Buy easily car parts and motorcycle parts in the Philippines
>
PIYESA.PH
Privacy Notice
Piyesa (referred to as "Piyesa", "we", "us" or "the Company"), located at Binugusan, San Agustin, Romblon, Philippines, operates an online marketplace for car parts and motorcycle parts. We value and respect your right to privacy and are committed to protecting your personal information. We will collect, record, store, process, and use personal data only in accordance with the Philippines’ Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, relevant issuances of the National Privacy Commission, and other applicable laws. In all instances, our processing of personal data adheres to the general privacy principles of transparency, legitimate purpose, and proportionality, as required by law.
This Privacy Notice explains what personal information we collect from our users and customers, how we use and share that information, and the measures we take to safeguard it. By using Piyesa’s services or website, you acknowledge that you have read and agree to the practices described in this Privacy Notice. If you do not agree with any part of this Notice, please discontinue use of our services. We may update this Privacy Notice from time to time to reflect changes in our practices or for legal compliance, and we will post any updates with a new effective date. We encourage you to review this Notice periodically.
1. Personal Information We Collect
We collect personal information that is necessary to provide you with our e-commerce services and to fulfill your orders on the Piyesa marketplace. The types of Personal Data we collect include:
Identity and Contact Information: Your full name, shipping and billing address, phone number, and email address (for account registration, order communication, and delivery purposes).
Order Details: Information about the products you purchase or inquire about, such as the car or motorcycle model/part details related to your order. This may include vehicle information (e.g., car make, model, year) to ensure you receive compatible parts.
Images and Attachments: Photographs of your vehicle or specific parts you may upload to assist with order fulfillment (for example, to help verify part compatibility).
Payment Information: Payment method details (such as transaction identifiers from our payment processor). (Piyesa does not directly collect or store sensitive financial information like credit card numbers on our servers; such data is handled securely by our authorized payment processors, as described below.)
Communication: Any personal details you provide when contacting our support (such as via email or chat), including the content of your inquiries or complaints and your contact details for responding.
We collect this information directly from you when you create an account, place an order, upload information on our website, or communicate with us (for example, when you fill out forms or send inquiries). All personal data you provide is given voluntarily by you; if you choose not to provide certain necessary information, we may not be able to process your order or provide the requested service.
Note: We do not knowingly collect personal data from children or minors. Our platform is intended for individuals 18 years of age or older. If you are under 18, please do not use Piyesa or provide any personal information. By using our services, you represent that you are at least 18 years old. If we learn that we have inadvertently collected personal data from someone under 18, we will take steps to delete such data.
2. How We Use Your Personal Information
Piyesa uses your personal information solely for legitimate and specified purposes related to our e-commerce services, primarily to process and fulfill your orders. We do not use your data for any purpose incompatible with these original purposes ("nothing else" beyond what is stated). Specifically, we use the collected data for:
Order Processing and Fulfillment: We use your name, address, and contact details to process your orders, arrange for product shipment/delivery, and deliver the car or motorcycle parts you purchase. Your contact number and email are used to send order confirmations, invoices, shipping updates, and delivery notifications. We also use your vehicle information (car model, etc.) and any photos you provide to ensure you receive the correct parts and to verify compatibility as part of fulfilling your order.
Payment Processing: We use necessary personal data to facilitate payments for your orders. For example, we pass your name and order amount (and, if required, contact or billing details) to our third-party payment processor to charge your selected payment method. This is done securely and only for order payment fulfillment purposes (more on third-party sharing below).
Communication and Customer Support: We use your contact information (email, phone) to communicate with you about your orders and to respond to your inquiries or requests. This includes sending you service-related communications such as order confirmations, shipping status updates, delivery confirmations, and responding to support tickets or questions you may have about our products and services. We may also contact you to assist with any issues in order fulfillment (for example, if a part is out of stock or if we need additional information about your vehicle to complete the order).
Account Management: If you create an account on Piyesa, we use your information to maintain and manage your account (e.g., to allow you to review past orders, save preferences, or manage addresses). This also helps us in providing after-sales support such as facilitating returns, refunds, or warranty claims (when applicable).
Legal Compliance and Record-Keeping: We may process and retain certain transaction information to comply with legal obligations such as tax and accounting requirements, or consumer protection laws. For instance, Philippine law may require retention of sales records for a certain period. We use your data to generate invoices/receipts and maintain records as mandated by applicable laws and regulations. We will only use and retain the minimum data necessary for these purposes and in accordance with the law's requirements.
Our use of your data is always anchored on a lawful basis. In most cases, processing your personal data is necessary to perform our contract with you – i.e., to deliver the products and services you have requested (fulfilling your order). In other cases, we rely on your consent (for example, if you voluntarily provide photos or additional information to assist with an order, that implies consent for us to use it for that purpose), or on compliance with a legal obligation (for record-keeping and reporting duties). We do not use your personal information for marketing purposes without your express consent, and currently Piyesa does not engage in any unsolicited marketing communications. Rest assured, we will not use your data for any new purpose that is not compatible with the purposes listed above without obtaining your consent or providing required notice.
3. Disclosure of Personal Data to Third Parties
Piyesa understands the importance of keeping your personal data private. We do not sell your personal information to third parties, and we only share your data with certain trusted third parties on a need-to-know basis and solely for the purposes of order fulfillment and operating our services. Any third-party that we share data with will be required to use your information only for the specific purpose we dictate and to protect it in accordance with applicable privacy laws. The parties with whom we may need to share your personal data are:
Payment Processors: We partner with secure payment processing companies to handle customer payments (for example, credit card processors or online payment gateways). Your essential information (such as name, order amount, and payment details) is shared with the payment processor to charge your chosen payment method and confirm payment. These third-party processors are themselves compliant with data security standards and are required to protect your data. Piyesa does not receive or store your sensitive financial information (like full credit card numbers) on our servers; such information is handled directly by the payment processor for your security.
Logistics and Delivery Partners: We share your name, contact number, and delivery address (and in some cases, order tracking number and order contents description) with third-party courier or shipping companies. This is necessary to ship and deliver your orders to you. Our logistics partners are given only the information required to pick up the items from sellers and deliver them safely to your designated address. They are not authorized to use your information for any other purpose.
SMS / Email Service Providers: We may use third-party communication services (such as an SMS gateway or email service) to send you order-related notifications. For example, your phone number may be used with an SMS gateway service to send a verification code, order confirmation or delivery update via text message. Similarly, your email address is used with our email service provider to deliver order receipts or support responses. These communications are all aimed at fulfilling your orders and improving your customer experience. The service providers are only allowed to use your contact details to send the specific messages we request; they cannot use your data for their own purposes.
Marketplace Sellers (as applicable): If Piyesa operates as a marketplace allowing third-party sellers, when you place an order, the seller of the product you purchased will receive your necessary order information (e.g., the product ordered, your first name and perhaps delivery location) to fulfill the order. We limit the information shared with sellers to what is needed for processing the transaction. Sellers must handle your information in accordance with our policies and applicable law, and they are not permitted to use it for other purposes (such as independent marketing) without your consent. (If Piyesa itself is the sole seller of products, this bullet may not apply.)
Legal Requirements and Protection: We may disclose personal information to government authorities, regulators, courts, or law enforcement if required by law or legal process, or if we believe in good faith that such disclosure is necessary to comply with a legal obligation (for example, responding to a subpoena or tax authority request), to enforce our Terms and Conditions, or to protect the rights, property, or safety of Piyesa, our users, or others. In all cases, we will ensure any request for data disclosure has valid legal authority before releasing information.
Aside from the parties above, we do not share your personal data with any other third parties for any purpose that is not related to providing you with our services. In particular, we do not share or divulge your information to outside companies for marketing or advertising purposes. We also do not transfer or disclose your data to any third party not involved in your transaction. If in the future we have to engage additional categories of recipients, we will update this Privacy Notice and obtain your consent where required.
Whenever we share your data with authorized third parties, we do so only to the extent necessary and in accordance with the law, and we implement appropriate safeguards to ensure your data is protected and handled securely. All service providers acting on our behalf are contractually obligated to keep your information confidential and to use it only for the specific services they provide to us. Piyesa remains responsible under the Data Privacy Act for the processing of your personal data by these partners (as our personal information processors), and we ensure that they also uphold the privacy standards required by law.
4. Data Storage, Security, and Retention
We take the security of your personal information seriously. Piyesa stores your data on secure servers located in the Philippines, under our direct control. We employ a range of organizational, physical, and technical security measures to safeguard the personal data we hold against unauthorized access, alteration, disclosure, or destruction. These measures include, for example, access controls to limit who in our organization can see your information, the use of secure protocols and encryption when transmitting sensitive information, regular security audits of our systems, and maintaining up-to-date firewall and protection systems to guard against external threats. Our staff are trained on the importance of protecting personal data, and they are bound by confidentiality obligations. While we strive to use commercially acceptable means to protect your personal data, please be aware that no method of transmission over the internet or electronic storage is 100% secure. Thus, we cannot guarantee absolute security, but we follow industry best practices and Philippine law requirements to provide a high level of protection.
Data Retention: We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Notice (e.g., to manage your orders and any post-order services), and as required or permitted by law. The Data Privacy Act and other Philippine laws may require us to keep certain transaction records for a minimum period. We adhere to those requirements and ensure that we do not keep personal data longer than needed. Storage shall be only for a period authorized by applicable law, and once that retention period is met or the data is no longer needed, we will securely dispose of your personal information. Physical documents containing personal data (if any) will be shredded or otherwise destroyed, and electronic files will be permanently deleted or anonymized so that you can no longer be identified from them. For example, order records will be archived and purged on a schedule in compliance with financial regulations and our internal data retention policy.
Until deletion, we continue to apply the same security measures to your stored data. If you have an account with Piyesa, certain personal information (like your name, contact details, and order history) will be kept as long as your account remains active so that we can provide you with your order history and facilitate future orders. You may request deletion of your account data as described in the Your Rights section below, and we will accommodate such requests in line with our legal obligations. Do note that even if you request deletion, we may retain some information for a limited time if required for legal reasons (for instance, we might retain a record of a transaction to comply with tax regulations, but we will keep only what is necessary and for no longer than mandated).
5. Your Rights as a Data Subject
As a user of Piyesa and as a data subject in the Philippines, you are entitled to certain rights regarding your personal data under the Data Privacy Act of 2012. We respect and uphold all your rights under Philippine data privacy laws, which include the following:
Right to Be Informed: You have the right to be informed about how your personal data will be collected, used, stored, and shared by Piyesa. This Privacy Notice is one of the ways we fulfill this right by providing you with information on our data processing activities.
Right to Access: You have the right to request and obtain a copy of the personal information we hold about you, as well as details on how your data has been processed. Upon your written request and after we verify your identity, we will provide you with the information we have about you, including the types of data, the purposes of processing, and the recipients to whom your data may have been disclosed.
Right to Rectification/Correction: If you believe that any personal data we have about you is inaccurate, outdated, or incomplete, you have the right to ask us to correct or update it. We encourage you to review your account information (if you have an account) to ensure it is accurate. You may contact us at any time to request correction of your details, and we will make the necessary updates promptly, provided the request is reasonable and supported by correct information.
Right to Object / Withdraw Consent: You have the right to object to the processing of your personal data in certain situations, or to withdraw any consent you have given. For example, if we were to process your data for direct marketing (which we currently do not), you could opt out at any time. In general, if you object to any processing that is based on your consent or our legitimate interest, we will reevaluate our processing of your data. If such processing is not required by law or necessary for the fulfillment of a contract (such as completing an ongoing order), we will cease processing your data as requested. You may also decline to share certain optional data or revoke permission for us to use any information you provided voluntarily; however, please note that objecting to certain processing (like use of essential details) might affect our ability to deliver services (for instance, we cannot fulfill an order without an address).
Right to Erasure (Right to Delete or "Right to Be Forgotten"): In certain circumstances, you have the right to request the deletion or removal of your personal data from our systems. You may exercise this right if, for example, the data is no longer necessary for the purposes it was collected, or if you withdraw consent and there is no other legal ground for us to keep processing it, or if you believe we have processed your data unlawfully. Upon a valid request, we will securely delete or anonymize your information, unless we are required to retain it by law. (As noted above, even after you request deletion, we may retain minimal information if required for legal compliance, but we will inform you of such retention if applicable.)
Right to Data Portability: For data that you have provided to us electronically, you have the right to request a copy of that information in a commonly used electronic format so that you can transmit it to another service provider, if technically feasible. In practice, this could mean we provide you with a structured file of the personal data you provided in your account profile and transaction history. This right applies to information processed by automated means, and to the extent required by law.
Right to File a Complaint: If you believe your data privacy rights have been violated, you have the right to lodge a complaint. You can contact us (see Contact Us section below) to raise any concerns or complaints and we will do our best to address them. Additionally, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines, the government agency tasked with enforcing data privacy laws. We encourage you to contact us first so we can try to resolve your concern, but you are entitled to seek assistance from the NPC at any time. The NPC's contact details and complaint procedures are available on their official website.
To exercise any of your rights, please reach out to us through the contact information provided below. We may need to verify your identity before fulfilling certain requests (for example, by asking you to confirm some details or provide identification), to ensure that we do not divulge data to the wrong person. We will respond to your requests and concerns as soon as reasonably possible and in accordance with the timelines provided by law. There is generally no fee for exercising your rights, though manifestly unfounded or excessive requests may be subject to a reasonable fee or refusal in line with the Data Privacy Act.
6. Cookies and Similar Technologies
Piyesa uses cookies and similar technologies on our website, but only the essential ones necessary for our site's operation. Cookies are small text files stored on your device to help websites function or to provide certain features. On the Piyesa platform, the cookies we use are primarily to enable core functionalities such as:
Session Management: We use cookies to keep you logged in to your account (if applicable) and to maintain your shopping cart contents as you browse the site. These cookies are required for the website to remember your actions and selections (like items added to cart) as you navigate between pages.
Preferences and User Experience: A cookie may remember certain choices you make (e.g., your preferred language or region) to enhance your experience, so you don't have to re-enter information each time. We might also use cookies to ensure the website displays correctly on your device (such as remembering if you prefer a mobile or desktop view).
Security: We may use cookies or similar tools to help protect the security of your account and our site, for instance, by facilitating security features or detecting malicious activity.
Importantly, we do not use any non-essential cookies that would require your consent under applicable laws. This means we do not use cookies for advertising targeting, and we do not use third-party analytics cookies that track your behavior across other sites. Any analytics we perform is limited to aggregate traffic statistics that do not identify you personally, or it relies on server-side logs without using tracking cookies.
Because we only utilize essential cookies, your use of the website constitutes implied consent to these cookies as they are necessary for providing the service you requested. However, you still have the ability to manage cookies via your browser settings. You can set your browser to block or alert you about cookies, including essential ones, but please note that if you disable all cookies, some parts of our site may not function properly (for example, you might not be able to log in or maintain a cart). For more information on managing cookies, you can refer to your browser's help documentation. By continuing to use our site, you agree that we can place these types of cookies on your device.
7. Contact Us
Piyesa is committed to addressing any questions or concerns you have about privacy and data protection. If you:
Have any questions or feedback about this Privacy Notice or our data practices,
Wish to access, correct, or delete your personal information, or exercise any of your other data subject rights,
Need to report a possible data breach, or
Have a complaint or concern regarding how we handle your personal data,
please do not hesitate to contact us. You may reach our data protection team at:
Piyesa – Privacy Compliance Team
Address: Binugusan, San Agustin, Romblon, Philippines
Email: support@piyesa.ph (our official support and privacy contact email)
Address: Binugusan, San Agustin, Romblon, Philippines
Email: support@piyesa.ph (our official support and privacy contact email)
When contacting us to exercise your rights, kindly provide enough information for us to verify your identity and to locate your records (e.g., the email associated with your account or order number, and a description of your request). We value your privacy and will do our best to respond promptly to all legitimate inquiries.
8. Changes to this Privacy Notice
From time to time, we may update or revise this Privacy Notice to reflect any changes in our practices, technology, legal requirements, or for any other operational, legal, or regulatory reasons. When we make changes, we will post the updated Privacy Notice on our website and update the "Effective Date" at the top of the notice. If changes are significant, we may also notify you via email or through a prominent notice on our site before the change becomes effective, as required by law. We encourage you to review this Privacy Notice periodically to stay informed about how we are protecting the personal information we collect.
Your continued use of Piyesa's services after any modification to this Notice will signify your acceptance of the updated terms, to the extent permitted by law. If you do not agree with the changes, you have the right to stop using our services and may request us to remove your personal data as outlined above.
Consent and Acknowledgment: By using the Piyesa platform or by transacting with us, you signify that you have read this Privacy Notice and agree to the collection, use, and disclosure of your personal data as described herein. This Privacy Notice is issued in compliance with the Data Privacy Act of 2012 and its IRR, and it seeks to assure you that Piyesa is processing your personal information in accordance with the law and with utmost regard for your privacy rights. We are committed to safeguarding your personal data and utilizing it only for legitimate purposes in line with the principles of transparency, legitimate purpose, and proportionality. If you have any questions about this Notice, please contact us at support@piyesa.ph.