Privacy Policy

1. Who is responsible for your data

The people who run Shoe F.R.E.A.K.K. decide how your personal data is used, and we follow the Data Privacy Act of 2012 (Republic Act No. 10173), its rules and the National Privacy Commission's guidance. Our registered name, address and privacy officer are listed at the end of this page, with how to reach us.

2. What we collect

We only collect what the site needs to work.

• Your account: name, email, mobile number if you add one, date of birth, and a password (we store only a scrambled version of it). If you sign in with Google, we get your name, email, and profile photo from Google, and we ask for your date of birth ourselves.
• If you buy: your orders and the delivery addresses you save or type at checkout. Payments happen on Maya's page; we never see or keep your card or wallet details, only the payment's status and Maya's reference for it.
• If you apply to sell: your business name, city, owner's name, what you sell, contact number, a Philippine government ID (front and back), your DTI and BIR registration, and a live photo taken with your camera. We also keep the face-match score between your live photo and your ID.
• If you apply as an artist: your artist name, city, what you do, your portfolio photos and a contact number.
• If you cash out: the GCash or Maya name and mobile number you save, and your wallet history.
• What you add to the site: listings, photos, posts, stories, comments, reviews, the messages you send, your questions to the sneaker assistant, and reports or return requests (with photos) you send us.
• Technical data: a sign-in cookie, your IP address for security and rate limits, and simple settings saved in your browser, such as your cart, wishlist, and liked posts. We don't track your location; the only places we know are the addresses you type.

3. Why we use it

• To run your account and keep it secure.
• To make sure everyone with an account is 18 or older. We use your date of birth only for this, never show it on your profile, and our team compares it with your ID only if you apply to sell.
• To process orders, deliveries, refunds and payouts.
• To check that sellers are who they say they are, and to prevent fraud and fake pairs.
• To show listings and posts, and to send you the emails you need — your verification code, and news about your orders, refunds, returns, payouts and messages. We don't send marketing emails.
• To review reports, return requests and complaints fairly.
• To answer your questions in the sneaker assistant.
• To keep the records the law asks us to keep (for example, for taxes), and to defend ourselves or you if there is a legal claim.

4. Why we're allowed to

We use your data because you asked us to do something for you (make an account, sell, buy, cash out — that's our agreement with you), because the law requires it, or because we have a fair reason that doesn't outweigh your rights, such as stopping fraud and keeping the site safe. For your ID and live photo we ask for your consent, and you give it when you send your application.

5. Children

Shoe F.R.E.A.K.K. is for people 18 or older. We don't knowingly keep personal data about anyone younger: when someone tells us at sign-up that they are under 18, nothing they typed is saved, and their device is reminded for a day. If we learn that an account belongs to someone under 18, we close it and remove their personal data, keeping only what the law or other people need (for example, a finished order). A parent or guardian who thinks their child has an account can contact us to have it removed.

6. Your face and ID

A live photo compared with an ID is sensitive personal information. We ask for it only when you apply to sell, and by submitting it you consent to that use. The comparison runs in your browser and again on our server, and a person on our team reviews the result. We use it only to verify you as a seller.

7. Who can see it

• Everyone can see a seller's shop name, city, Verified badge, "DTI registered" and "BIR registered" badges, listings, and posts, and reviews (shown with a reviewer's first name and last initial only).
• A shop sees the delivery name, address and phone of the orders it has to send, and may use them only to send that order. A person and a shop can read the messages they exchange.
• Only our team can see a seller's application (ID, DTI and BIR documents, live photo, contact number, and face-match score) — the documents are never shown on the shop — and the reports, return requests and photos sent to us. We read a reported message only to decide the report.
• We share data with a government office only when the law requires it.
• We don't sell your personal data or use it for advertising.

8. Services that help us run the site

We use hosting, database, file-storage and email providers to run Shoe F.R.E.A.K.K., Maya to take payments, Lalamove for deliveries (the shop books it with your delivery details), OpenAI to write the sneaker assistant's answers (it receives your question, not your name or email), and Google if you choose Google sign-in. They handle data for us only to provide those services, and only what they need.

Some of them keep data outside the Philippines: our database and files are stored in South Korea, and our email and AI providers are in the United States. We choose providers that protect data at least as the Data Privacy Act asks.

9. How long we keep it

We keep your account data while your account is open. When you close your account, your name, photo, email, phone, date of birth, saved addresses, saved pairs, follows, notifications, assistant chats and posts are removed or made anonymous.

Some records stay because other people or the law need them: past orders and wallet history (for accounting and refunds), reviews and messages (shown as "Former member"), and the record of what we checked when we verified a seller. The ID, live photo, DTI and BIR files themselves are deleted once an application is approved, or 14 days after it is turned down.

10. How we protect it

What we do today:

• Passwords are stored scrambled, never as typed.
• The site only runs over a secure (https) connection, and sign-in uses a cookie that scripts on the page can't read.
• Repeated failed sign-ins lock the account for a while, and sensitive actions are limited per device.
• Seller IDs, documents and delivery proof photos are kept in private storage and shown only to the right people through links that stop working after an hour.
• Photos you upload are stripped of hidden details such as where they were taken.
• Only our team's admin accounts can open applications, reports and refunds.

11. If something goes wrong

If personal data is lost, stolen or seen by the wrong people in a way that could harm you, we will tell the National Privacy Commission and the people affected within 72 hours of knowing, as the law requires, and say what we are doing about it. No system is perfectly secure, so please use a strong password and never share your codes.

12. Your rights

Under the Data Privacy Act you have the right to:

• Be told how your data is used — that's this page.
• Know what personal data we hold about you and get a copy you can take elsewhere — use Download my data on your profile page.
• Correct data that is wrong or out of date — edit your name, photo and addresses on your profile, or email us.
• Object to how we use your data, or withdraw your consent.
• Ask us to delete or block your data, where the law allows — use Delete my account on your profile page.
• Be paid for damage if your data is misused, and complain to the National Privacy Commission (privacy.gov.ph) if you think we mishandled it.

13. Cookies and browser storage

We use a sign-in cookie, which the site needs to work, and a one-day cookie that remembers when someone under 18 was turned away. We also save your cart, wishlist, and liked posts in your browser's storage. We don't use advertising or tracking cookies, so there is nothing to switch off.

14. Changes

If we change this policy, the date at the top will change and we'll tell you about big changes before they apply, asking for your consent again when the law requires it.