PalenquePH App Privacy Policy

Last Updated: 12 September 2026

This App Privacy Policy explains how PALENQUE PH OPC (“PalenquePH,” “Palenque,” “we,” “us,” or “our”) collects, uses, discloses, stores, protects, and otherwise processes personal data when you use the Palenque mobile applications and related app-based services.

This policy applies, as relevant, to the Palenque customer application, Vendor-related mobile functionality, Rider/Delivery Driver application, and other Palenque mobile services (collectively, the “Apps”).

This App Privacy Policy supplements the main PalenquePH Privacy Policy. Where this App Privacy Policy provides more specific information about mobile application processing, this App Privacy Policy applies to that processing, subject to applicable law.

PalenquePH processes personal data in accordance with Republic Act No. 10173, or the Data Privacy Act of 2012 (“DPA”), its Implementing Rules and Regulations, applicable issuances of the National Privacy Commission (“NPC”), and other applicable Philippine laws.

1. Personal Information Controller

For processing activities in which PalenquePH determines the purposes and means of processing, the Personal Information Controller is:

PALENQUE PH OPC
Level 21, Unit 2116-17, Park Triangle Corporate Plaza, North Tower
32nd Street corner 11th Avenue, Bonifacio Global City
Taguig City 1635, Philippines

Website: palenqueph.com
Support Email: support@palenqueph.com
Corporate/Privacy Contact: corporate@palenqueph.com

2. Information We May Collect Through the Apps

2.1 Customer and Account Information

Full name
Email address
Mobile number
Account username or identifiers
Delivery and billing address information
Login, authentication, and account-security information
Account preferences and settings
Communications submitted through or in connection with the Apps

2.2 Order and Transaction Information

Products ordered and order details
Vendor and fulfillment information
Order status, timestamps, substitutions, cancellations, refunds, and disputes
Delivery instructions and fulfillment records
Payment status, transaction identifiers, and payment confirmation information
Promotions, coupons, referral, wallet, or incentive information where applicable

2.3 Vendor Information

For Vendor applicants and approved Vendors, the Apps may process information such as:

Identity and contact information of the proprietor or authorized representative
Government-issued identification
Business name and registration information
DTI, SEC, CDA, BIR, LGU, permit, license, or other regulatory information as applicable
BIR Certificate of Registration or eCOR and related tax information where required
Store or business address and contact information
Business or storefront photographs where used for verification
Bank, GCash, or other approved payout information
KYC verification records
Transactions, payouts, complaints, refunds, and performance records

2.4 Rider Information

For Rider applicants and approved Riders, the Apps may process information such as:

Full name and contact information
Government-issued identification
Driver’s license information
Address and identity-verification information
Vehicle type, plate number, registration documentation, and related vehicle information
Selfie or identity-verification images where actually used in onboarding
Bank, GCash, or other approved payout information
Delivery acceptance, cancellation, completion, incident, complaint, and payment records
App, device, and location information where necessary for legitimate delivery functions

2.5 Device and Technical Information

Depending on the App and technologies used, we may process:

Device model and device type
Operating-system version
App version
IP address
Device or application identifiers
Login and security logs
Date, time, and App activity
Diagnostic, crash, performance, and security information
Network or connectivity information where technically necessary

2.6 Location Information

Where supported by the relevant App, device permissions, and actual service functionality, we may process precise or approximate location information.

Location information may be used for legitimate purposes such as delivery-address assistance, dispatch, pickup and delivery coordination, navigation, order tracking, customer support, fraud prevention, safety, and investigation of delivery incidents.

For Riders, location processing may occur while delivery-related functionality is being used or while an accepted delivery is in progress, depending on the actual App configuration and permissions granted.

PalenquePH will seek to limit location processing to what is reasonably necessary and proportionate to the relevant App function.

2.7 Uploaded Documents, Photos and Camera Information

Where an App allows document or image uploads, we may process photographs or files that you choose to submit, including KYC documents, identity images, vehicle or business documents, product photographs, proof of delivery, refund evidence, or other records necessary for legitimate Platform functions.

Camera access, photo-library access, or file access will be used only where supported by the App and subject to applicable device permissions.

2.8 Payment and Payout Information

The Apps may process payment or payout-related information such as transaction identifiers, payment status, settlement information, and approved payout-account details.

Depending on the payment flow, complete card, e-wallet, or other payment credentials may be collected and processed directly by an authorized third-party payment provider rather than stored directly by PalenquePH.

2.9 Support, Complaints and Communications

We may process support requests, chats, emails, complaints, refund requests, photographs, documents, incident reports, and other information you voluntarily provide in connection with the Apps.

