Privacy Policy

1. Who we are

This website (arbeminimart.com) and the related online store, POS and delivery service are operated by Arbe Minimart, with main office at Militante Street D'ban, Don Bernardo Neri Poblacion, Calamba, Misamis Occidental, 7210, Philippines, and Branch 1 at Felix Taghap Street, Poblacion 2, Oroquieta City, Misamis Occidental, 7207, Philippines.

2. Information we collect

We only collect information that is necessary to serve you:

• Account information — full name, email address, mobile number, and an encrypted password when you register.
• Order & delivery details — delivery address, contact number, order items, payment method, optional delivery notes, and uploaded payment proof images.
• Transaction records — order totals, dates, and the assigned driver.
• Technical information — basic browser, device, and access logs used to keep the service secure and reliable.

We do not store full credit/debit card numbers, GCash PINs, Maya PINs, or bank passwords on our servers.

3. How we use your information

• To process your orders, accept payments, and arrange delivery to your address.
• To send you the 4-digit delivery code that confirms the package is handed to the right person.
• To contact you about your order if there is a stock issue, delivery delay, or address concern.
• To improve our store, products, and customer experience.
• To comply with applicable Philippine laws (e.g., BIR record-keeping).

4. Who we share your information with

• Our drivers — receive only your name, phone, address and order items, so they can deliver your purchase. Drivers cannot see your delivery code; you share it with them at your door.
• Payment providers (e.g. GCash, Maya, your bank, PayPal) — only the data they require to process the transaction.
• Legal authorities — when required by a valid Philippine court order, subpoena, or law.

We never sell your personal information to third parties.

5. How long we keep your data

Account and order records are retained while your account is active and for at least 5 years after your last transaction, in line with BIR record-keeping requirements. You may request deletion at any time (see Section 7).

6. How we protect your data

• Passwords are stored using industry-standard one-way hashing (bcrypt). We can never see your password.
• All traffic between your browser and our servers is encrypted via HTTPS.
• Access to admin and staff features is restricted by role and protected with JWT authentication.

7. Your rights under RA 10173

You have the right to:

• Be informed of what data we hold about you.
• Access, correct or update your personal information.
• Request deletion of your account and associated data (subject to BIR retention rules).
• Object to processing or withdraw consent at any time.
• File a complaint with the National Privacy Commission (NPC) at privacy.gov.ph.

8. Cookies & local storage

We use a small amount of browser storage (localStorage) to keep you signed in, remember your shopping cart, and remember whether you've dismissed our welcome popup. We do not use third-party advertising trackers.

9. Children's privacy

Arbe Minimart is not directed to children under 13. We do not knowingly collect data from minors. If you believe a child has registered, please contact us so we can delete the account.

10. Updates to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect any changes. Continued use of the site after an update means you accept the revised policy.

11. Contact our Data Privacy Officer

For any privacy concerns, requests, or to exercise your rights: