Privacy Policy

Last Updated: 12 September 2026

PALENQUE PH OPC (“PalenquePH,” “Palenque,” “we,” “us,” or “our”) respects your privacy and is committed to processing personal data responsibly and in accordance with Republic Act No. 10173, or the Data Privacy Act of 2012 (“DPA”), its Implementing Rules and Regulations, applicable issuances of the National Privacy Commission (“NPC”), and other applicable Philippine laws.

This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process personal data in connection with the Palenque website, customer application, Vendor services, Rider/Delivery Driver application, marketplace transactions, support channels, and related services (collectively, the “Platform”).

This Policy applies, as relevant, to Customers, prospective and approved Vendors, prospective and approved Riders, website and app users, persons communicating with us, and other individuals whose personal data we process through the Platform.

1. Personal Information Controller

For processing activities in which PalenquePH determines the purposes and means of processing, the Personal Information Controller is:

PALENQUE PH OPC
Level 21, Unit 2116-17, Park Triangle Corporate Plaza, North Tower
32nd Street corner 11th Avenue, Bonifacio Global City
Taguig City 1635, Philippines

Website: palenqueph.com
Support Email: support@palenqueph.com
Corporate/Privacy Contact: corporate@palenqueph.com

Depending on a particular transaction, Vendors or other parties may independently determine the purposes and means of some processing activities and may therefore have their own obligations as Personal Information Controllers.

Where a party processes personal data solely on documented instructions of another Personal Information Controller, its role may instead be that of a Personal Information Processor, depending on the actual arrangement and applicable law.

2. Categories of Personal Data We May Collect

The personal data we process depends on how you interact with PalenquePH.

a. Customer and Account Information

Full name
Email address
Mobile number
Account username or identifiers
Delivery and billing address information
Login, authentication, and account-security information
Customer preferences and account settings
Communications with PalenquePH, Vendors, or Riders where processed through or for the Platform

b. Order and Transaction Information

Products ordered and order details
Vendor and fulfillment information
Order status, timestamps, substitutions, cancellations, refunds, and disputes
Delivery instructions and fulfillment records
Payment status, transaction identifiers, and payment confirmation information
Promotions, coupons, wallet, or referral information where applicable

c. Vendor Information

Proprietor, representative, or authorized-person identity and contact details
Government-issued identification
Business name and legal or business registration information
DTI, SEC, CDA, BIR, LGU, permit, license, or other regulatory information as applicable
BIR Certificate of Registration or eCOR and tax information required for marketplace compliance
Store or business address, photographs, and contact details
Product and store information
Bank, GCash, or other approved payout-account information
KYC verification information
Transaction, payout, refund, complaint, and performance records
Other information reasonably required for Vendor onboarding, marketplace operations, fraud prevention, or legal compliance

d. Rider Information

Full name and contact information
Government-issued identification
Driver’s license information
Address and identity-verification information
Vehicle type, plate number, registration documentation, and other vehicle information where applicable
Selfie or identity-verification images where used in the actual onboarding process
Bank, GCash, or other approved payout information
Delivery, acceptance, cancellation, incident, complaint, and payment records
Device and app information
Location information where reasonably necessary for delivery and related legitimate Platform functions

e. Device, Technical and Usage Information

IP address
Browser and device type
Operating system and app version
Device or application identifiers
Login and security logs
Date, time, and Platform activity
Cookie or similar technology information where applicable
Diagnostic, crash, security, or performance information

f. Location Information

Where relevant to delivery services and supported by applicable device permissions and Platform functionality, we may process precise or approximate location information for purposes such as dispatch, pickup and delivery coordination, navigation, order tracking, fraud prevention, safety, support, and investigation of delivery incidents.

The extent and timing of location processing shall correspond to the actual functionality of the relevant Palenque application and applicable device permissions.

g. Support, Complaints and Communications

We may process emails, support requests, complaints, refund requests, photographs, documents, chat records, call-related information where applicable, and other information you voluntarily provide when communicating with us.

h. Sensitive Personal Information

Some KYC, identification, government-issued, financial, health or safety incident, or other information may constitute sensitive personal information under applicable law.

We process such information only where there is an appropriate lawful basis and subject to appropriate safeguards.

3. How We Collect Personal Data

We may collect personal data:

Directly from you when you register, place an order, apply as a Vendor or Rider, contact support, submit documents, or otherwise use the Platform
Automatically through the website, applications, devices, logs, cookies, or similar technologies where applicable
From Vendors or Riders where necessary to fulfill or investigate a transaction
From payment providers and other service providers involved in a transaction
From public or official sources where lawful and reasonably necessary for verification or compliance
From other persons or organizations where authorized by you or permitted by law

4. How We Use Personal Data

We may process personal data for legitimate and specified purposes including:

Creating and administering accounts
Processing and facilitating marketplace orders
Connecting Customers, Vendors, and Riders as necessary for fulfillment
Processing, confirming, reconciling, refunding, and investigating payments and transactions
Vendor and Rider identity, KYC, business, licensing, tax, and compliance verification
Pickup, delivery, dispatch, navigation, tracking, and delivery support
Customer service, complaints, refunds, disputes, and incident investigations
Fraud detection, prevention, account security, abuse prevention, and Platform integrity
Maintaining transaction, tax, accounting, legal, and compliance records
Communicating service, transaction, security, policy, and account notices
Improving Platform functionality, reliability, safety, and user experience
Analytics and measurement where lawfully implemented
Marketing or promotional communications where permitted by law
Enforcing agreements and policies
Establishing, exercising, or defending legal claims
Complying with applicable laws, regulations, lawful government requests, and regulatory obligations

We shall not process personal data in a manner incompatible with the declared, specified, and legitimate purposes unless permitted by applicable law.

5. Lawful Bases for Processing

Depending on the processing activity and category of personal data, PalenquePH may rely on one or more lawful bases permitted under the Data Privacy Act and applicable law, including:

Your consent, where consent is required
Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract
Compliance with a legal obligation applicable to PalenquePH
Protection of vitally important interests where applicable
Processing permitted for public order, safety, emergency, or public-authority purposes where provided by law
Other lawful grounds recognized under applicable Philippine privacy law

Where processing involves sensitive personal information, PalenquePH will rely on a ground permitted for such processing under applicable law.

This Privacy Policy is a transparency notice and is not, by itself, a substitute for consent. Where consent is legally required, PalenquePH will obtain consent through an appropriate mechanism.

6. How We Share Personal Data

We may disclose personal data where reasonably necessary, authorized, or permitted by law.

Recipients or classes of recipients may include:

Vendors involved in fulfilling or resolving your order
Riders involved in pickup or delivery
Payment processors, banks, e-wallet providers, and financial-service providers
Hosting, cloud, website, application, communications, authentication, security, analytics, customer-support, and other technology or service providers
Professional advisers such as lawyers, accountants, auditors, insurers, or compliance advisers where appropriate
Government agencies, regulators, courts, law-enforcement authorities, or public authorities where required or permitted by law
A successor or relevant party in a lawful merger, acquisition, restructuring, financing, sale, or transfer of all or part of the business

We seek to limit disclosed personal data to what is reasonably necessary for the relevant purpose.

Vendors and Riders must not use Customer personal data obtained through Palenque for unrelated marketing, sale, profiling, disclosure, or other unauthorized purposes.

7. Third-Party Service Providers and Platforms

PalenquePH uses or may use third-party providers to operate portions of the Platform, including hosting, e-commerce, marketplace functionality, payment processing, communications, mapping, authentication, analytics, security, notifications, and application services.

Where a third party processes personal data on PalenquePH’s behalf as a Personal Information Processor, PalenquePH will require appropriate privacy and security obligations as required by applicable law.

Some third parties may act as independent Personal Information Controllers for their own processing activities. Their processing may also be governed by their own privacy notices.

8. Payment Information

Payments may be processed through third-party payment providers. PalenquePH may receive transaction identifiers, payment status, payment method information, settlement information, and other information necessary to administer the transaction.

Depending on the payment method, card or e-wallet information may be collected or processed directly by an authorized payment provider rather than stored directly by PalenquePH.

Payment providers may independently process personal data according to their own privacy notices and legal obligations.

9. Cookies, Analytics and Similar Technologies

The Palenque website and applications may use cookies, SDKs, pixels, local storage, analytics technologies, or similar tools where actually implemented.

These technologies may support essential functionality, authentication, security, preferences, analytics, performance measurement, or advertising and marketing functions.

Where consent or another user choice is required for non-essential technologies, PalenquePH will provide the applicable notice and choice mechanism as required by law.

10. Marketing Communications

Where permitted by applicable law, PalenquePH may send promotional or marketing communications based on an appropriate lawful basis.

Where consent is required, marketing communications will be sent only with the applicable consent.

Users will be provided a reasonable means to withdraw consent or unsubscribe from marketing communications, subject to communications necessary for transactions, account security, legal notices, or service administration.

11. Location Data

Location information may be important to delivery operations, particularly for Riders and delivery tracking.

Where precise location is processed, PalenquePH will use such information only for declared, legitimate, and proportionate purposes such as dispatch, pickup and delivery coordination, navigation, delivery status, safety, fraud prevention, support, and incident investigation.

Device-level location permissions do not replace PalenquePH’s obligations under the Data Privacy Act.

Users may control applicable device permissions, although disabling necessary location functionality may affect features that depend on location.

12. Security of Personal Data

PalenquePH implements and seeks to maintain reasonable and appropriate organizational, physical, and technical safeguards designed to protect personal data against accidental or unlawful destruction, alteration, loss, unauthorized access, disclosure, misuse, or other unlawful processing.

Security measures may include, as appropriate to the system and risk, access controls, authentication measures, role-based permissions, secure transmission mechanisms, logging and monitoring, backups, service-provider safeguards, staff confidentiality requirements, security updates, and incident-response procedures.

