Privacy policy

Momilo Mio Food Ventures Inc. is the personal information controller. We are a Philippine corporation with our kitchen at 323 Majestic St., Cainta, Rizal. You can reach us at info@momilomio.com or 0935 393 2213.

We collect the following categories of personal data, depending on how you interact with us:

• Contact form submissions. Your name, email address, optional phone number, and the content of your message.
• Newsletter sign-ups. Your email address.
• Shop orders. Your name, email address, phone number, delivery address, order contents, payment-method choice, and order notes. We do not store your full card or e-wallet credentials; those are handled by our payment processor.
• Reseller applications. Your full name, location, contact number, email address, business information, and starting budget.
• Messages you send us on social media. When you write to us on Facebook or Messenger, we keep your message and our reply. We sometimes quote a short part of a message on this website to show what customers say about our pastries. We publish the words only. We never publish the screenshot, your profile photo, your full name, your location, or a link to your account.
• Automatically collected technical data. Standard server logs (IP address, browser type, pages visited, timestamps) that our hosting provider keeps for security and operations.
• Future analytics. When we turn on web analytics in a later release, we will list the tools we use here and add a cookie banner so you can opt out.

We collect personal data on the legal bases that the Philippine Data Privacy Act allows:

• To perform a contract with you. Processing your order, delivering it, and providing customer service all require the data described in Section 2.
• Steps taken before a contract. When you send us a reseller application, we use the details in Section 2 to assess it, to have our Sales team contact you, and to set up your account if we go ahead.
• Consent. Newsletter subscriptions are optional and you can unsubscribe in one click.
• Legitimate interest. Security logging, fraud prevention, and improving how the site works are legitimate interests that do not override your rights.
• Legitimate interest in publishing customer feedback. We quote short parts of customer messages on our website so that other shoppers can read honest feedback in a customer's own words. We keep this narrow. We publish the words only, we do not publish photos or full names, and we remove a quote whenever the person who wrote it asks us to.
• Compliance with a legal obligation. Tax records, official receipts, and bookkeeping retention are required by Philippine law.

We share your data only with the parties we need to share it with, and only for the purposes listed in Section 3:

• PayMongo, our payment processor, when you pay for an order.
• Lalamove and Grab, our courier partners, when we dispatch your delivery. For a business-booked delivery through Lalamove, we share your name, mobile number, delivery address, and delivery notes with Lalamove to arrange and complete the delivery. The rider can see these details and may contact you directly.
• Our hosting and email-delivery providers, who help us run the site and send transactional messages.
• Government authorities, when a valid order, subpoena, or audit requires it under Philippine law.

We do not sell your personal data to third parties. We do not share it with advertisers.

We keep contact form messages and newsletter records for 24 months after your last interaction with us, then purge them automatically. Order records and supporting documents are kept for the period Philippine tax law requires (currently ten years for bookkeeping). Reseller application records are kept for 24 months from the date of application. Server logs are kept for 90 days for security review. Where we have published a short quote from a customer message, the quote stays on the site until the person who wrote it asks us to remove it. We keep the original message itself for 24 months after your last interaction with us, the same as any other message.

Under the Philippine Data Privacy Act, you have the right to:

• Be informed about how we process your data (this policy is part of how we tell you).
• Access the personal data we hold about you and ask for a copy.
• Correct inaccurate or outdated data.
• Erase or block your data when there is a valid ground to do so.
• Object to processing based on consent or legitimate interest.
• Data portability for data you provided to us electronically.
• Lodge a complaint with the National Privacy Commission (see Section 9).
• Be indemnified for damages caused by inaccurate, incomplete, outdated, or unlawfully processed data.
• Ask us to remove a quote. If we have published part of a message you sent us and you would rather we did not, tell us through our contact page and we will take it down. You do not need to give a reason, and we will remove it within five working days.

To exercise these rights, write to info@momilomio.com with your request. We will respond within the timeframes the Data Privacy Act requires.

The current version of the site does not set tracking or analytics cookies. We use only the strictly necessary session storage required to make the site work (for example, your cart contents while you check out). When we add analytics or marketing cookies in a future release, we will publish a cookie banner that lets you accept, reject, or choose categories before we set anything.

We are in the process of designating a Data Protection Officer under Section 11 of the Data Privacy Act's Implementing Rules and Regulations. Until the designation is final, please direct all data-protection questions to info@momilomio.com and we will route your request to the right person.

If you believe we have processed your personal data unlawfully, you can file a complaint with the National Privacy Commission. The Commission's contact details and complaint process are published at privacy.gov.ph. We ask that you write to us first at info@momilomio.com so we have the chance to fix the issue.

We may update this policy from time to time. When we do, we will change the effective date at the top of this page and post the new version. For material changes, we will also notify you by email if we have your address on file.

If you have a question about this policy or want to exercise any of your rights, write to us at info@momilomio.com or through our contact page.