Privacy Policy

The personal information controller is Stakmaker Online Shop (brand name Stak Maker), a sole proprietorship owned by Souichi Takahama.

• Business address: Makati City, Metro Manila, Philippines
• Messenger: m.me/StakMakerOnline
• Data Protection Officer: Souichi Takahama, on Messenger

Account information. If you create an account, we keep your name, email address and password. Your password is stored only as an encrypted hash, so we cannot read it.

Order, billing and shipping details. When you order, we collect your name, phone number, email, billing and delivery address, the items you bought, personalization text and your order history. Payment is handled by PayMongo. We receive confirmation that you paid and the payment method type, but never your full card number or e-wallet login.

Files you upload. When you use the Make Lab or send us artwork, we store the design files, photos and text you upload so we can quote and produce your order. Please avoid uploading photos of other people without their permission.

Messages. If you email us, message us on Facebook or Instagram, or fill in a form, we keep the conversation so we can help you and keep a record of what was agreed.

Analytics and advertising cookies. We use Google Analytics and Google Ads (through Google Site Kit) to understand how people find and use our site and to measure our ads. These use cookies and similar identifiers. If you reach our Make Lab quote page from a Google ad, we store the Google click ID (gclid) with your quote to see which ads lead to orders.

Links in our emails. When you open a public Shop, Help or policy link in an order or request email, we may record the address the email was sent to, the message type, the related order number, the link destination and whether the destination page was visited or used. A forwarded link or an email security tool may open it, so this does not prove that you personally read the email. We do not use an email-open pixel, store your IP address for this feature or track payment, proof-upload or account-security links. Browser Do Not Track and Global Privacy Control requests are excluded. You may object by messaging us on Messenger or emailing admin@stakmaker.com.

Device and log data. Our hosting provider and security tools automatically record technical data such as your IP address, browser type, device, pages visited and time of each visit. We use this to keep the site secure and working.

• To take, produce, ship and support your orders and quotes
• To send order confirmations, payment links, shipping updates and replies to your questions
• To manage your account and your downloads
• To prevent fraud, spam and attacks on the website
• To understand how our site is used and improve our products and pages
• To measure our advertising
• To send you promotions, only if you have agreed to receive them. You can unsubscribe at any time.
• To keep records required by law, including tax and accounting rules

We process your personal information because:

• it is needed to perform our contract with you (your order or quote);
• you gave your consent, for example to marketing emails and non-essential cookies;
• of our legitimate interests in keeping the site secure and improving our service, in a way that does not override your rights; or
• the law requires it, for example Bureau of Internal Revenue record-keeping.

• Orders, receipts and invoices: as long as Bureau of Internal Revenue (BIR) tax rules require.
• Uploaded design files: Personalize Studio artwork that never becomes an order is deleted automatically after 14 days. Files attached to an order, a Make Lab quote or a bulk request are kept for 90 days after the order or quote so you can reorder, then deleted, unless you ask us to keep them longer. You can ask us to delete them sooner at any time.
• Accounts: until you ask us to delete your account. Order records we must keep for tax purposes are kept separately.
• Messages: as long as needed to handle your request, and up to 2 years after our last conversation.
• Analytics data: according to Google Analytics retention settings, currently no more than 14 months.
• Email link activity: linked to the recipient for no more than 30 days, then identifying details and activity counts are erased.

We share only what each service needs to do its job:

• PayMongo, to process your payment
• Couriers, such as J&T Express, LBC, Lalamove or Grab, to deliver your parcel (your name, phone and address)
• Google, for analytics, advertising measurement and Site Kit reports
• Hostinger, our web hosting provider, which stores our website and its data
• Government authorities, only when required by law

Some of these providers may process data outside the Philippines. We use providers that protect personal data to a standard comparable to Philippine law. We do not sell or rent your personal information to anyone.

Cookies are small files stored in your browser. We use:

• Essential cookies to keep your cart, log you in and keep checkout secure. The site does not work properly without them.
• Analytics and advertising cookies from Google, to measure visits and ads.

You can block or delete cookies in your browser settings. Blocking essential cookies stops the cart and checkout from working.

The site uses HTTPS encryption. Payments happen on PayMongo’s secure checkout, not on our server. Access to order data and uploaded files is limited to the owner and anyone helping to fulfil your order. Passwords are hashed, and logins are protected against repeated failed attempts. If a personal data breach is likely to put you at risk, we will notify you and the National Privacy Commission as the law requires.

Under the Data Privacy Act, you have the right to:

• Be informed about how your personal information is collected and used
• Access the personal information we hold about you
• Object to processing, including marketing and profiling
• Erasure or blocking of data that is outdated, false, unlawfully obtained or no longer needed
• Rectification of inaccurate or incomplete data
• Data portability, to get a copy of your data in a commonly used electronic format
• Damages, if you suffer harm because of inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of your data
• File a complaint with the National Privacy Commission

Message our Data Protection Officer, Souichi Takahama, on Messenger. Tell us what you want to do and include the email you used on our site. We may ask you to confirm your identity. We will respond within 15 business days.

You can view and edit most account details yourself in My account.

If you believe we have not handled your personal information properly, please contact us first so we can fix it. You can also file a complaint with the National Privacy Commission at privacy.gov.ph.

Our shop is meant for adults. If you are under 18, please ask a parent or guardian to order for you. We do not knowingly collect personal information from children without a parent’s consent.

When our services or the law change, we post the updated policy here and change the date at the top. For significant changes, we will also email account holders.