GDPR Non-Applicability and Data Protection Statement
Effective Date: October 30, 2025
1. Jurisdictional Notice and Corporate Scope
This statement defines the jurisdictional boundaries and data protection frameworks governing Clickerwayne Holdings OPC ("the Company"), operating commercially as LowPriceDito.com. The Company is a registered corporate entity operating exclusively within the Republic of the Philippines. Our digital infrastructure, retail catalog, and fulfillment services are strictly localized for Philippine residents.
2. Non-Applicability of the EU General Data Protection Regulation
We explicitly do not offer goods or services to residents of the European Union (EU) or the European Economic Area (EEA), nor do we systematically monitor the behavior of individuals within those territories. Consequently, the EU General Data Protection Regulation (GDPR), specifically Article 3(2) regarding territorial scope, lacks jurisdictional authority over our operations.
Incidental access to our platform by EU or EEA residents is processed strictly for base technical operability (including IP routing and security logging). Such incidental data processing remains governed exclusively by Philippine law.
3. Governing Legal Framework
All personal data processing executed by the Company is governed strictly by the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its supplementary Implementing Rules and Regulations (IRR). The Philippine National Privacy Commission (NPC) serves as our exclusive regulatory and supervisory authority.
4. Security Architecture and Safeguards
To ensure data integrity and authorized access, we implement the following technical and organizational security controls:
| Safeguard Category | Implemented Protocols |
|---|---|
| Technical Measures | TLS 1.3 cryptographic protocols for data in transit; AES-256 encryption for data at rest; pseudonymization of identifiers; automated SIEM (Security Information and Event Management) monitoring. |
| Organizational Measures | Role-Based Access Control (RBAC) architecture; structured incident response and NPC-aligned breach notification protocols; continuous privacy training for personnel; strict vendor due-diligence contracts. |
5. Statutory Data Subject Rights
Pursuant to the Philippine Data Privacy Act of 2012, verified data subjects within our jurisdiction possess the following enforceable rights:
- Right to be Informed: To receive transparent documentation regarding data-processing methods.
- Right to Access: To obtain copies of personal records currently in our systems.
- Right to Object: To withhold or withdraw consent for specific data-processing activities.
- Right to Erasure or Blocking: To mandate the suspension, withdrawal, or permanent deletion of personal data under statutory conditions.
- Right to Rectify: To dispute and correct systemic inaccuracies within personal records.
- Right to Data Portability: To securely extract personal data in a standard, machine-readable format.
- Right to Damages: To claim compensation for confirmed financial damages resulting from negligent data processing.
6. Data Classification and Retention Lifecycle
We enforce strict data-minimization principles. Personal data is systematically purged or anonymized upon the expiration of the following mandated retention schedules:
| Data Category | Collection Scope | Retention Period |
|---|---|---|
| Account and Transactional | Name, delivery address, payment confirmations, order history. | Six (6) years following account closure or last transaction. |
| Communications | Support tickets, emails, phone correspondence. | Two (2) years following the final resolution of the inquiry. |
| Consent and Audit | Digital consent logs, policy agreement timestamps. | Five (5) years from the date of logging. |
| Technical and Analytics | IP addresses, device metrics, functional cookies. | Twelve (12) months from the date of capture. |
7. Data Sovereignty and Technical Tracking
All primary data storage and processing occur within the physical and legal jurisdiction of the Philippines. We do not authorize or execute cross-border data transfers to the EU or EEA unless explicitly compelled by binding legal warrants. Automated tracking technologies (cookies) deployed on our infrastructure are restricted to localized performance analytics and core site functionality. We strictly prohibit the use of these technologies to profile or target EU or EEA residents.
8. Regulatory Contacts and Dispute Escalation
To exercise statutory data rights or escalate privacy inquiries, direct correspondence to our designated Data Protection Officer (DPO):
Clickerwayne Holdings OPC (LowPriceDito.com)Attn: Data Protection Officer
City of Biñan, Laguna, Philippines
Email: dpo@lowpricedito.com
Phone: +63 (917) 14-SMILE
If a data privacy concern remains unresolved through internal channels, Philippine residents retain the statutory right to lodge a formal regulatory complaint directly with the Philippine National Privacy Commission (NPC) via their official government portals.
9. Policy Revisions
The Company reserves the right to modify this statement to ensure continuous alignment with Philippine jurisprudence and technical infrastructure upgrades. The active operational framework is dictated by the Effective Date listed at the beginning of this document. Material shifts in processing methodologies will be communicated via prominent platform notifications.