Privacy Notice
Version 2026-10-19 · How OrderPal collects, uses, shares and protects personal information, and the rights you have over it.
1. Who we are
OrderPal is an online service that helps Philippine online sellers manage orders, live selling, stock, packing and payments. It is operated by OrderPal, Philippines ("OrderPal", "we", "us").
2. Our two roles
We decide (personal information controller)
For seller accounts, team members, billing, support requests and people who contact our sales team, we decide why and how the information is used. This notice explains that use.
The seller decides (we process for them)
For buyers' information that a seller records in OrderPal, the seller is the controller and OrderPal is their personal information processor. We use it only to run the service for that seller. Buyers should contact the seller first; we will help the seller answer.
3. What we collect
| Who | Information | Where it comes from |
|---|---|---|
| Sellers and team members | Name, email address and Google account ID; business name and logo; the bank and e-wallet account details you print on invoices; role in the business; the Terms version you accepted and when | You, and Google when you sign in with Google |
| Sign-in and devices | Device or browser name, sign-in and last-activity times, Owner PIN events (the PIN itself is stored only as a one-way hash) | Your device when you use OrderPal |
| Billing | Plan, amounts, payment references and status. Card and e-wallet details are entered on PayMongo's page, never on ours | You and PayMongo |
| Support and sales | Messages and screenshots you send us; name, business, email, mobile number and message from the Contact sales form | You |
| Buyers (for sellers) | Name, Facebook profile link, mobile number, shipping address, orders, payments, balances, parcel and delivery details, the seller's notes, and (if a buyer links a purchase account) their Google email | The seller, and the buyer when they use the purchase portal |
| Suppliers (for sellers) | Contact person, email, phone, address and notes | The seller |
We do not ask for sensitive personal information (such as government ID numbers, health, religion or political views). Sellers should not enter it in notes or other free-text fields.
Cookies: we use only cookies needed to keep you signed in and to protect forms from forgery. Your light/dark theme choice is kept in your browser. When the security check is on, Google reCAPTCHA sets its own cookies to tell people from bots (Google Privacy Policy). We do not use advertising or tracking cookies.
4. Why we use it, and on what basis
- To provide the service you signed up for: accounts, orders, invoices, packing, payments and support (contract, RA 10173 Sec. 12(b)).
- To keep OrderPal secure: device limits, sign-in checks, fraud and abuse prevention (legitimate interests, Sec. 12(f)).
- To bill and keep financial records as tax and accounting laws require (legal obligation, Sec. 12(c)).
- To reply to a Contact sales request and follow up on it (your consent, Sec. 12(a)). You can withdraw it at any time, and we never add you to marketing lists.
- Buyers' information is used only as the seller instructs, to fulfil that seller's orders.
We do not sell personal information, and we do not use buyers' information for our own marketing.
6. How long we keep it
- Account and business data: while the account is active. After an account is closed we delete or anonymize it, except records we must keep by law.
- Billing and payment records: for as long as tax and accounting laws require.
- Buyers' information: as long as the seller keeps it. Sellers can erase a buyer's personal details at any time, and can ask us to delete their business data when they leave.
- Contact sales requests: deleted automatically 2 years after we last update them once they're marked won or closed.
- Sign-in device records: deleted automatically 30 days after the device was last used.
- Support requests: while the account is active. They're deleted with the account.
7. How we protect it
Connections are encrypted (HTTPS). Each business's data is separated at the database level, so one seller cannot see another's. Payment keys are stored encrypted. Owner-only pages need an Owner PIN, and sellers can limit how many devices stay signed in. Only authorized OrderPal staff can open platform records, and only when needed.
If a personal data breach is likely to cause serious harm, we will notify the National Privacy Commission and the people affected within 72 hours of learning of it, as NPC rules require. If it involves buyers' data, we will also tell the seller without delay.
8. Your rights
Under the Data Privacy Act, you have the right to:
Signed in, open My privacy (Settings → My privacy for sellers, or the link at the bottom of My purchases for buyers) to download your data as JSON or CSV, ask us to delete your account, or send another request. Sellers can view and correct most of their information in Settings. You can also contact our Data Protection Officer below. We may ask you to confirm your identity first, and we aim to reply within 15 working days. Buyers: please contact the seller you bought from first; if you can't reach them, contact us and we will help.
If you think your rights were not respected, you may file a complaint with the National Privacy Commission.
9. Contact our Data Protection Officer
10. Children and changes to this notice
Seller accounts are for people 18 and older. When we change this notice we update the version date above; if the change matters for how your data is used, we'll tell you in the app before it takes effect. See also our Terms of Service.