DATA PRIVACY NOTICE
Common Room PH by Popjunklove Enterprises (“Common Room”) is dedicated to protecting your privacy. All personal data collected from you is processed in accordance with R.A. 10173 (Data Privacy Act of 2012) and other relevant legislation.
Personal data we process:
Depending on your interactions with Common Room (in-store or online), we may collect personal data including your full name, contact details, address, signature (when needed), transaction details, and information required for government-mandated discounts (e.g., Senior Citizen or PWD ID), which may be collected in written or photo format.
Our CCTV cameras may capture your image, actions, and whereabouts within our premises for security purposes only.
Separately, we may capture photos or videos through authorized staff or management using cameras or mobile devices for documentation and marketing purposes, including social media. If you are clearly identifiable, we will request your consent (which may be verbal) before capturing or using your image, where practicable.
For website interactions, we may collect digital information such as IP address, browser type, device information, and usage data through cookies or similar technologies.
Purposes of processing:
Common Room, its authorized personnel, or service providers process your personal data for the following purposes:
a) Providing you with the products and services you request
b) Assisting you through our customer service
c) Improving services and customer experience
d) Sending you updates or marketing communications (with consent, where applicable)
e) Verifying eligibility and applying government-mandated discounts
f) Compliance with legal and tax requirements, including those of the Bureau of Internal Revenue
g) Ensuring safety and security through CCTV monitoring (for security purposes only)
h) Capturing photos or videos for documentation and marketing purposes
i) Preventing fraud, misuse, or unauthorized transactions
Lawful Bases: We process your personal data to complete transactions, comply with legal obligations, support legitimate business operations (such as security and fraud prevention), and, where applicable, based on your consent.
Storage: Digital records are stored in secure systems with restricted access. Physical records (if any) are securely stored within company premises. Access is limited to authorized personnel.
Data Transfer: We may share your personal data when necessary: a) Within our organization for operations, b) With government agencies (e.g., the Bureau of Internal Revenue) when required, c) With trusted service providers, including Shopify (website platform); PayMongo, Dragonpay, and PayPal (online payments); and GlobalPay, GCash, PayPal, and BPI (in-store payments), as well as delivery and marketing providers. Payment transactions are processed directly by the providers stated.
Payment transactions are processed directly by these providers. Common Room does not store full payment card details.
Retention: Personal data is retained for up to five (5) years from the transaction date or longer if required by law. CCTV footage is retained for up to thirty (30) days, unless needed for investigation. Other data is kept only as necessary.
Data Protection and Risk Management: We recognize the risks of unauthorized access, use, disclosure, or loss of personal data and implement appropriate organizational, physical, and technical safeguards. These include access controls, secure storage, system protections, and staff training.
CCTV Monitoring: Our premises are monitored by CCTV for safety and security purposes only. Footage is accessed only by authorized personnel and may be shared with authorities when required. CCTV recordings are not used for marketing or promotional activities.
Photo and Video Capture (Marketing use): We may capture photos or videos in-store for documentation and marketing purposes, including social media. If you are clearly identifiable, we will request your consent (which may be verbal) where practicable. For general or crowd shots, content may be used as long as it is respectful and appropriate. You may opt out at any time by informing our staff.
Discount Verification: All IDs used for government-mandated discounts (e.g., Senior Citizen, PWD) are subject to verification. Misuse or fraudulent representation may result in denial of privileges and may be addressed in accordance with applicable laws.
Methods used for Automated Access: Common Room does not employ automated decision-making or profiling that significantly affects individuals.
Your Data Privacy Rights: You have the right to a) Be informed, b) Access, update, or correct your personal data, c) Withdraw your consent (when applicable), d) Request the disposal or deletion of your personal data (subject to regulatory and legal limitations), e) Raise data privacy concerns with the National Privacy Commission.
To exercise any of your data privacy rights, please contact our Data Protection Officer at: pjl.commonroom@gmail.com.
