Privacy policy

FadXShop is an online store operating in the Philippines. For the purposes of Republic Act No. 10173 (the Data Privacy Act of 2012), we are the personal information controller for the data described below.

Our Data Protection Officer is responsible for how personal data is handled here and is the person to contact about this policy, about the data we hold on you, or to exercise any of the rights below. Reach them at support@fadxshop.com.

If you are not satisfied with how we have handled a privacy concern, you may complain to the National Privacy Commission at privacy.gov.ph.

When you create an account. Your email address, and — if you provide them — your name, mobile number and default delivery address. If you set a password, we never see it: it is hashed by our authentication provider before it reaches us.

When you sign in with Google. We receive your name, email address, profile picture and Google account ID. That is the whole of it — we request only your basic profile and email, and we never receive your Google password or any access to Gmail, Drive, Contacts or any other Google service.

When you order. The items, the amount, and the delivery name, address and contact number you give us.

When you pay by QR and send a receipt. The screenshot itself, which is how we match your payment to your order. It is stored privately — no public link to it exists, and it is opened only by us, only to check a payment. We delete it once the order is settled and delivered; we do not need a copy of your receipt after that, and holding one would be keeping your name and number for no reason. Sending it is optional: your order is placed either way.

Automatically. The country your connection appears to come from, which we use once to decide which catalogue and currency to show you — you can change both, and the choice is stored in a cookie on your device. Your basket is also kept in your browser, not on our servers, until you check out.

How you use the shop. We record how pages are used — what was clicked, scrolled and typed into, and where a checkout was abandoned — using PostHog, an analytics service acting for us. It is how we find the steps that are confusing or broken. Everything you type is hidden before it leaves your browser, and the pages that show your address, phone number and saved details are excluded from the recording entirely. We do not use it to build a profile of you or to advertise.

We do not run advertising trackers, and we do not sell personal information to anyone.

To take and deliver your order, to let you sign in and see your order history, to answer you when you contact us about a delivery, and to keep the records that Philippine tax and consumer law require us to keep.

Only where it is needed to run the shop. Each of these receives the minimum required to do its part:

• Supabase — accounts, sign-in, our product catalogue and our order records. Holds your email, name, phone, address, and the contents, totals and delivery details of anything you order.
• PayMongo — card and e-wallet payments, where checkout offers them. Your card or e-wallet details go directly to them and never reach our servers; we receive only a reference and whether the payment succeeded.
• PostHog — recordings of how our pages are used, so we can find what is broken. Everything typed is hidden before it is sent, and the parts of a page showing your address, phone number or saved details are left out of the recording. If you are signed in, a recording is linked to your account so we can answer a question you raise about it.
• Nobody, for QR payments — where you pay by scanning a QR code, the transfer goes from your own bank or e-wallet app to our account. We are not given your account details and nothing is shared with a processor. Any receipt you send is stored with your order and shown to nobody outside the shop.
• Our overseas fulfilment partners — for items shipped from abroad, we pass your delivery name, address and contact number so the parcel can be sent to you. See the transfers section below.
• Couriers — the delivery company handling your parcel receives your name, address and contact number.
• Vercel — hosts this website and keeps short-lived technical logs, including IP addresses, for security and troubleshooting.

We also disclose information where the law requires it, or to establish or defend a legal claim.

Some of the services above process data abroad. Most importantly, when you order an item shipped from overseas, your delivery name, address and contact number are sent to the supplier who dispatches it — currently in China, and potentially elsewhere as we add suppliers. There is no way to fulfil an overseas order without this.

If you would rather your details did not leave the country, order only from the Philippines catalogue — you can switch to it using the region control at the top of any page, and every product page tells you where the item ships from.

Your account and its details, for as long as the account exists. Order records for at least ten years after the transaction, because Philippine tax rules require it — this applies even after you close your account, and it is the one thing we cannot delete on request.

The cookies that remember your region and currency expire on their own; you can clear them at any time in your browser.

Under the Data Privacy Act you may:

• ask what we hold about you, and get a copy of it;
• have anything inaccurate corrected;
• have your data erased or blocked, except the order records tax law obliges us to keep;
• object to how we are using it;
• receive your data in a portable format;
• be told promptly if a breach affects you, and claim damages if you are harmed by one.

Email support@fadxshop.com and we will answer within fifteen working days. If you are not satisfied, you may complain to the National Privacy Commission at privacy.gov.ph.

Traffic to this site is encrypted. Passwords are hashed and never stored in a readable form. Access to customer data is limited to the people running the shop. No system is perfect — if a breach ever affects you, we will tell you and the National Privacy Commission as the law requires.

This shop is not intended for anyone under 18. We do not knowingly collect information from children; if you believe we have, write to us and we will delete it.

If we change how we handle your information, we will update this page and the date at the top. Material changes will be announced on the site before they take effect.

See also our terms of service.