Welcome to The Polybrand

One account, every brand — tech, books, collectibles, and prints, all in one place.

Member pricing and exclusive vouchers across every brand
One-tap checkout with saved addresses
Track every order, from every store, in one place

Data Privacy & E-Commerce Compliance Framework

Your privacy matters to us.

Version 1.0 · Effective Date: August 14, 2026.

This Data Privacy & E-Commerce Compliance Framework establishes The Polybrand's commitment to lawful, transparent, fair, secure, and responsible digital commerce and personal-information processing in the Philippines.

It is designed to operate together with The Polybrand Privacy Policy, Terms & Conditions, Cookie & Tracking Policy, Internal Redress Mechanism, and applicable operational procedures.

Business Information

Registered Business Name: Polybrand Online Shop
Brand: The Polybrand
Business Address: B15 L11 Jade Rd. Monte Claro Homes, Sabang, 4217 Lipa City, Batangas, Philippines
Customer Support Email: help@thepolybrand.com
Customer Service Phone: 0945 996 2515
Website: thepolybrand.com

Data Privacy Principles

Transparency. Customers are provided clear and accessible information about how personal information is collected, used, stored, shared, and protected.

Legitimate Purpose. Personal information is processed for declared, specified, and legitimate purposes.

Proportionality. Only personal information reasonably necessary for the relevant purpose is collected and processed.

Data Quality. Reasonable measures are applied to keep personal information accurate and suitable for its intended purpose.

Security. Reasonable and appropriate organizational, physical, and technical safeguards are maintained based on the nature, scope, context, purpose, and risks of processing.

Accountability. Polybrand maintains policies, procedures, records, and controls supporting responsible personal-information processing.

Data Subject Rights. Polybrand provides practical channels for customers and other data subjects to exercise rights recognized by applicable Philippine law.

Responsible Retention. Personal information is retained only for legitimate, lawful, and necessary purposes and is securely disposed of when retention is no longer justified.

Personal Information We Handle

  • Account information: full name, email address, phone number, and password credentials maintained using secure password hashing
  • Customer profile information voluntarily added to an account, including date of birth and gender where applicable
  • Saved delivery information: recipient name, phone number, address lines, barangay, city, province, postal code, and country
  • Checkout and order information: customer identity and contact information, shipping information, order contents, payment method, and order notes
  • Payment verification information: payment/reference numbers and, for manual payments, proof of payment, payment method, amount, and transaction date
  • Security and authentication information: hashed session tokens, IP addresses, and user-agent information
  • Newsletter information: email address and signup source
  • Customer-support information: name, contact details, inquiry type, and message
  • Product-review information: name, rating, comment, and related product/order information
  • Technical and usage information processed through applicable analytics and technology services

Purposes & Lawful Processing

Polybrand processes personal information only where there is an applicable lawful basis and a declared purpose. Depending on the activity, processing may be necessary to perform a contract or take steps at the customer's request, comply with a legal obligation, pursue a legitimate interest that does not override applicable rights and freedoms, or rely on consent where consent is the appropriate legal basis.

  • Creating and managing customer accounts
  • Processing, confirming, fulfilling, shipping, and supporting orders
  • Verifying payments and reconciling transactions
  • Communicating with customers about transactions, delivery, account security, and customer service
  • Responding to complaints, requests, disputes, and regulatory inquiries
  • Maintaining website and system security and preventing fraud or unauthorized activity
  • Improving website performance and customer experience through appropriately configured analytics
  • Sending marketing communications where an appropriate lawful basis applies
  • Complying with applicable legal, accounting, tax, regulatory, and recordkeeping requirements

Customer Contact Information

Email address and phone number are used as necessary for account, order, delivery, customer-service, security, and issue-resolution purposes. Transactional communications are distinct from marketing communications. A customer providing contact information for an order is not thereby treated as having subscribed to promotional communications.

Payment Information

Polybrand uses applicable third-party payment infrastructure for supported electronic payments. Polybrand's own servers do not store raw payment-card numbers. Payment references and transaction information may be retained where necessary for transaction verification, reconciliation, customer support, accounting, legal compliance, dispute handling, and other lawful purposes.

For manual payment methods, customers may be asked to provide a transaction/reference number, proof of payment, payment method, amount, and transaction date. Customers are instructed not to submit passwords, PINs, OTPs, CVVs, or other authentication credentials.

Third-Party Service Providers

Polybrand may engage or use service providers and technology platforms necessary to operate its e-commerce business. These may include payment providers, hosting and email providers, analytics services, couriers, banks/payment institutions, and marketplace platforms.

  • PayMongo — QR PH payment processing
  • J&T Express and Shopee Express — delivery and logistics services, as applicable
  • BDO, Security Bank, Maya Bank, Maya, GCash, and other applicable payment institutions for supported payment methods
  • Shopee, Lazada, TikTok Shop, and other applicable marketplace channels

Polybrand evaluates relevant service relationships with consideration for the information processed, purpose, security measures, retention, deletion, subprocessors, international processing, contractual protections, and other appropriate privacy considerations.

Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights over your personal information:

  • Right to be informed
  • Right to access personal information
  • Right to correct inaccurate or incomplete information
  • Right to object to certain processing where applicable
  • Right to request erasure or blocking where applicable
  • Right to data portability where applicable
  • Right to withdraw consent where consent is the applicable basis
  • Right to lodge a privacy complaint
  • Other rights recognized by applicable Philippine law

Privacy requests may be submitted through help@thepolybrand.com, 0945 996 2515, or the request form below. Reasonable identity verification may be used before disclosing or changing personal information. You'll get a reference code to check status anytime, whether or not you have an account with us.

