Privacy Notice
How we handle your information
We only ask for what we need to take your order and look after your account. This notice is written with the principles of the Data Privacy Act of 2012 (Republic Act 10173) in mind.
What we collect
- When you place an order: your name, mobile number, pickup or dine-in choice, any notes you add, and the items you ordered.
- When you create an account: your name, email, mobile number and a password. Your password is stored scrambled (hashed), so even our staff cannot read it.
- When you send a message: your name, email and the message itself.
Why we collect it
To prepare and hand over your order, to contact you about it if needed, to show your past orders when you are signed in, and to reply to your messages. We do not sell your information and we do not use it for anything else.
Who can see it
Only authorized Mabeani Coffee staff who sign in to the staff dashboard. We do not share your details with other companies.
How we protect it
- Passwords are hashed and never shown.
- Staff accounts lock for 15 minutes after five wrong password attempts and sign out after 30 minutes without activity.
- Forms are protected against forged requests, and the database is accessed only with safe, parameterized queries.
Your choices
- You can order without an account.
- If you have an account, you can see and correct your details, change your password, or delete your account yourself on the My Account page.
- You can also ask us to correct or remove your information by sending us a message or calling 0917 774 1444.
How long we keep it
Order records are kept for the shop's own records. When you delete your account, your name, email and mobile number are removed from your account; past orders stay in the shop's order list without a link to your account.
Questions about this notice? Contact us.