Privacy Policy
Effective August 12, 2026
BJ Value Based Services Corporation ("BJVBS", "we", "us") respects your privacy. This Privacy Policy explains what personal data we collect, why we collect it, and how we protect it, in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC).
1. Data we collect
- Identity and contact data — name, mobile number, email address, and delivery addresses you register with us.
- Order data — services booked, item counts and categories, treatment options, schedules, delivery preferences, and order history.
- Payment data — payment method, amount, status, and gateway references. Card and e-wallet payments are processed by PayMongo; we never receive or store your full card number or wallet credentials.
- Custody documentation — photographs taken at pickup, drop-off, sorting, and delivery to document the condition and handover of your items, and CCTV recordings within our facility.
- Technical data — device and browser information, IP address, and access logs generated when you use our website.
2. Why we process your data
- To fulfil your orders: booking, pricing, processing, tracking, delivery, and after-sales support (performance of a contract);
- To process payments and refunds through our payment gateway (performance of a contract);
- To send transactional SMS and email notifications about your orders, such as payment confirmations and delivery updates (performance of a contract);
- To protect your items and resolve disputes through chain-of-custody records (legitimate interest);
- To secure our systems, prevent fraud, and keep audit trails (legitimate interest and legal obligation);
- To comply with tax, accounting, and other legal requirements (legal obligation).
We do not sell your personal data, and we do not use it for third-party advertising.
3. Who we share data with
We share personal data only with service providers needed to run our business:
- PayMongo Philippines, Inc. — payment processing (they handle your card/e-wallet details under their own privacy policy and PCI-DSS controls);
- SMS gateway provider — delivery of one-time PINs and order notifications to your mobile number;
- Hosting provider — secure servers on which our system and database run;
- Accredited partner drop-off hubs and delivery personnel — only the details needed to receive, route, and deliver your specific order;
- Government authorities, when disclosure is required by law or lawful order.
4. How we protect your data
- Encrypted connections (HTTPS/TLS) across the entire website;
- Passwords stored only as strong one-way hashes; multi-factor authentication for all staff accounts;
- Strict role-based access — staff see only the data their function requires, and access attempts outside a role are refused and logged;
- Immutable audit logs of sensitive actions, including every manual override;
- Regular backups retained under a controlled disaster-recovery procedure.
5. How long we keep data
We keep personal data only as long as needed for the purposes above: account data for the life of your account; order, payment, and custody records for the retention periods required by tax and accounting laws; CCTV and operational logs on rolling retention schedules. When data is no longer needed, it is securely deleted or anonymized.
6. Your rights
Under the Data Privacy Act, you have the right to:
- Be informed about how your data is processed;
- Access the personal data we hold about you;
- Correct inaccurate or outdated data;
- Object to processing, or withdraw consent where processing is based on consent;
- Request erasure or blocking of data that is unlawfully processed or no longer necessary;
- Data portability, for data you provided in a structured, commonly used format;
- Lodge a complaint with the National Privacy Commission (privacy.gov.ph) and claim damages for violations.
To exercise any of these rights, contact us using the details below. We respond to data privacy requests within the periods prescribed by the NPC.
7. Cookies and sessions
Our website uses strictly necessary cookies to keep you signed in and to secure your session (including cross-site request forgery protection). We do not use third-party advertising or tracking cookies.
8. Children
Our services are intended for users 18 years old and above. We do not knowingly collect personal data from minors; if you believe a minor has registered, contact us and we will remove the account.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes are announced on this page, and the effective date above always reflects the current version.
10. Contact us
BJ Value Based Services Corporation
SEC Registration No. CS200929261
Baguio City, Benguet, 2600, Philippines
bjvbscorporation711@gmail.com