Privacy Policy

Yume Cha ("we", "us", "our") is committed to protecting your personal information in accordance with the Republic Act No. 10173 — Data Privacy Act of 2012 of the Philippines. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or place an order.

When you place an order, we collect the following personal information:

• Full name
• Email address
• Phone number
• Delivery address (street, barangay, city, province)
• Payment reference number (for GCash/bank transfer orders)
• Order notes (optional, if provided)

We do not collect or store any credit or debit card information. Card payments are processed securely through PayMongo, a BSP-regulated payment processor.

We use your personal information solely for the following purposes:

• Processing and fulfilling your order
• Sending order confirmation and shipping notifications via email
• Contacting you regarding your order if needed
• Resolving disputes or issues with your order

We do not use your information for marketing purposes without your explicit consent, and we do not sell or share your data with third parties for marketing.

Your order information is stored in a secure, access-controlled Google Spreadsheet accessible only to Yume Cha staff. We retain order records for a period of up to two (2) years for business and compliance purposes, after which they are securely deleted.

We use the following trusted third-party services to operate our store:

• PayMongo — secure payment processing (BSP-regulated, PCI-DSS compliant)
• Google Workspace — order management and customer communications
• Vercel — website hosting

These providers have their own privacy policies and security measures. We recommend reviewing them if you have concerns.

Under the Philippine Data Privacy Act, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to the processing of your data

To exercise any of these rights, please contact us at yumecha19@gmail.com.

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our website is served over HTTPS, and payment processing is handled by PCI-DSS compliant third parties.

Our website does not use tracking cookies or third-party analytics. We use only essential browser storage required for the website to function properly.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of our website after changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: yumecha19@gmail.com
• Facebook: Yume Cha
• Instagram: @yume.matcha19