Data Export. Where you request access to or a copy of your personal information (request type "Portability" or "Access" above), Polybrand provides an appropriate request channel and may provide information in a structured and commonly usable format where technically feasible and legally appropriate.

Account Deletion & Data Requests

Polybrand provides a customer account deletion pathway, designed to include appropriate authentication, confirmation, explanation of consequences, identification of records that must or may lawfully be retained, deletion or anonymization of eligible information, session revocation, and completion recording. Some information may need to be retained longer where we have a legal obligation to keep it (e.g. an order still within its warranty or accounting-retention period) — if that applies, we'll explain why when we respond.

Already submitted one? Use the tracker above with your reference code — deletion requests use the same PR-###### system as other Privacy Requests.

Cookies, Local Storage & Analytics

The Polybrand customer storefront uses browser localStorage for functions such as cart and wishlist storage. Customer authentication uses a bearer-token mechanism rather than a customer session cookie generated by the storefront. The administrative environment may use session cookies for staff authentication.

Google Analytics may use cookies or similar technologies. Polybrand periodically reviews analytics configuration, data collection, retention, sharing, and international processing to support responsible privacy practices.

See the full Cookie & Tracking Policy for more detail.

Information Security

  • Customer passwords are protected using secure password hashing and are not stored in plain text
  • Authentication/session tokens are stored as hashes rather than raw session tokens
  • Sensitive internal product, order, and payment identifiers are protected before being exposed in URLs
  • Raw payment-card numbers are not stored on Polybrand's own servers
  • Access to personal information is limited according to legitimate business need and appropriate access-control principles
  • Administrative systems are managed separately from customer-facing functions
  • Security practices are reviewed and improved in proportion to operational risks and available safeguards

Security Incident & Breach Response

Polybrand maintains a structured response process for actual or suspected security incidents involving personal information. The process includes reporting, containment, preservation of relevant evidence, assessment, determination of notification requirements, notification where legally required, remediation, and documentation.

Where a reportable personal-data breach is subject to mandatory notification requirements, Polybrand will comply with applicable National Privacy Commission requirements and prescribed timelines.

Data Retention & Secure Disposal

Polybrand retains personal information only for lawful and legitimate purposes and for periods justified by the purpose of processing, applicable legal and accounting requirements, contractual needs, dispute resolution, security, fraud prevention, and other recognized lawful purposes. When information is no longer necessary and no lawful retention requirement applies, it will be securely deleted, destroyed, anonymized, or otherwise disposed of using appropriate safeguards.

Internal Consumer Redress

Polybrand maintains an accessible internal redress mechanism for consumer concerns involving products, orders, delivery, payment, refunds, customer service, and other transaction-related matters — including a formal complaint eligible for DTI redress.

  • Complaints may be submitted through help@thepolybrand.com, 0945 996 2515, and other official customer-service channels
  • Complaints are acknowledged within 24 hours under Polybrand's submitted internal redress mechanism
  • Complaints are investigated using relevant order, payment, shipping, communication, product, and supporting records
  • Polybrand aims to provide an appropriate resolution within seven (7) calendar days from acknowledgment, depending on the circumstances
  • Customers may escalate unresolved concerns through applicable DTI consumer-protection channels

This internal process does not prevent a consumer from exercising rights or remedies available under Philippine law. See the full Internal Redress Mechanism policy for the complete process, timelines, and escalation channels.

E-Commerce Transparency

Polybrand maintains accessible business and customer-service information and provides clear transaction information appropriate to its online retail activities. Product and service offers are presented with appropriate information such as product name/brand, price, description, and condition where applicable.

Polybrand provides appropriate electronic transaction documentation, invoices, receipts, order confirmations, and related records in accordance with applicable requirements and its operational systems.

Returns, Refunds & Transaction Fairness

Polybrand maintains clear customer-facing rules for returns, refunds, cancellations, defective or incorrect products, delivery concerns, and other applicable transaction remedies. These rules are applied consistently with applicable consumer-protection laws and the specific terms of the transaction — see the full Returns, Refunds & Cancellation Policy.

Privacy by Design

Before introducing material features or processing activities involving personal information, Polybrand considers the information collected, purpose, lawful basis, recipients, storage location, retention, minimization, security requirements, and privacy risks. Significant or higher-risk processing is evaluated for an appropriate Privacy Impact Assessment.

Records & Accountability

  • Data Processing Inventory / Records of Processing Activities
  • Privacy policy and notice versions
  • Data retention schedule
  • Vendor and service-provider register
  • Privacy request records
  • Security incident records
  • Privacy Impact Assessments where appropriate
  • Complaint and redress records
  • Consent records where applicable
  • Policy review and change history

Customer Privacy Contact

Customers and other data subjects may contact Polybrand regarding privacy questions, requests, concerns, or complaints through:

Email: help@thepolybrand.com
Phone: 0945 996 2515
Address: B15 L11 Jade Rd. Monte Claro Homes, Sabang, 4217 Lipa City, Batangas, Philippines

Contact Us

Customer Commitment

The Polybrand is committed to building a trustworthy Philippine e-commerce experience. Our privacy and compliance framework is intended to protect customer information, support transparent transactions, provide accessible remedies, and continuously improve our organizational, physical, and technical safeguards.

Document Control

Document: Data Privacy & E-Commerce Compliance Framework
Business: Polybrand Online Shop
Brand: The Polybrand
Version: 1.0
Effective Date: August 14, 2026
Review Frequency: At least annually and upon material legal, operational, or technology changes

This framework is to be read together with the applicable Polybrand public policies and internal procedures.