Privacy Notice

Ardilya ("we", "us") sells NFC business cards and hosts the digital profiles they open. This notice explains what personal data we collect, why, and the rights you have under the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

Who is responsible for your data

Ardilya, [Registered business address], is the personal information controller. You can reach our Data Protection Officer, Data Protection Officer, at jaevoli@gmail.com.

What we collect

• Account: your name, email address and password (stored only as a secure hash), and the date you accepted this notice. If you continue with Google, we also keep your Google account ID so you can sign in again; we do not receive your Google password.
• Profile: whatever you choose to add, such as your photo, cover image, job title, company, bio, phone numbers, email addresses, website, address and social links.
• Orders: your name, email, mobile number, delivery address, the text and logo you want printed, and the payment reference and method.
• Usage counts: when a card is tapped, a profile is viewed, a contact is saved or a link is clicked, we record the date, the type of device (iPhone, Android or other) and the country. We do not store IP addresses or precise location.

We do not receive or store your card number, GCash or Maya credentials. Payments are handled by PayMongo.

Why we use it

• To run your account and show your profile to the people you share it with.
• To process, print and deliver your orders, and to send order and account emails.
• To show you how often your card and profile are used.
• To keep the service secure and prevent fraud and abuse.
• To meet our legal obligations, such as tax and accounting records.

We process your data with your consent, to fulfil our contract with you, and to comply with the law. We do not sell your data or use it for advertising.

Your public profile

Your profile is public to anyone who taps your card, scans its QR code or has its link. Only add details you are happy to share, and use the visibility settings to hide any field. Profiles are hidden from search engines by default.

Who we share it with

• PayMongo, to take your payment.
• Google, only if you choose to sign in with Google.
• Our error-tracking provider, which receives technical details when a page fails, so we can fix it. We do not send your IP address or the contents of your profile.
• Our courier, your name, mobile number and delivery address, to deliver your order.
• Our hosting and email providers, who store data and send emails for us. Some of these providers may store data outside the Philippines; we only use providers that protect it to a comparable standard.
• Government authorities, only when the law requires it.

How long we keep it

• Account, profile and usage data: until you delete your account. Deleted accounts are hidden immediately and erased for good after 30 days.
• Order and payment records: for as long as Philippine tax and accounting rules require, even after your account is deleted.

How we protect it

All pages are served over HTTPS, passwords are hashed, payment webhooks are signature-checked, and access to our admin tools is limited to authorised staff. If a breach affects your data, we will notify you and the National Privacy Commission as the law requires.

Cookies

We use only the cookies needed to keep you signed in, protect forms and remember your cart. We do not use advertising or tracking cookies.

Your rights

Under the Data Privacy Act you have the right to be informed, to access your data, to object to processing, to correct it, to have it erased or blocked, to data portability, and to claim damages. You can edit your profile, download a copy of your data, and delete your account yourself from your account page. For anything else, email our Data Protection Officer at jaevoli@gmail.com. If you are not satisfied with our answer, you may complain to the National Privacy Commission (privacy.gov.ph).

Children

The service is not meant for children under 18. Minors should use it only with a parent's or guardian's consent.

Changes to this notice

If we make important changes, we will tell you by email or on your dashboard before they take effect. The date at the top shows the latest version.