Privacy Policy

WHO WE ARE

Thank you for visiting our official website. We are Alfamart Philippines, composed of Alfamart Trading Philippines, Inc. and Alfametro Marketing, Inc. For more information, you may visit the following link: www.alfamart.com.ph/privacy-policy/.

OUR PRIVACY COMMITMENT

We, at Alfamart Philippines, respect and value your privacy rights as a Data Subject under the Data Privacy Act of 2012 (DPA). We are committed to protecting and disclosing personal information that we collect, use, and process in accordance with the requirements under the DPA and Implementing Rules and Regulations (IRR). This Privacy Policy also describes the security measures we implement and practice to maintain the confidentiality, integrity, and availability of such personal information.

OUR SERVICES

Alfamart Philippines evaluates job applications, provides business opportunities, offers and promotes products and services, and performs other services necessary to contribute to the continuous growth of the business.

WHAT WE COLLECT

Alfamart Philippines collects, uses and / or processes any and all personal information necessary and mandatory for Alfamart Philippines to perform its aforementioned Services. Such personal information may include the following:

• Full Name
• Birthdate
• Gender
• Home / Delivery Address
• Email Address
• Mobile Number
• Loyalty Card Number
• Username and / or password
• Telephone Number
• Website cookie info
• IP Address
• Age
• Credit Card Info
• CCTV Footage
• Scanned copy of valid ID bearing data subject’s specimen signature

Should you choose not to provide any of the above personal information, we may not be able to accommodate your request or perform its Services.

We may also collect certain information by automated or passive means using a variety of technologies such as when you connect your computer to the internet or when you view our website from your mobile phone. The information that may be collected include the following:

• Internet protocol address (“IP address”)
• Computer / mobile device operating system
• Browser used
• Kind of mobile device used and the characteristics of the mobile device such as, the unique device identifier (“UDID”) or mobile equipment identifier (“MEID”) for your mobile device
• Browsing behavior

WHEN AND HOW WE COLLECT

Alfamart Philippines may collect personal information about you when:

• You visit, browse, interact, or use our application or website via desktop, laptop, or mobile device. This includes cookies or third-party analytics which may be deployed during the use of the application or website
• You use or related services such as email and SMS notifications, returns and exchanges of products, availment of promotions directly or through third party partners contracted by Alfamart Philippines
• You register, create, or open an account with us
• You transact with us through this online platform, purchase products offered for sale by partner merchants, and submit forms relating to the foregoing transactions, such as but not limited to the Contact Form, message our Customer Care team, submit product information and images when reviewing or rating products purchased from Alfamart Philippines
• You interact with us via telephone calls, letters, fax, social media, and emails, or though physical stores of Alfamart Philippines for order pick-up, returns, or exchanges
• You voluntarily submit personal data to us or to our authorized representative for any reason

WHY WE COLLECT

Alfamart Philippines collects, uses and / or processes personal information for the following Purposes:

• Processing & fulfilling purchase orders
• Offering and promoting better products and services
• Providing business opportunities
• Documenting and managing transactions or business operations of Alfamart Philippines
• Administer and maintain your account / user profile with us and grant you access to our Services, including the website
• Monitor and enforce compliance with our Terms of Use
• To notify you should any service issues and unusual account actions occur
• To improve the layout and / or content of the website or application and customize them for users according to their interests and preferences
• To maintain, administer, or improve the website or application, provide any software updates and / or other updates / support as may be required;
• To conduct research, analysis, and activities (such as but not limited to data analytics, product and service development, and / or profiling), to analyze how you use our website so we can improve our services or products, and / or to enhance customer experience
• To audit our services and / or platform
• To comply with applicable laws
• To allow us to contact you, if necessary
• Accomplishing other legitimate business purposes

HOW WE USE

Alfamart Philippines uses or processes the personal information it collects only for the above mentioned purposes as is unless organization and analysis of the personal information is necessary to achieve the purpose(s) for which the data was collected.

The term “processing” herein shall have the same meaning as provided in the IRR of the DPA, to wit: any operation or any set of operations performed upon personal information including, but not limited to, the collection, recording, organization, storage, updating or modification, retrieval, consultation, use, consolidation, blocking, erasure or destruction of data.

WHERE WE STORE AND PROCESS

Alfamart Philippines stores and processes personal information using the web hosting services of Amazon Web Services, Inc.. We shall comply with the applicable laws and regulations should it transfer the storage and / or processing thereof outside the Philippines.

DATA SHARING AND DATA PROCESSING BY THIRD PARTIES

Alfamart Philippines will not share your personal information with third parties unless necessary for the above mentioned purposes and unless you give your consent thereto. Such third parties may include Alfamart Philippines’ subsidiaries and affiliates as well as business partners, service providers and contractors or subcontractors, such as but not limited to payment gateways and logistics and delivery providers. Any personal information shared with such third parties shall also be covered by the appropriate agreement between Alfamart Philippines and the third party service provider to ensure that all personal information is adequately safeguarded and unnecessary and unauthorized disclosure is prevented.

RISKS INVOLVED

Risk is the chance that a harmful incident may happen. In the context of personal data, risk refers to the chance that someone might collect , use, disclose, or access your personal data in an unauthorized manner or in a way that may cause you harm. In order to ensure that the risks to your personal information are minimized, we employ various measures to safeguard your personal information. However, this does not guarantee protection against all threats such as when systems are exposed to targeted cyberattacks, malware, ransomware, and computer viruses or when manual records are accessed without authority. In case a security incident occurs, we’re prepared to respond and manage such incidents in line with our policies and in accordance with regulations.

DATA PROTECTION AND SECURITY MEASURES

Alfamart Philippines safeguards your personal information based on the policies and procedures that we have instituted. It uses a variety of organizational, physical, and technical security measures based on generally accepted data privacy and information security standards to maintain the safety of your personal data.

Below are some of the security measures that we implement:

• All physical records of personal data, if any are stored in locked cabinets
• Data classification, labeling and encryption of digital records of personal data
• Security and Data Privacy Awareness Training for personal granted to personal data
• Strict compliance on Access Controls and Privileged Account Access
• Execution of non-disclosure agreements with the employees, consultants, vendors, suppliers and contractors, among others
• The Alfamart Philippines website have undergone a Vulnerability Assessment for security holes and known vulnerability to make your visit as safe as possible
• Technical security measures are also in place to protect our network, computers, servers, databases and other personal data storage in the event of accidental, unlawful or unauthorized usage or access
• Other security measures in case of network issue, power interruptions, natural calamities, external access and other similar threats.

STORAGE AND RETENTION PERIOD

Alfamart Philippines retains and stores the files containing personal data in a secured data storage. All physical files containing personal data are stored in locked storage facilities, while electronic files containing personal data are encrypted and stored in a computer or server accessible with an ID and password or in a cloud-based data storage managed by a third-party. We also ensure that the required security measures and controls are implemented to protect the personal information.

The personal data and information about orders and transactions made shall be stored (i) ten (10) years from last transaction date; (ii) for as long as the customer maintains an account on the Alfamart Philippines website; (iii) for as long as necessary for the fulfillment of the purposes for which the data was obtained, or (iv) for as long as necessary for the establishment, exercise, or defense of legal claims, whichever period is longer.

DISPOSAL

After expiration of the retention period, Alfamart Philippines shall immediately destroy or dispose of any file or storage device containing personal information in a secure manner that would prevent further processing, unauthorized access, or disclosure to any other party or the public, or prejudice the interests of the data subjects.

Physical files or personal data on paper shall be disposed of through shredding. All electronic or digital files stored in the computer or server shall be deleted in a manner that the personal data shall no longer be retrieved, processed, used or accessed by unauthorized persons.

The hard drives of defective computers or servers shall be assessed whether it will be reused or disposed of. Hard drives that will be reused will undergo two (2) levels of disk sanitizing method: wiping and re-imaging, while hard drives that will be disposed of shall be physically destroyed by drilling three (3) holes through the readable portion of the hard drives prior to disposal. Other storage media also follow similar disposal procedures.

WITHDRAWAL OF CONSENT / CORRECTION OF PERSONAL INFORMATION

We take precautions to protect your information. You may option out of any future contacts from us at any time. You can do the following at any time by reaching out to us through the contact information stated below:

• See what data we have about you
• Change / correct any data we have about you
• Have us delete any data we have about you
• Express any concern you have about our use of your data or communicate your objection to our continual use and / or processing of your personal data for any of the aforestated purposes;

Please note that if you communicate your withdrawal of consent or objection to our use and / or processing of your personal data for the purposes and in the manner as stated in the foregoing sections, depending on the nature of your objection, we may not be in a position to continue to provide our products or services to you or perform on any contract we have with you. Our legal rights and remedies are expressly reserved in such an event.

RIGHT OF A DATA SUBJECT

Based on the DPA, as Data Subject, you have the following rights regarding the processing of the personal data we hold about you:

Right to be informed: As a data subject, you have the right to be informed whether the personal data pertaining to you shall be processed, are being, or have been processed especially if it involves automated decision-making or profiling.

