Privacy policy

Fishing Villa ("we", "us") runs this online shop and the stores listed on our stores page. This policy explains what personal information we collect through fishingvilla.ph and our blog, why, and what you can do about it. We handle personal information in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its rules.

Who we are

Fishing Villa, 2nd floor, 84 Malakas St, Brgy. Pinyahan, Diliman, Quezon City 1100, Philippines. For anything about your personal information, email [email protected] or call (02) 7001 8387.

What we collect

When you create an account or sign in: your name, email address, mobile number if you give it, and your password (stored only as a one-way hash we cannot read). If you sign in with Google or Facebook, we receive your name, email address and profile picture from them; we never see your Google or Facebook password.

When you order: what you buy, your delivery and billing addresses, mobile number, the delivery or pickup option you choose, and the payment method. For bank transfer, GCash and QR Ph we keep the receipt you upload (a screenshot or photo), which only our team can see. We do not collect or store card numbers.

When you chat with us: your name and mobile number (and email if you give it), your messages and any photos you send, the page you wrote from and the product or cart it was about. If you ask to be told when we reply, your browser gives us a notification address for that browser only.

When you comment on the blog: your name, email address (never shown) and comment.

When you browse: which pages are visited, where the visit came from, the type of device and browser, and an approximate location (country and city) worked out from the IP address. We use Rybbit for these visitor numbers; it works without cookies and does not store the IP address. We do not use advertising trackers.

Customers of our previous website: if you bought from us on fishingvilla.com, we brought over your name and contact details so your orders and account can continue here.

Why we use it

• To take, confirm and deliver your orders, including checking stock and quoting the delivery fee before you pay, and to check your payment.
• To email you about your order: confirmation, the total to pay, a payment reminder, shipping and tracking, and pickup.
• To answer you in the chat, by phone or by email.
• To run your account: saved addresses, order history and favourites.
• To keep the shop safe: accounts are required to order and contact details to chat so that we can tell genuine customers from fake orders.
• To keep records the law requires, such as sales records for tax.
• To understand which pages and products people look at, in totals, so we can improve the shop.

We do not send marketing emails unless you have asked for them, and we do not sell your information.

Who we share it with

Only with the people and services that help us run the shop, and only what each needs:

• Couriers and Lalamove (LBC, J&T, Lalamove): your name, delivery address, mobile number and parcel details, to deliver your order.
• Our banks and e-wallets (for example GCash) receive your payment; we only see what appears on your receipt.
• Brevo: sends our order and account emails.
• Hetzner (servers in Singapore) and Cloudflare (network and file storage): host the shop, its database and its photos.
• Rybbit: counts visits as described above.
• Google and Meta: only if you choose to sign in with them, or play a video embedded from YouTube or Facebook on the blog (those players are run by Google and Meta under their own policies).
• Authorities, when the law requires it.

Some of these services keep data outside the Philippines. We use providers that protect it to at least the standard this policy describes.

How long we keep it

• Orders, receipts and payment records: for as long as Philippine tax and accounting rules require us to keep sales records.
• Your account: until you close it. Closing it removes your profile and saved addresses; orders stay in our sales records as above.
• Chat conversations: up to two years after the last message, unless they relate to an order.
• Blog comments: until they are removed by us or at your request.
• Backups: our nightly database backups are deleted after 30 days.
• Visitor numbers: kept as totals that do not identify you.

Your rights

Under the Data Privacy Act you have the right to be informed about how your information is used, to see the information we hold about you, to have it corrected, to object to its use, to have it deleted or blocked, to receive a copy in a common format, and to complain. Email [email protected] from the address on your account (or tell us your order number) and we will reply within 15 days. If you are not satisfied, you can complain to the National Privacy Commission (privacy.gov.ph).

Delete your data

To delete your account and personal information:

1. Email [email protected] with the subject "Delete my data", from the email address on your account (or include your order number and mobile number so we can confirm it is you).
2. We delete your account, saved addresses, chat conversations and blog comments, and confirm by email within 15 days. Records of past orders that the law requires us to keep are kept until that period ends, and are then deleted.

If you signed in with Facebook, you can also remove our app in Facebook: Settings & privacy → Settings → Apps and websites → Fishing Villa → Remove. If you signed in with Google: myaccount.google.com/connections → Fishing Villa → Delete connections. Removing the app stops the sign-in; to delete what we hold, email us as above.

Cookies and storage on your device

We use only the cookies the shop needs to work, no advertising or tracking cookies:

• _medusa_cart_id: your cart (7 days).
• _medusa_jwt: keeps you signed in (7 days).
• _medusa_cache_id: lets the shop show you your own cart and account rather than someone else's.
• _medusa_signin_return: brings you back to checkout after signing in with Google or Facebook (15 minutes).
• _medusa_pending_customer: holds your details while you confirm a new account (1 day).
• _fv_chat: continues your chat on the same browser.
• _ohl_favourites: your favourites when you are not signed in.

Your browser may also keep small settings (such as a dismissed notice) on your device; these never leave it.

Children

The shop is meant for adults. If you are under 18, please shop with a parent or guardian.

Changes to this policy

When we change this policy we update the date at the top of this page. If a change matters for how we use your information, we will tell you by email or on the shop before it applies.