At checkout, or when you use a form
Delivery	Street address, barangay, city, province, postal code, delivery notes	At checkout
Order	Items, sizes, quantities, prices, order reference, order history	When an order is placed
Payment (limited)	Payment reference, method used, amount, success or failure. Not your card number, expiry, CVV or wallet credentials	From PayMongo, after payment
Enquiries	Business name, contact person, message content	Contact and wholesale forms
Technical	IP address, user agent, request logs, approximate location from IP	Automatically, when you use the site

We do not knowingly collect sensitive personal information as defined in the Data Privacy Act, and we ask you not to send any through our forms.

We do not knowingly collect data from children under eighteen. If you believe a child has given us personal data, contact info@wedontaddvalue.com and we will delete it.

3. Why We Process It, and On What Basis

Purpose	Lawful basis (RA 10173, §12)
Processing, fulfilling and delivering your order	Necessary for the performance of a contract with you
Taking payment and preventing payment fraud	Contract; legitimate interests in preventing fraud
Customer support, returns, refunds and warranty claims	Contract; compliance with a legal obligation
Keeping accounting, sales and tax records	Legal obligation (National Internal Revenue Code and BIR record-retention rules)
Site security, abuse prevention and diagnostics	Legitimate interests in operating a secure service
Marketing emails about future drops	Your consent, given by ticking the optional box, withdrawable at any time

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing done before withdrawal. Withdrawing consent to marketing does not affect our ability to send you transactional messages about an order you have placed.

We do not sell personal data, and we do not share it for third-party advertising. We disclose it only to the following categories of recipient, and only as far as each needs it:

PayMongo Philippines, Inc. — payment processing. They receive your name, email, mobile number, billing address and order amount, and handle the card or wallet data we never see. They act as an independent controller for the payment itself.
Courier partners — delivery. They receive the recipient's name, address, mobile number and parcel details.
Cloudflare, Inc. — hosting, content delivery, database storage and security filtering for this site.
Professional advisers — accountants and lawyers, where needed and under a duty of confidentiality.
Government authorities — where required by law, subpoena, lawful order, or to establish or defend legal claims.
A buyer or successor — if the business is sold or reorganised, subject to the same protections described here.

5. Cross-Border Processing

Our site runs on Cloudflare's global network, and our processors may store or process data on servers outside the Philippines. Where that happens we remain accountable for the data under the Data Privacy Act, and we use providers that commit contractually to a comparable level of protection.

6. How Long We Keep It

Data	Retention
Order, invoice and payment records	Ten (10) years from the close of the taxable year, in line with BIR record-keeping requirements
Customer support and enquiry messages	Two (2) years from last contact
Wholesale enquiries not converted to an order	Two (2) years from submission
Marketing consent records	Until you unsubscribe, plus two (2) years to evidence the consent
Technical and security logs	Up to twelve (12) months

When a retention period ends we delete the data or irreversibly anonymise it.

7. Your Rights as a Data Subject

Under RA 10173 you have the right to:

Be informed — know that your data is being processed, and why.
Access — obtain a copy of the personal data we hold about you.
Object — to processing based on legitimate interests, and to direct marketing at any time.
Rectification — have inaccurate or incomplete data corrected.
Erasure or blocking — have data removed where it is incomplete, outdated, false, unlawfully obtained, or no longer necessary.
Data portability — receive your data in a structured, commonly used electronic format.
Damages — be indemnified for damage arising from inaccurate, incomplete, outdated, false or unlawfully obtained data.
File a complaint — with the National Privacy Commission.

To exercise any of these, email info@wedontaddvalue.com with enough detail for us to identify you and your request. We respond within fifteen (15) working days, or tell you within that period if we need longer and why. We may ask you to verify your identity before releasing data — this protects you, not us.

Some rights are qualified. We may, for example, decline to erase order records we are legally required to keep for tax purposes; we will explain if that applies.

8. How We Protect It

All traffic to this site is encrypted in transit with TLS.
Card and e-wallet credentials are captured entirely on PayMongo's hosted checkout. They never reach our servers, so there is no card data here to breach.
Order data sits in an access-controlled Cloudflare D1 database. Payment provider credentials are stored as encrypted secrets, never in source code.
Administrative endpoints require a separate secret token.
Access to personal data is limited to people who need it to do their job.

No system is perfectly secure. If a breach occurs that is likely to give rise to a real risk of serious harm, we will notify the National Privacy Commission and the affected data subjects within seventy-two (72) hours of knowledge of the breach, as required by the Data Privacy Act.

9. Cookies and Local Storage

We keep this deliberately minimal. We do not use advertising cookies, and we do not run third-party analytics or tracking pixels.

What	Type	Purpose
`nav_cart`	Browser local storage — not a cookie, never sent to us automatically	Remembers your cart between visits on your own device
Cloudflare security cookies	Strictly necessary	Bot filtering and protection of the site and checkout

You can clear local storage and cookies in your browser settings at any time. Clearing them empties your cart, which is the only consequence.

10. Third-Party Links

Our site links to our social media profiles and redirects to PayMongo for payment. Once you are on someone else's site, their privacy policy governs. We are not responsible for how they handle your data.

11. Complaints

If you are unhappy with how we have handled your data, contact our Data Protection Officer first at info@wedontaddvalue.com. If you are still not satisfied, you may complain to:

National Privacy Commission
5th Floor, Philippine International Convention Center, Vicente Sotto Avenue, Pasay City, Metro Manila 1307
complaints@privacy.gov.ph • privacy.gov.ph

12. Changes to This Policy

We update this policy when our processing changes. The effective date at the top of this page always reflects the current version. Material changes are announced on this page, and where the change concerns processing based on your consent, we will ask for consent again.

Contact for This Policy

We Dont Add Value, trading as NO ADDED VALUE
[[REGISTERED_ADDRESS_LINE_1]], [[CITY_MUNICIPALITY]], [[PROVINCE]] [[POSTAL_CODE]], Philippines
Email: info@wedontaddvalue.com • Mobile: [[SUPPORT_MOBILE_+63XXXXXXXXXX]]

Version effective 18 September 2026. Full business registration details are published on our business profile.