No information system can be represented as completely risk-free. Accordingly, PalenquePH does not guarantee absolute security.

13. Personal Data Breaches and Security Incidents

PalenquePH maintains procedures for assessing and responding to suspected personal data breaches and security incidents.

Where notification to affected data subjects and/or the National Privacy Commission is required under applicable law or NPC rules, PalenquePH will make the required notification in accordance with applicable requirements.

Vendors, Riders, personnel, and service providers handling Palenque data should promptly report suspected unauthorized access, loss, disclosure, or other privacy or security incidents through the designated Palenque channel.

14. Data Retention and Secure Disposal

PalenquePH retains personal data only for as long as reasonably necessary for the declared and legitimate purposes for which it was collected, for legitimate business purposes consistent with applicable standards, for the establishment, exercise, or defense of legal claims, or for periods required or permitted by applicable law.

Different records may require different retention periods. Account, transaction, tax and accounting, KYC, complaint, fraud-prevention, and legal records may therefore be retained for different periods.

When personal data is no longer required and there is no lawful basis for further retention, PalenquePH will securely delete, anonymize, destroy, or otherwise dispose of the information using measures appropriate to the record and medium.

15. International and Cloud Processing

Some technology or cloud service providers used by PalenquePH may process or store personal data using infrastructure located outside the Philippines.

Where cross-border or cloud processing occurs, PalenquePH will take reasonable steps to ensure that processing is subject to appropriate contractual, organizational, and technical safeguards consistent with applicable Philippine data-protection requirements.

16. Your Data Privacy Rights

Subject to the conditions and limitations provided by applicable law, data subjects may exercise rights recognized under the Data Privacy Act and applicable NPC rules, including the right to:

Be informed about the processing of their personal data
Object to certain processing
Access personal data concerning them
Request rectification of inaccurate or incomplete personal data
Request erasure or blocking where legally warranted
Data portability where applicable
Claim damages where legally warranted
File a complaint with the National Privacy Commission

These rights are not necessarily absolute and may be subject to lawful exceptions, verification requirements, record-retention obligations, legal claims, fraud and security considerations, or other limitations provided by law.

17. Exercising Your Privacy Rights

A data subject may submit a privacy request through PalenquePH’s designated privacy contact.

PalenquePH may request information reasonably necessary to verify the identity and authority of the person making the request before disclosing, correcting, deleting, exporting, or otherwise acting on personal data.

PalenquePH will assess and respond to valid requests in accordance with applicable law and NPC requirements.

A request for deletion does not necessarily require deletion of every record where continued retention or processing is required or permitted by law, necessary for an unresolved transaction, necessary for the establishment, exercise, or defense of legal claims, required for fraud or security purposes, or otherwise supported by a lawful basis.

18. Children and Minors

The Palenque marketplace is not intended to enable minors to independently enter transactions where they lack legal capacity to do so.

Where PalenquePH processes personal data relating to a child or minor, we will apply applicable Philippine requirements concerning capacity, parental or guardian authority, consent where required, transparency, proportionality, and protection of the child’s interests.

19. Vendors and Riders as Separate Data Users

Vendors and Riders may receive limited Customer information necessary to prepare, fulfill, deliver, support, or resolve an order.

They must use such information only for legitimate marketplace or legally permitted purposes and protect it against unauthorized access, disclosure, retention, or use.

Where a Vendor independently processes personal data for its own legal, tax, accounting, regulatory, customer-service, or other independently determined purposes, that Vendor may have separate obligations under the Data Privacy Act as a Personal Information Controller.

Where a Vendor or Rider processes personal data solely on PalenquePH’s documented instructions, the applicable processor obligations will depend on the actual processing arrangement.

20. Automated Processing, Profiling and Fraud Prevention

PalenquePH may use automated tools, rules, or risk indicators to support fraud prevention, account security, transaction review, marketplace integrity, or operational functions where actually implemented.

Where automated processing or profiling is used in a manner requiring specific disclosure or other measures under applicable law, PalenquePH will provide the required information and safeguards.

21. Links and Third-Party Services

The Platform may contain links to or integrations with third-party websites, applications, maps, payment services, social networks, or other services.

Where a third party independently controls its own processing, its privacy practices are governed by its own privacy notice.

PalenquePH remains responsible for its own processing and for obligations applicable to processors acting on its behalf.

22. Changes to This Privacy Policy

PalenquePH may update this Privacy Policy to reflect changes in the Platform, processing activities, service providers, legal requirements, or privacy practices.

Where a change materially affects how personal data is processed, PalenquePH will provide appropriate notice through the Platform, registered email address, application, or another reasonable means as required by applicable law.

Where consent is the lawful basis for processing and a change requires new consent, PalenquePH will obtain the required consent rather than treating publication of an updated Privacy Policy as consent by itself.

The current version and its last-updated date will be made available through the Platform.

23. Contact and Privacy Requests

For privacy questions, requests to exercise data-subject rights, or concerns about PalenquePH’s processing of personal data: