Privacy Policy

This Privacy Policy explains how NexLabs / WellnessBuddy collects, uses, and protects your personal information. We handle personal data in line with the Philippine Data Privacy Act of 2012 (RA 10173).

1. Information we collect

When you place an order through our chat, we collect only what we need to fulfill it:

• Full name — to address and process your order.
• Delivery address — to arrange courier delivery.
• Mobile number — to coordinate delivery and confirm your order.
• Order details — product, quantity, and any discount code used.

We do not collect payment card details on this site — payment is arranged directly with our team through your chosen channel. We do not require your email to order.

2. How we use your information

• To confirm, process, and deliver your order.
• To contact you about your order or a re-order when your supply is due.
• To keep basic records of transactions.

We do not sell or rent your personal data to third parties.

3. Who we share it with

We share only what is necessary with our delivery couriers (e.g. Lalamove, J&T Express) to deliver your order, and with our secure cloud provider (Microsoft Azure), where order records are stored. These providers are bound to protect your data.

4. Data retention

We keep order records only as long as needed for fulfillment, after-sales support, re-order reminders, and legitimate business or legal record-keeping — typically up to 24 months after your last order, after which records are deleted or anonymized. You may request earlier deletion (see your rights below).

5. Security

Order data is stored in a secured Microsoft Azure database with restricted, authenticated admin access over encrypted (HTTPS) connections. Access is limited to authorized personnel only.

6. Data breach

In the event of a personal data breach that is likely to put your rights at serious risk, we will act promptly to contain it and will notify the National Privacy Commission and affected customers as required under the Data Privacy Act.

7. Your rights

Under the Data Privacy Act you have the right to be informed, to access, to correct, to object, and to request deletion of your personal data, and to complain to the National Privacy Commission. To exercise any of these, contact us on Telegram or Messenger.

8. Changes

We may update this Policy from time to time. The “last updated” date above reflects the latest version.