Privacy Policy
What personal data Handaan collects, why, who sees it, how long we keep it, and your rights under the Data Privacy Act of 2012 (RA 10173).
Effective 2026-11-04
1. Who we are
Handaan is the personal information controller for the data described here. Contact our Data Protection Officer at support@handaan.shop or 0952 463 6450.
2. What we collect
Account: name, email, phone number, password (stored securely, never readable), and sign-in records. Bookings: event date, delivery or venue address, notes, chat messages, payment receipts and reference numbers, reviews. Vendors also: government-issued ID and business documents for verification, shop location, payout details (GCash, Maya or bank account) shown to confirmed customers, and booking fee payment records. Event planner: the events, checklists and budgets you enter. Technical: device and log data needed to keep the service secure.
3. Why we use it
To create your account and sign you in; to run bookings between customers and vendors; to verify that vendors are real businesses; to process booking fees; to send booking updates; to prevent fraud and off-platform payments; to resolve problems and disputes; and to meet legal and tax obligations. We use your data on the basis of our contract with you, your consent, our legal obligations, and our legitimate interest in keeping the marketplace safe.
4. Government IDs and documents
Vendor IDs and business documents are kept in private storage, encrypted, and can be viewed only by authorized Handaan staff who have passed two-step sign-in. They are used only to verify the vendor and to investigate fraud or legal requests, and are never shown to customers.
5. Who sees your data
The other party to a booking sees your name. Phone numbers, emails and the vendor's payment details are shown only after the vendor confirms the booking; before that they are hidden in chat. We share data with service providers that run Handaan for us: Supabase (database and storage, Singapore), Vercel (hosting), PayMongo (booking fee payments), and email/SMS providers. They may process data outside the Philippines under contracts that protect it. We disclose data to authorities when the law requires it. We do not sell personal data.
6. How long we keep it
Account data: while your account is open. Booking, payment and fee records: as long as tax and other laws require (generally up to 10 years), even after you delete your account, with your name removed. Vendor IDs and documents: while the vendor account is open; they are deleted when the account is deleted, unless needed for an open legal claim. Chat messages: 2 years after the booking ends. When you delete your account, your name, phone, email, favorites, event plans and notifications are removed.
7. How we protect it
Encrypted connections, access controls that limit each person to their own data, private storage for documents, two-step sign-in for staff, and audit logs of admin actions. If a breach puts you at risk, we will notify you and the National Privacy Commission as the law requires.
8. Your rights
You have the right to be informed, to access your data, to object, to have inaccurate data corrected, to have data erased or blocked, to data portability, to damages, and to file a complaint with the National Privacy Commission. You can update your profile in the app, delete your account from Account settings, or contact us at support@handaan.shop or 0952 463 6450.
9. Cookies
We use only the cookies needed to keep you signed in and to remember basic settings. If we add analytics later, we will update this policy and ask where required.
10. Changes
We will post updates here and tell you about important changes.