Privacy Policy

1Who we are

Pop Asia Retail Corp. (“PopLife”, “we”, “us”, “our”) operates the online store at poplifeph.com (the “Store”), where we sell vinyl collectible figures and related merchandise for delivery within the Philippines.

We are the personal information controller for the personal data collected through the Store, as that term is used in the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

This Privacy Policy explains what personal data we collect, why we collect it, how we keep it, and the choices you have. By using the Store you acknowledge that you have read this Policy.

2Information we collect

We collect only what we need to run the Store and fulfil your orders. Depending on how you use the Store, this includes:

We do not collect card numbers, bank passwords, e-wallet PINs or one-time passwords. Please never send these to us. Nothing is charged through the Store itself; payment is made outside the Store to the accounts shown on your order confirmation.

We do not knowingly collect personal data from anyone under 18 years of age. If you believe a minor has provided us with personal data, contact us and we will delete it.

3How we use your information

We use your personal data for the following purposes and on the following legal bases:

We do not sell your personal data, and we do not use it for automated decision-making that has legal or similarly significant effects on you.

4Payment information

Orders are placed first and paid for afterwards. When you choose Bank transfer, GCash or Maya, you are shown our account details and asked to upload a proof of payment. We review that image only to confirm that your payment was received and to match it to your order. Rejected or expired uploads are kept only as long as needed to resolve the order.

Cash on Delivery orders are paid to the courier at the door. The courier receives only the information needed to deliver and collect: your name, address, mobile number and the amount due.

5Who we share your information with

We share personal data only with parties who help us run the Store, and only what they need:

• Delivery couriers — name, address, mobile number and, for Cash on Delivery, the amount to collect.
• Hosting and database providers — the Store is hosted on Vercel and its data is stored with Supabase. These providers process data on our behalf under their own security commitments and may store data on servers outside the Philippines.
• Email delivery providers — to send order confirmations, payment reminders and, if you subscribed, newsletters.
• Professional advisers and authorities — accountants, lawyers, courts, regulators or law enforcement where the law requires it or where it is necessary to protect our rights or the safety of others.
• A successor business — if the Store or the company is sold, merged or reorganised, your data may be transferred as part of that transaction under the same protections.

Where data leaves the Philippines, we rely on the provider’s contractual commitments to protect it to a standard consistent with Philippine law.

6How long we keep your information

Data that is no longer needed is deleted or anonymised so that it can no longer identify you.

7How we protect your information

We use reasonable organisational, physical and technical measures to protect your personal data, including encrypted connections (HTTPS) across the Store, database access rules that limit each record to the people who need it, authenticated admin access, and staff access limited to those handling orders and support.

No method of transmission or storage is completely secure. If we become aware of a personal data breach that is likely to cause you real risk of serious harm, we will notify the National Privacy Commission and the affected customers within the period required by law.

8Cookies and local storage

The Store uses your browser’s local storage, rather than tracking cookies, to remember your cart, your chosen category filter, and your checkout details between visits. This information stays on your device and is not sent to advertisers.

Our hosting provider may set strictly necessary cookies needed for the Store to load and stay secure. We do not currently run third-party advertising cookies. If we add analytics or advertising tools in the future, we will update this Policy and, where required, ask for your consent first.

You can clear local storage and cookies at any time through your browser settings. Doing so will empty your cart.

9Your rights

Under the Data Privacy Act you have the right to:

• Be informed about how your personal data is processed, which this Policy is intended to do.
• Access the personal data we hold about you and receive a copy in a portable format.
• Correct inaccurate or incomplete data, for example an address or mobile number.
• Object to processing, including direct marketing, and to withdraw consent to the newsletter at any time using the unsubscribe link in any email or by contacting us.
• Erasure or blocking of your data where it is no longer needed, was unlawfully obtained, or you have withdrawn consent, subject to the record-keeping obligations in Section 6.
• Damages for any harm caused by inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorised use of your personal data.
• Lodge a complaint with the National Privacy Commission (privacy.gov.ph) if you believe we have mishandled your data.

To exercise any of these rights, email us at the address in Section 11. We may ask you to verify your identity before we act on a request. We will respond within 15 working days, or tell you if we need more time.

10Changes to this Policy

We may update this Policy from time to time to reflect changes in the Store, in our providers, or in the law. The “Last updated” date at the top shows when it was last revised. Material changes will be announced on the Store before they take effect. Continued use of the Store after that date means you accept the updated Policy.

11Contact us

Questions, requests and complaints about this Policy or your personal data can be sent to our Data Protection Officer at: