Privacy Policy
This Privacy Policy explains how PasaloHub PH ("we", "us") collects, uses, shares, and protects your personal data when you use our marketplace for buying and selling Philippine MSME businesses, in line with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. It should be read together with our Terms & Conditions.
1Overview
We collect only the personal data we need to run the marketplace safely: to create your account, show and verify listings, let buyers and sellers message each other, confirm identity where that matters (e.g., for a Verified badge), and keep the Platform secure. We do not sell your personal data to third parties.
2What we collect
| Category | Examples |
|---|---|
| Account information | Name, email address, phone number, city, a short bio, and your chosen role (buyer/seller). |
| Identity & verification documents | A photo or scan of a government-issued ID, or business registration documents (DTI, SEC, BIR), submitted when you request verification or post a listing. |
| Listing content | Business descriptions, photos, financial summaries, and supporting documents you choose to upload — some of which are only shared with a buyer after they accept the relevant confidentiality terms. |
| Messages | Chat messages and file attachments you send to other users through the Platform. |
| Support & account requests | Messages you send us through the Help widget, including account-deletion or email-change requests. |
| Usage & device data | Log-in timestamps, pages viewed, browser type, and similar technical data used for security and to keep the Platform working correctly. |
3How we use it
- To provide the service — create and manage your account, show your listings, deliver messages, and process account changes you request.
- To verify identity and listings — review the documents you submit to confirm you are who you say you are and that you're authorized to list a business.
- To keep the Platform safe — detect fraud, investigate reports, enforce our Terms, and maintain audit logs of sensitive account and admin actions.
- To communicate with you — respond to support requests, send account-related emails (e.g., password reset, email verification), and, only where you have that preference enabled, notify you about new messages, listing updates, or platform announcements.
- To comply with the law — respond to valid legal requests and meet our recordkeeping obligations.
Our legal bases for processing are, depending on the activity: performing our contract with you (running your account and listings), our legitimate interest in keeping the Platform safe and functioning, your consent (for optional notifications), and compliance with legal obligations.
5Storage & security
Your data is stored on our infrastructure provider's servers with row-level security rules that restrict each account to its own data, and sensitive documents are kept in a private storage area accessible only through controlled, permission-checked access — never a public link. Passwords are hashed and are never visible to us in plain text. We take regular encrypted backups and restrict administrative access to authorized staff using multi-factor authentication. No system is completely secure, and we cannot guarantee absolute security, but we work to apply reasonable and appropriate safeguards for the sensitivity of the data we hold.
6Retention & deletion
We keep your data for as long as your account is active, and for a reasonable period afterward where needed for security, dispute resolution, audit, or legal compliance purposes (for example, admin action logs). You can request deletion of your account at any time from Settings > Account & Security > Delete Account; we aim to process deletion requests within 7 days. Some records may be retained briefly beyond that where we have a legal or safety reason to do so, after which they are permanently removed.
7Your rights under the Data Privacy Act
As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the right to:
- Be informed that your personal data will be, is being, or was processed, which this policy provides;
- Access your personal data that we hold;
- Correct inaccurate or outdated personal data (most profile fields can be edited directly in Settings);
- Object to certain processing, including direct marketing;
- Erase or block your personal data under certain conditions, including by requesting account deletion;
- Data portability — request a copy of your data in an electronic format, where technically feasible; and
- Lodge a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated.
To exercise any of these rights beyond what's available directly in Settings, contact us using the details in Section 12.
9Children's privacy
PasaloHub PH is intended for users 18 years of age or older and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us so we can remove it.
10Where data is processed
Our infrastructure providers may process and store data on servers located outside the Philippines, including elsewhere in the Asia-Pacific region. Where this happens, we rely on providers that maintain appropriate security and contractual safeguards for the data they process on our behalf.
11Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version with a new "Last updated" date, and for material changes we will make reasonable efforts to notify you directly. Continuing to use the Platform after a change takes effect means you accept the updated policy.
12Contact us
For any question about this policy or to exercise your data-privacy rights, contact us at support@pasalohubph.com, or use the Help button available throughout the Platform.