Privacy Policy

WHO WE ARE

Thank you for visiting our official website. We are Alfamart Philippines, composed of Alfamart Trading Philippines, Inc. and Alfametro Marketing, Inc. For more information, you may visit the following link: www.alfamart.com.ph/privacy-policy/.

OUR PRIVACY COMMITMENT

We, at Alfamart, respect and value your rights as a Data Subject under the Data Privacy Act (DPA). Alfamart is committed to protecting personal information that it collects, uses, and/or processes in accordance with the requirements under the DPA and its implementing rules and regulations (IRR). For this purpose, Alfamart implements reasonable and appropriate security measures to maintain the confidentiality, integrity, and availability of such personal information.

OUR SERVICES

Alfamart offers and promotes products and services, provides business opportunities, and performs other services necessary for its legitimate business Purposes (Services).

WHAT WE COLLECT

Alfamart collects, uses and / or processes any and all personal information necessary and mandatory for Alfamart to perform its aforementioned Services. Such personal information may include the following:

• Full Name
• Home / Delivery Address
• Email Address
• Mobile Number

Should you choose not to provide any of the above personal information, Alfamart may not be able to accommodate your request or perform its Services.

WHEN AND HOW WE COLLECT

Alfamart may collect personal information about you when:

• You visit, browse, interact, or use our application or website via desktop, laptop, or mobile device. This includes cookies or third-party analytics which may be deployed during the use of the application or website
• You interact with us via telephone calls, letters, fax, social media, and emails, or though physical stores of Alfamart for order, returns, or exchanges
• You voluntarily submit personal data to us or to our authorized representative for any reason

WHY WE COLLECT

Alfamart collects, uses and / or processes personal information for the following Purposes:

• Offering and promoting better products and services
• Providing business opportunities
• Documenting and managing transactions or business operations of Alfamart
• Monitor and enforce compliance with our Terms of Use
• To improve the layout and / or content of the website or application and customize them for users according to their interests and preferences
• To maintain, administer, or improve the website or application, provide any software updates and / or other updates / support as may be required;
• To conduct research, analysis, and activities (such as but not limited to data analytics, product and service development, and / or profiling), to analyze how you use our website so we can improve our services or products, and / or to enhance customer experience
• To audit our services and / or platform
• To comply with applicable laws
• To allow us to contact you, if necessary
• Accomplishing other legitimate business Purposes

HOW WE USE

Alfamart uses or processes the personal information it collects only for the above mentioned Purposes as is unless customer organization and analysis of the personal information is necessary to achieve the purpose(s) for which the data was collected.

The term “processing” herein shall have the same meaning as provided in the IRR of the DPA, to with: any operation or any set of operations performed upon personal information including, but not limited to, the collection, recording, organization, storage, updating or modification, retrieval, consultation, use, consolidation, blocking, erasure or destruction of data.

WHERE WE STORE AND PROCESS

Alfamart stores and processes personal information using the web hosting services of Amazon Web Services, Inc.. Alfamart shall comply with the applicable laws and regulations should it transfer the storage and / or processing thereof outside the Philippines.

DATA SHARING AND DATA PROCESSING BY THIRD PARTIES

Alfamart will not share your personal information with third parties unless necessary for the above mentioned Purposes and unless you give your consent thereto. Such third parties may include Alfamart’s subsidiaries and affiliates as well as business partners, service providers and contractors or subcontractors, such as but not limited to payment gateways and logistics and delivery providers. Any personal information shared with such third parties shall also be covered by the appropriate agreement between Alfamart and the third party service provider to ensure that all personal information is adequately safeguarded and unnecessary and unauthorized disclosure is prevented.

RISKS INVOLVED

Risk is the chance that a harmful incident may happen. In the context of personal data, risk refers to the chance that someone might collect, use, disclose, or access your personal data in an unauthorized manner or in a way that may cause you harm. In order to ensure that the risks to your personal information are minimized, we employ various measures to safeguard your personal information. However, this does not guarantee protection against all threats such as when systems are exposed to targeted cyberattacks, malware, ransomware, and computer viruses or when manual records are accessed without authority. In case a security incident occurs, we’re prepared to respond and manage such incidents in line with our policies and in accordance with regulations.

DATA PROTECTION AND SECURITY MEASURES

Alfamart safeguards your personal information based on the policies and procedures that we have instituted. It uses a variety of organizational, physical, and technical security measures based on generally accepted data privacy and information security standards to maintain the safety of your personal data.

Below are some of the security measures that we implement:

• All physical records of personal data, if any are stored in locked cabinets
• Data classification, labeling and encryption of digital records of personal data
• Security and Data Privacy Awareness Training for personal granted to personal data
• Strict compliance on Access Controls and Privileged Account Access
• Execution of non-disclosure agreements with the employees, consultants, vendors, suppliers and contractors, among others
• The Alfamart website have undergone a Vulnerability Assessment for security holes and known vulnerability to make your visit as safe as possible
• Technical security measures are also in place to protect our network, computers, servers, databases and other personal data storage in the event of accidental, unlawful or unauthorized usage or access
• Other security measures in case of network issue, power interruptions, natural calamities, external access and other similar threats.

STORAGE AND RETENTION PERIOD

Alfamart retains and stores the files containing personal data in a secured data storage. All physical files containing personal data are stored in locked storage facilities, while electronic files containing personal data are encrypted and stored in a computer or server accessible with an ID and password or in a cloud-based data storage managed by a third-party. We also ensure that the required security measures and controls are implemented to protect the personal information.

The personal data and information about orders and transactions made shall be stored (i) ten (10) years from last transaction date; (ii) for as long as the customer maintains an account on the Alfamart website; (iii) for as long as necessary for the fulfillment of the Purposes for which the data was obtained, or (iv) for as long as necessary for the establishment, exercise, or defense of legal claims, whichever period is longer.

DISPOSAL

After expiration of the retention period, Alfamart shall immediately destroy or dispose of any file or storage device containing personal information in a secure manner that would prevent further processing, unauthorized access, or disclosure to any other party or the public, or prejudice the interests of the data subjects.

Physical files or personal data on paper shall be disposed of through shredding. All electronic or digital files stored in the computer or server shall be deleted in a manner that the personal data shall no longer be retrieved, processed, used or accessed by unauthorized persons.

The hard drives of defective computers or servers shall be assessed whether it will be reused or disposed of. Hard drives that will be reused will undergo two (2) levels of disk sanitizing method: wiping and re-imaging, while hard drives that will be disposed of shall be physically destroyed by drilling three (3) holes through the readable portion of the hard drives prior to disposal. Other storage media also follow similar disposal procedures.

WITHDRAWAL OF CONSENT / CORRECTION OF PERSONAL INFORMATION

We take precautions to protect your information. You may option out of any future contacts from us at any time. You can do the following at any time by reaching out to us through the contact information stated below:

• See what data we have about you
• Change / correct any data we have about you
• Have us delete any data we have about you
• Express any concern you have about our use of your data or communicate your objection to our continual use and / or processing of your personal data for any of the aforestated Purposes;

Please note that if you communicate your withdrawal of consent or objection to our use and / or processing of your personal data for the Purposes and in the manner as stated in the foregoing sections, depending on the nature of your objection, we may not be in a position to continue to provide our products or services to you or perform on any contract we have with you. Our legal rights and remedies are expressly reserved in such an event.

RIGHT OF A DATA SUBJECT

Based on the DPA, as Data Subject, you have the following rights regarding the processing of the personal data we hold about you:

1. Right to be informed: As a data subject, you have the right to be informed whether the personal data pertaining to you shall be processed, are being, or have been processed especially if it involves automated decision-making or profiling.
2. Right to object: You may also object or or withdraw your consent to the collection and processing of your personal data.
3. Right to access: You also have the right to be provided a description of the data in our possession, the Purposes for which they are to be or are being processed, and other processing details of the personal data that we collect about you, such as the period for which the information shall be stored and the recipients to whom the information may be disclosed. You may email us to our DPO email address for any Access request..
4. Right to rectification: You are responsible for the accuracy and correctness of any personal information you provide to Alfamart, as well as for the consequences of failure to provide the accurate, correct and updated personal information necessary for Alfamart to accomplish the Purposes enumerated above. Corollarily, it is also your right to rectify or correct any inaccurate or incomplete information we hold about you. You may email us to our DPO email address for any Rectification request.
5. Right to erasure or blocking: As a data subject, you also have the right to suspend, withdraw or request to block, remove, destroy or erase your personal data in our data storage. upon discovery and substantial proof that the personal data is incomplete, outdated, false, unlawfully obtained, used for unauthorized Purposes, or no longer necessary for the Purposes for which they were collected. You may email us to our DPO email address for any Erasure request.
6. Right to damages: You may claim for any damages if you believe your rights have been violated due to inaccurate, incomplete, outdated, false, unlawful or unauthorized use or processing of your personal data, and the violation is solely attributable to Alfamart.
7. Right to data portability: You may also obtain or request a copy, move, transfer your personal data electronically for further use in a secured or safe manner. You may also obtain a hardcopy or printout of such personal information which you provided to Alfamart, however, any and all costs related thereto shall be for your own account.
8. Right to file complaint: As a data subject, you may file a complaint directly to the National Privacy Commission if you believe your personal data have been misused, maliciously disclosed to unauthorized persons, or improperly disposed of, or in case of any violation of your data privacy rights.

RESPONSIBILITY AND RIGHT TO ACCESS OR CORRECT

You are responsible for the accuracy and correctness of any personal information you provide to Alfamart, as well as for the consequences of disclosing your personal information to us and failure to provide the accurate, correct and updated personal information necessary for Alfamart to accomplish the Purposes enumerated above.

You have the right to access and to correct or update the personal information, which you provided and which Alfamart collected and stored, in accordance with the conditions and requirements under the DPA and IRR.

To access and / or correct or update such personal information, please contact the Data Protection Officer (DPO) by sending an email with your full name and the personal information you wish to access or to be corrected or updated. The DPO will contact you within the time required by the law and regulations. Where correction of personal information is not possible, the DPO shall explain the reason for refusing to make such correction.

You may obtain a hardcopy or printout of such personal information which you provided to Alfamart, however, any and all costs related thereto shall be for your own account.

USE OF COOKIES

Please note that in visiting Alfamart website, cookies are utilized. Cookies are small files that a site or its service provider transfers to your computer's hard drive through your Web browser (if you allow) that enables the site's or service provider's systems to recognize your browser and capture and remember certain information. For instance, Alfamart uses cookies to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved Services. Alfamart also uses cookies to help it compile aggregate data about site traffic and site interaction so that Alfamart can offer better site experiences and tools in the future.

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Look at your browser's Help Menu to learn the correct way to modify your cookies. If you turn cookies off, some features will be disabled. Some of the features that make your site experience more efficient and may not function properly.

MINORS

Our website is intended only for persons who are at least eighteen (18) years old. We neither offer products or services to, nor knowingly collect personal data of, persons below the age of eighteen (18) years (“Minors”) without any legal basis. Should we learn that we were provided with personal data of Minors without any legal basis, we will delete the same from our database. If you are a Minor, please do not provide any personal data to us, such as your name, age, gender, email address, contact information and the like, and kindly consult your parent(s) or guardian(s) first before visiting any website.

INQUIRY

regarding data privacy, or the exercise of your rights as a Data Subject under the DPA, you may contact the DPO through the contact information stated below. Any complaint should be in writing, clearly state the material facts, specify your contact information, submitted with supporting evidence.

The Data Protection Officer

Address: SM Retail HQ, JW Diokno Blvd. cor Bayshore Ave., Mall of Asia Complex, Zone 10 Brgy.76, 1300 Pasay City

Cel.No.: 0917 840 8386

You may also contact us at the following email addresses:

Company Name: Alfamart Trading Philippines, Inc.

Email Address: dataprivacyatp@alfamart.com.ph

Company Name: Alfametro Marketing Inc.

Email Address: dataprivacyami@alfamart.com.ph

AMENDMENT

Alfamart may change or update this Privacy Notice from time to time without notice to you. You are encouraged to visit this site frequently to stay informed about how Alfamart uses your personal information.