1. Right to object: You may also object or or withdraw your consent to the collection and processing of your personal data.
2. Right to access: You also have the right to be provided a description of the data in our possession, the purposes for which they are to be or are being processed, and other processing details of the personal data that we collect about you, such as the period for which the information shall be stored and the recipients to whom the information may be disclosed. You may email us to our DPO email address for any Access request..
3. Right to rectification: You are responsible for the accuracy and correctness of any personal information you provide to Alfamart Philippines, as well as for the consequences of failure to provide the accurate, correct and updated personal information necessary for Alfamart Philippines to accomplish the purposes enumerated above. Corollarily, it is also your right to rectify or correct any inaccurate or incomplete information we hold about you. You may email us to our DPO email address for any Rectification request.
4. Right to erasure or blocking: As a data subject, you also have the right to suspend, withdraw or request to block, remove, destroy or erase your personal data in our data storage. upon discovery and substantial proof that the personal data is incomplete, outdated, false, unlawfully obtained, used for unauthorized purposes, or no longer necessary for the purposes for which they were collected. You may email us to our DPO email address for any Erasure request.
5. Right to damages: You may claim for any damages if you believe your rights have been violated due to inaccurate, incomplete, outdated, false, unlawful or unauthorized use or processing of your personal data, and the violation is solely attributable to Alfamart Philippines.
6. Right to data portability: You may also obtain or request a copy, move, transfer your personal data electronically for further use in a secured or safe manner. You may also obtain a hardcopy or printout of such personal information which you provided to Alfamart Philippines, however, any and all costs related thereto shall be for your own account.
7. Right to file complaint: As a data subject, you may file a complaint directly to the National Privacy Commission if you believe your personal data have been misused, maliciously disclosed to unauthorized persons, or improperly disposed of, or in case of any violation of your data privacy rights.

RESPONSIBILITY AND RIGHT TO ACCESS OR CORRECT

You are responsible for the accuracy and correctness of any personal information you provide to Alfamart Philippines, as well as for the consequences of disclosing your personal information to us and failure to provide the accurate, correct and updated personal information necessary for Alfamart Philippines to accomplish the purposes enumerated above.

You have the right to access and to correct or update the personal information, which you provided and which we collected and stored, in accordance with the conditions and requirements under the DPA and IRR.

To access and / or correct or update such personal information, please contact the Data Protection Officer (DPO) by sending an email with your full name and the personal information you wish to access or to be corrected or updated. The DPO will contact you within the time required by the law and regulations. Where correction of personal information is not possible, the DPO shall explain the reason for refusing to make such correction.

You may obtain a hardcopy or printout of such personal information which you provided to us, however, any and all costs related thereto shall be for your own account.

USE OF COOKIES

The Alfamart Philippines website uses cookies not to collect personally identifiable information about you but to ease navigation through the site. Cookies are text files containing small amounts of information which are automatically downloaded to your computer or device when you visit a website. Cookies allow a website to recognize your device and profile that you browse for a seamless and smooth browsing experience.

MINORS

Alfamart Philippines website is intended only for persons who are at least eighteen (18) years old. We neither offer products or services to, nor knowingly collect personal data of, persons below the age of eighteen (18) years (“Minors”) without any legal basis. Should we learn that we were provided with personal data of Minors without any legal basis, we will delete the same from our database. If you are a Minor, please do not provide any personal data to us, such as your name, age, gender, email address, contact information and the like, and kindly consult your parent(s) or guardian(s) first before visiting any website.

INQUIRY

For inquiries regarding our processing of personal information stated in this Privacy Notice, as well as any concerns or complaints regarding data privacy, or the exercise of your rights as a Data Subject under the DPA, you may contact the DPO through the contact information stated below. Any complaint should be in writing, clearly state the material facts, specify your contact information, submitted with supporting evidence.

Company Name: Alfamart Trading Philippines, Inc.

Email Address: dataprivacyatp@alfamart.com.ph

Contact No.: 0917 840 8386

Address: Alfamart Center, Daiichi Industrial Park, Block 1 Lot 3, 4, and 5, Maguyam, Silang, Cavite

Company Name: Alfametro Marketing Inc.

Email Address: dataprivacyami@alfamart.com.ph

Contact No.: 0917 840 8386

Address: SM Retail Corporate Office, J.W. Diokno Blvd. Cor. Bayshore Avenue, MOA Complex, Pasay City

AMENDMENT

Alfamart Philippines may change this Privacy Policy from time to time without prior notice. Revised versions of this Privacy Policy will be posted on this page, together with an updated effective date. You should check this page periodically to see if any recent changes to this Privacy Policy have occurred and to be informed about how Alfamart Philippines uses your personal information.