Who we are
MANDM Hardware & Construction Supplies operates this online store. For privacy questions or requests, email mandmhardware25@gmail.com.
Information we collect
Depending on how you use the store, we may collect your name, contact number, email address, delivery or project location, order and quotation details, messages, preferred contact channel, and files or pictures you choose to upload.
We also collect limited technical information for security and privacy-safe store analytics, such as device type, event time, country code, and pseudonymous visitor or source identifiers. We do not intentionally store full IP addresses in our store analytics.
Why we process your information
- To receive and fulfill orders, quotations, delivery requests, and project inquiries.
- To communicate with you, confirm prices, availability, payments, delivery, and project requirements.
- To provide private customer tracking, chat, and support.
- To secure the store, prevent fraud and abuse, and investigate incidents.
- To understand general store usage and improve products and services.
- To comply with applicable legal, accounting, and regulatory obligations.
Processing is based on your consent, steps requested by you before entering into a transaction, performance of a transaction, legal obligations, and legitimate business and security interests, as applicable.
Service providers and disclosure
We do not sell your personal information. We may use trusted service providers such as Cloudflare for website delivery and security, Supabase for database, authentication and storage, and approved email or AI providers when those features are enabled. These providers may process information in locations outside the Philippines under their own security and data-protection safeguards.
We may disclose information when required by law, to protect customers and the business, or with your direction—for example, when contacting you through your selected messaging channel.
Retention
We keep personal information only for as long as reasonably necessary for the stated purposes. As an operating guide, completed or cancelled orders and related records may be retained for up to two years, quotations and inactive chats for up to one year, raw privacy-safe analytics for up to 30 days, and security logs for up to 90 days, unless a longer period is required for an active transaction, dispute, fraud investigation, backup cycle, or legal and accounting obligation. Records are then deleted, anonymized, or securely archived as appropriate.
Security
We use HTTPS, access controls, private storage, database row-level security, admin allowlisting, request limits, monitoring, backups, and other reasonable organizational and technical safeguards. No online system is completely risk-free, so please do not send passwords, OTPs, card PINs, API keys, or unnecessary sensitive information.
Your rights
Subject to the Data Privacy Act of 2012 and applicable exceptions, you may ask to be informed about processing, access your personal data, correct inaccurate information, object or withdraw consent where applicable, request deletion or blocking, obtain data portability where applicable, and raise a complaint with the National Privacy Commission.
To make a request, email mandmhardware25@gmail.com. We may need to verify your identity and order or reference number before acting on a request.
Local storage and analytics
The store uses browser local or session storage to preserve your cart, private links, preferences, and a pseudonymous analytics identifier. Store views are generally counted once per browser session. Clearing browser data removes information stored only on that device.
Changes to this notice
We may update this notice when our services or legal obligations change. The effective date above will be updated when material changes are published.