Privacy Notice

Who is responsible

For the public website and general inquiries, PHILIN Industrial Corp. is the primary personal information controller. For an order, financing arrangement, employment record, or other company-specific transaction, the PHILIN operating company identified in that transaction may be the controller, while shared PHILIN systems provide authorized group administration.

Registered address: Lot 35, Block 1, Ruby Street, Sta. Lucia Village 5, Punturin, Valenzuela, Metro Manila 1447. Privacy and DPO routing: sales@philingroup.com or +63 929 299 8666.

Personal data we handle

• Identity and contact details, such as name, email, mobile number, address, and account identifiers.
• Authentication and security records, such as sign-in provider, timestamps, safe diagnostic codes, linked channel status, and access events. PHILIN does not store your password or OTP in application logs.
• Commercial records, including quotation requests, approved company sales records, delivery details, invoices, payments, support requests, and transaction history.
• Financing or partner information when you apply for or use those services, including information needed for identity, eligibility, repayment, compliance, and fraud review.
• Employee, applicant, supplier, contractor, and representative records needed for the relevant relationship.
• Messages and content you submit through the website, Shaan, Messenger, Instagram, WhatsApp, email, or other approved channels.
• Technical and device information needed for security, reliability, abuse prevention, and service operation.

Do not send passwords, OTP codes, full payment-card credentials, government IDs, medical records, or financial documents through Shaan or ordinary messaging unless PHILIN specifically provides an approved secure upload path.

Purposes and lawful bases

PHILIN processes personal data only when a lawful basis applies. Depending on the activity, this may be necessary to perform a contract or take requested steps before a contract, comply with law, protect vital interests, pursue a legitimate business or security interest that does not override your rights, establish or defend legal claims, or act on valid consent where consent is required.

Purposes include account access, quotations and sales, payment and delivery, financing administration, customer support, channel linking, fraud and security monitoring, legal and tax records, employment administration, product and service improvement, and optional communications you choose to receive. PHILIN will not reuse data for an incompatible purpose without a lawful basis and appropriate notice.

Recipients and cross-border processing

Access is limited to authorized PHILIN personnel and operating companies with a need to know. PHILIN may use contracted providers for hosting and authentication, SMS, email, messaging, AI assistance, analytics, document storage, and professional advice. Current integrations may include Supabase, Cloudflare, Google, Meta, Semaphore, OpenAI, and other providers shown at the point of service.

Some providers may process data outside the Philippines. PHILIN remains accountable for transfers under its control and must use appropriate contracts, access restrictions, security measures, and provider review. Information may also be disclosed when required by law or a valid government or court process.

Retention and security

PHILIN keeps each category only as long as necessary for the declared purpose, applicable tax, accounting, employment, financing, warranty, fraud-prevention, dispute, and legal requirements. Records under a valid legal hold are not deleted until the hold ends. When retention expires, PHILIN must securely delete, anonymize, or render the data inaccessible under its approved retention schedule.

Safeguards include encrypted connections, managed authentication, role and company boundaries, row-level database controls, private storage, audit records, least-privilege administration, service-secret separation, monitoring, backups, and incident procedures. No system is risk-free; PHILIN reviews controls and limits the information exposed in errors and logs.

Shaan and artificial intelligence

Shaan is an assistant for product, service, and authorized account guidance. Your prompt and the limited conversation context needed to answer it may be sent to PHILIN's AI service provider. Website chat history is kept on your browser for up to 24 hours unless you start a new chat or clear browser data sooner.

Shaan is not the final decision-maker for credit, financing, employment, legal rights, or approvals. Material decisions require an authorized human reviewer, and you may ask PHILIN to review or correct an AI-assisted outcome. PHILIN restricts Shaan by audience, sign-in state, company, department, and role.

Your data-subject rights

Subject to lawful exceptions, you may be informed; access your data; object to processing; correct inaccurate data; request erasure, blocking, or restriction; obtain portable data where applicable; withdraw consent without affecting earlier lawful processing; complain to the National Privacy Commission; and seek damages when legally available.

Signed-in customers can use the Privacy and my data page. Other data subjects may contact PHILIN using the details below. PHILIN may verify identity and authority before disclosing or changing records. A deletion request does not require PHILIN to erase records that must legally be retained.

Questions, requests, and complaints

Email sales@philingroup.com, call +63 929 299 8666, or write to Lot 35, Block 1, Ruby Street, Sta. Lucia Village 5, Punturin, Valenzuela, Metro Manila 1447. Use “Privacy Request” in the subject and do not include passwords or OTP codes.

If a concern is not resolved, you may contact the National Privacy Commission. This notice may be updated when PHILIN changes its processing or legal obligations; material changes will be identified by a new effective date.