Privacy Policy

1. Data Controller

Rift-Vault Toys Shop
72 Fendler St Unit C2 East Tapinac
Olongapo City, Zambales 2200, Philippines
DTI Registration Number: 8336935

2. Data We Collect

• Account data: name, email, password hash, optional phone and profile preferences.
• Order data: products, shipping address, contact details, totals, and order status history.
• Payment references: provider checkout/payment IDs (no full card number or CVV stored by us).
• Support and chat data: contact forms, support messages, and live chat transcripts.
• Technical data: session metadata, security logs, and analytics/consent preferences.

3. Why We Process Your Data (Legal Bases)

• Contract necessity: create accounts, process orders, deliver purchases, and provide support.
• Legitimate interests: fraud prevention, service security, and operational analytics.
• Consent: marketing messages and non-essential analytics/cookies where required.
• Legal obligations: accounting, tax, and other mandatory compliance records.

4. Payment Processing

Online payments are processed by PayMongo on their hosted pages. Cardholder data is processed by the payment provider and is not stored on our website servers.

5. Cookies and Tracking

We use essential cookies for authentication and cart behavior. Non-essential analytics and advertising technologies are controlled through consent preferences where applicable.

See our Cookie Policy for details.

6. Data Sharing

We share data only with trusted processors needed to run our services, such as payment, hosting, security, communications, and analytics providers.

7. Retention

We retain data for as long as needed for service delivery, legal obligations, dispute handling, and fraud prevention, then delete or anonymize where feasible.

8. Your Rights (GDPR)

• Access your data.
• Correct inaccurate data.
• Request deletion, subject to legal retention obligations.
• Request export/portability of eligible personal data.
• Object to or restrict certain processing where applicable.
• Withdraw consent for optional processing.