2.10 Sensitive Personal Information

Certain identity, government-issued, financial, KYC, safety-incident, or other information may constitute sensitive personal information under Philippine law. Such information will be processed only where there is an appropriate lawful basis and subject to appropriate safeguards.

3. How We Collect Information

We may collect personal data:

Directly from you when you register, sign in, order, apply as a Vendor or Rider, submit documents, or contact support
Automatically through the Apps, devices, logs, SDKs, or similar technologies where actually implemented
From Vendors or Riders where necessary to fulfill or investigate an order
From payment providers and other service providers involved in a transaction
From public or official sources where lawful and reasonably necessary for verification or compliance
From other persons or organizations where authorized by you or permitted by law

4. How We Use App Information

We may process information collected through the Apps for purposes including:

Creating and administering accounts
Processing and facilitating marketplace orders
Connecting Customers, Vendors, and Riders as necessary for fulfillment
Processing and reconciling payments, refunds, payouts, and related transactions
Vendor and Rider KYC, identity, business, licensing, vehicle, tax, and compliance verification
Dispatch, pickup, navigation, delivery tracking, and delivery support
Customer support, complaints, disputes, refunds, and incident investigations
Fraud detection, abuse prevention, account security, and Platform integrity
Sending service, transaction, security, account, and policy notifications
Improving App functionality, reliability, safety, and performance
Maintaining legal, regulatory, tax, accounting, security, and transaction records
Enforcing agreements and policies
Establishing, exercising, or defending legal claims
Complying with applicable laws, regulations, regulatory requirements, and lawful government requests
Marketing or promotional communications where lawfully permitted and subject to applicable consent or opt-out requirements

5. Lawful Bases for Processing

Depending on the processing activity and category of personal data, PalenquePH may rely on one or more lawful bases permitted under the Data Privacy Act and other applicable Philippine laws, including consent where required, contractual necessity, compliance with legal obligations, protection of vitally important interests, and other lawful grounds recognized under applicable law.

Where sensitive personal information is processed, PalenquePH will rely on a ground permitted for such processing under applicable law.

This App Privacy Policy is a transparency notice and is not, by itself, a substitute for consent. Where consent is legally required, PalenquePH will obtain consent through an appropriate mechanism.

6. App Permissions

Depending on the App and features you use, the App may request access to certain device permissions, such as:

Location
Camera
Photos, media, or file storage
Notifications
Biometric or authentication features where supported
Other device functions reasonably necessary for an enabled App feature

Permissions should be requested only when relevant to the applicable feature. You may control many permissions through your device settings, although disabling a required permission may prevent the corresponding feature from functioning properly.

7. Location and Background Location

Certain delivery features may depend on location information, especially Rider dispatch, pickup, navigation, order tracking, safety, and delivery confirmation.

If background location is used by a Palenque App, PalenquePH will disclose that use through the applicable App permission flow, privacy notice, and app-store disclosure, and will limit such processing to legitimate and proportionate purposes.

PalenquePH should not represent that background location is collected unless the actual production App collects it.

8. How We Share App Information

We may disclose personal data where reasonably necessary, authorized, or permitted by law. Recipients or classes of recipients may include:

Vendors involved in fulfilling or resolving an order
Riders involved in pickup and delivery
Payment processors, banks, e-wallet providers, and financial-service providers
Hosting, cloud, app-development, marketplace, mapping, authentication, notification, communications, analytics, security, and support service providers
Professional advisers such as lawyers, accountants, auditors, insurers, or compliance advisers where appropriate
Government agencies, regulators, courts, law-enforcement authorities, or other public authorities where required or permitted by law
A successor or relevant party in a lawful merger, acquisition, restructuring, financing, sale, or transfer of all or part of the business

PalenquePH seeks to limit disclosed personal data to what is reasonably necessary for the relevant purpose.

Vendors and Riders must not use Customer personal data obtained through Palenque for unrelated marketing, sale, profiling, disclosure, or other unauthorized purposes.

9. Third-Party App Services and SDKs

The Apps may use third-party technologies or services for functions such as payments, maps and navigation, social login, authentication, push notifications, analytics, crash reporting, security, hosting, or customer support.

Where a third party processes personal data on PalenquePH’s behalf as a Personal Information Processor, PalenquePH will require appropriate privacy and security obligations as required by applicable law.

Some third parties may act as independent Personal Information Controllers for their own processing activities and may have their own privacy notices.

10. Push Notifications and Communications

The Apps may send transactional or service-related notifications concerning orders, deliveries, security, account activity, Vendor or Rider operations, and other Platform functions.

Promotional notifications will be sent only where permitted by law and subject to applicable consent or user-choice requirements.

Users can generally manage notification permissions through their device settings, although disabling notifications may affect timely receipt of important service information.

11. Security of App Data

PalenquePH implements and seeks to maintain reasonable and appropriate organizational, physical, and technical safeguards designed to protect personal data against accidental or unlawful destruction, alteration, loss, unauthorized access, disclosure, misuse, or other unlawful processing.

Appropriate measures may include access controls, authentication, role-based permissions, secure transmission mechanisms, logging, monitoring, backups, service-provider safeguards, confidentiality requirements, security updates, and incident-response procedures.

No mobile application or information system can be represented as completely risk-free, and PalenquePH does not guarantee absolute security.

12. Personal Data Breaches and Security Incidents

PalenquePH maintains procedures for assessing and responding to suspected personal data breaches and security incidents.

Where notification to affected data subjects and/or the National Privacy Commission is required under applicable law or NPC rules, PalenquePH will make the required notification in accordance with the applicable requirements.

13. Data Retention and Secure Disposal

PalenquePH retains App-related personal data only for as long as reasonably necessary for the declared and legitimate purposes for which it was collected, for legitimate business purposes consistent with applicable standards, for the establishment, exercise, or defense of legal claims, or for periods required or permitted by applicable law.

Different record categories may require different retention periods, including account, order, delivery, payment, payout, tax, KYC, complaint, fraud-prevention, security, and legal records.

When personal data is no longer required and there is no lawful basis for further retention, PalenquePH will securely delete, anonymize, destroy, or otherwise dispose of the information using measures appropriate to the record and medium.

14. International and Cloud Processing

Some cloud, hosting, app, mapping, authentication, notification, payment, analytics, or other service providers used by PalenquePH may process or store personal data using infrastructure located outside the Philippines.

Where cross-border or cloud processing occurs, PalenquePH will take reasonable steps to ensure that processing is subject to appropriate contractual, organizational, and technical safeguards consistent with applicable Philippine data-protection requirements.

15. Data Subject Rights

Subject to the conditions and limitations provided by applicable law, data subjects may exercise rights recognized under the Data Privacy Act and applicable NPC rules, including the right to:

Be informed about the processing of personal data
Object to certain processing
Access personal data concerning them
Request rectification of inaccurate or incomplete personal data
Request erasure or blocking where legally warranted
Data portability where applicable
Claim damages where legally warranted
File a complaint with the National Privacy Commission

These rights are not necessarily absolute and may be subject to lawful exceptions, verification requirements, record-retention obligations, unresolved transactions, legal claims, fraud or security considerations, or other limitations provided by law.

16. Exercising Your Privacy Rights

A data subject may submit a privacy request through PalenquePH’s designated privacy contact.

PalenquePH may request information reasonably necessary to verify the identity and authority of the person making the request before disclosing, correcting, deleting, exporting, or otherwise acting on personal data.

PalenquePH will assess and respond to valid requests in accordance with applicable law and NPC requirements.

17. Children and Minors

The Palenque Apps are not intended to enable minors to independently enter transactions where they lack legal capacity to do so.

Where PalenquePH processes personal data relating to a child or minor, it will apply applicable Philippine requirements concerning capacity, parental or guardian authority, consent where required, transparency, proportionality, and protection of the child’s interests.

18. Automated Processing and Fraud Prevention

PalenquePH may use automated tools, rules, or risk indicators to support fraud prevention, account security, transaction review, marketplace integrity, or operational functions where actually implemented.

Where automated processing or profiling is used in a manner requiring specific disclosure or safeguards under applicable law, PalenquePH will provide the required information and measures.

19. Relationship With the Main Privacy Policy

This App Privacy Policy should be read together with the main PalenquePH Privacy Policy. The main Privacy Policy contains broader information concerning PalenquePH’s privacy practices, while this App Privacy Policy provides additional information specific to mobile application use.

If there is a material inconsistency, PalenquePH will apply the provision that most accurately reflects the actual processing activity and applicable law, and will update its notices as necessary.

20. Changes to This App Privacy Policy

PalenquePH may update this App Privacy Policy to reflect changes in the Apps, processing activities, technologies, service providers, legal requirements, or privacy practices.

Where a change materially affects how personal data is processed, PalenquePH will provide appropriate notice through the App, registered email address, Platform, or another reasonable means as required by applicable law.

Where consent is the lawful basis for processing and a change requires new consent, PalenquePH will obtain the required consent rather than treating publication of an updated privacy policy as consent by itself.

21. Contact and Privacy Requests

For privacy questions, App privacy concerns, or requests to exercise data-subject rights: