Privacy notice
This notice explains, in plain language, what personal information we collect, why, how long we keep it and how to ask us to delete it. It is written for the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
What we collect
- Your review: star ratings, title, text, what you bought, order month, and the display name and city you choose to show. This is published if approved.
- Optional contact details: a WhatsApp or Viber number, or an email address. Never published.
- Optional proof of purchase: a receipt, chat screenshot or label photo. Never published. Images are re-encoded when uploaded, which removes hidden data such as location (GPS) and camera details.
- A hashed IP address: we store a one-way, salted hash of your IP address, not the address itself.
- A device cookie: a random ID stored in a first-party cookie for one year, so we can spot many reviews sent from one device.
- Hashed contact: a one-way, salted hash of your phone number or email, so we can detect duplicate reviews after your contact details are erased.
- Listing claims and supplier replies: the name, email, phone and role a business gives us, and the reply text it submits.
We don't use advertising trackers or sell personal information.
Why we collect it
- To publish reviews and supplier replies that you choose to submit.
- To check proof of purchase and award the Verified buyer badge, which may mean messaging you.
- To prevent fake reviews, spam and abuse, using the hashed IP, device cookie and hashed contact.
- To handle reports, listing claims and requests about your data.
Our lawful bases are your consent when you submit a review or claim, and our legitimate interest in keeping reviews genuine and the site free of abuse.
How long we keep it
- Proof files: deleted when a moderator makes a decision, or 30 days after upload, whichever comes first.
- Contact details: erased 30 days after a decision on your review.
- Hashes (IP, contact) and the device ID are kept for abuse prevention for as long as the review exists.
- Published reviews stay up until you ask us to remove them or we unpublish them.
Who can see it
Only the site moderator can see contact details and proof. We never share them with suppliers. Our service providers (hosting on Vercel, database and file storage on Supabase, and email delivery if enabled) process data on our behalf, and may store it outside the Philippines.
Your rights
Under the Data Privacy Act you can ask to access, correct or delete your personal information, object to its processing, and withdraw consent. To delete or change a review, email privacy@peptidereviewsphilippines.com with the supplier name and roughly when you submitted it. We may ask you to confirm from the same WhatsApp number or email you used. We aim to reply within 15 days. You can also complain to the National Privacy Commission (privacy.gov.ph).
Cookies
We use one first-party cookie for the device ID described above, and one more for the site administrator's login. We don't use analytics or advertising cookies.