DATA PRIVACY NOTICE

Common Room PH by Popjunklove Enterprises (“Common Room”) is dedicated to protecting your privacy. All personal data collected from you is processed in accordance with R.A. 10173 (Data Privacy Act of 2012) and other relevant legislation.

Personal data we process: Depending on your interactions with Common Room, we may collect the following personal data: full name, contact details, address and signature (when needed). Our CCTV cameras may also capture your image, actions, and whereabouts while you are on our premises.

Purposes of processing: Common Room, its authorized personnel, or service groups process your personal data for various purposes, including: a) Providing you with the products and services you request, b) Assisting you through our customer service, c) Performing data analyses and profiling to enhance our services, d) Sending you updates through our marketing activities, e) Complying with regulatory requirements, and f) Ensuring the security of our premises. 

Lawful Bases: We process your personal data to fulfill our transactions or agreements with you. Additionally, we may process your personal data when it is necessary for our legitimate interests, provided those interests do not override your fundamental rights and freedoms.

Storage: Digital records are stored on our computers which can only be accessed by authorized personnel. Physical records (if any) containing your personal data are securely stored within company premises and shredded before disposal every year.

Data Transfer: We may share your personal data with management and authorized personnel for the purposes stated in this Privacy Notice. We may also share your data to comply with applicable laws or when required by a competent court or relevant government agency. Additionally, we may share your data with third-party companies that assist us in operating our business, such as payment processors, delivery services, and marketing platforms, including our website.

Retention: We will retain your personal data for a maximum of five (5) years from the transaction date unless specific government regulations (e.g., BIR) require a longer retention period. CCTV footage is kept for a maximum of one (1) month unless preservation for a longer period is necessary for an investigation or case.

Risk: Risk refers to the chance of a harmful incident occurring, such as unauthorized collection, use, disclosure, or access to your personal data. We have implemented security measures to minimize, monitor, and control the risk of exposure to your personal data.

How we protect your Personal Data: We implement appropriate technical and organizational measures to safeguard your personal data from unauthorized access, disclosure, alteration, and destruction. These measures include encryption and access controls.

Methods used for Automated Access: Common Room does not employ automated access methods for processing personal data within its premises.

Your Data Privacy Rights: You have the right to a) Be informed about the processing of your personal data, b) Access, update, or correct your personal data, c) Withdraw your consent, d) Request the disposal of your personal data, subject to regulatory limitations, e) Request a copy of your data in an electronic format, f) Claim damages for violations of your data privacy rights, and g) Raise data privacy concerns.

To exercise any of your data privacy rights, please contact our Data Protection Officer at: pjl.commonroom@gmail.com.