Privacy Policy

1. Interpretation and Definitions

1.1 Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

1.2 Definitions

For the purposes of this Privacy Policy:

• You means the individual accessing or using the Service, or the Bamboost App, or the legal entity on behalf of which such individual is accessing or using the Service, as applicable.
• Service Provider means any natural or legal person who processes the data on behalf of the Bamboost App. It refers to third-party companies or individuals employed by Bamboost PH to facilitate the Service, provide the Service on behalf of Bamboost PH, or assist in analyzing how the Service is used.
• Service refers to the Application.
• Users refers to a user who registers for an account with us for use of the Services, including both buyers and sellers.
• Personal Data refers to information about an individual who can be identified from that information, such as name, ID number, or contact details.
• Platform or Application means the Bamboost App downloaded by You on any electronic device.

2. When will Bamboost collect personal data

We will/may collect the following personal information about you:

• When you sign up for and/or use our Services or Platform.
• When you use our electronic services, interact with us through the Bamboost App, or use services on our Platform.
• When you grant permissions on your device to share information with our Platform.
• When you conduct transactions using our Services.
• When you provide us with feedback or complaints.
• When you provide us with your personal information for any reason.

3. Personal data we collect

To use Bamboost App we may collect data such as, but not limited to:

• First name
• Middle name
• Last name
• Sex
• Address/Location
• Geolocation
• Bank account and/or payment information
• Date of birth
• Photographs or Audio or Video recordings
• Email address
• Mobile number

For user validation, we may collect additional information:

• Government-issued ID for due diligence, KYC, identity verification, or fraud prevention.
• Any of the following documents:
  • Business Permit
  • Barangay Certificate
  • Cedula
  • Certificate of Membership from people’s organization

4. How do we use your personal data

We collect, process, and store your data on Bamboost database (AWS RDS) for the following purposes:

1. To manage your account that you may have set up with us.
2. To facilitate your use of the Services (the buying and selling) with Bamboost App.
   • To process orders you submit through the Platform.
   • To deliver the products you have purchased. We may share your personal information with logistics partners to deliver products.
   • To update you on delivery status.
   • To verify and carry out payment transactions through payment service providers.
   • To ship or deliver products you listed or sold.
   • To verify documents you submitted for onboarding as a seller.
3. To provide you the nearest bamboo selling stores, directions, and to improve customer experience using geolocation.
4. To produce statistics and research for compliance with reporting obligations to government authorities.
5. To process complaints, feedback, enforcement action, and take-down requests in relation to content you have uploaded.

5. To whom do we share your personal data

Your data is accessed and used by a small group of Bamboost PH employees. These employees are required to protect your data and uphold your privacy rights. Bamboost PH may share data with government authorities under legal obligations.

• Service Providers – may have access to your personal data to provide services on our behalf.
• Syntactics, Inc. – provides API subscription services.
• Prince Technologies Corporation – provides AWS cloud hosting services.

We may also use third-party services:

• Google Maps – collects location info to provide location-based services. See Google Privacy Policy.
• Mailgun – email delivery service. See Mailgun Privacy Policy.
• Semaphore – SMS OTP service. See Semaphore Privacy Policy.

International Data Transfer – your data may be processed in Singapore (AWS servers) under the Philippine Cloud First Policy.

6. Security and storage measures

We use secure servers, firewalls, encryption, and SSL to protect your information. Only authorized employees can access data. However, no system can guarantee absolute security.

7. Personal data retention and destruction

Data destruction and disposal are done in accordance with the NAP General Guidelines. Digital copies stored in MariaDB MySQL are destroyed securely after 5 years.

8. Rights of Data Subject

As a data subject, you are entitled to rights under Republic Act 10173 (Data Privacy Act of 2012):

1. Right to be Informed – notified of your rights and data use.
2. Right to Object – you may request deletion of your data.
3. Right to Access – obtain a copy of your data held by us.
4. Right to Rectify – request correction of inaccurate data (with valid ID).
5. Right to Erasure or Blocking – suspend, withdraw, or order deletion of your data.
6. Right to File a Complaint – with Bamboost PH and the National Privacy Commission.
7. Right to the Payment of Damages – compensation for misuse or unauthorized use of your data.

9. Changes to our privacy policy

We may update this Privacy Policy from time to time. Changes will be posted here and notified via email or app notices. Please review this page periodically.

10. Questions, concerns or complaints? Contact Us

If you have any questions or concerns, contact us at support@bamboost.ph.