Privacy Policy

The MGCNLCA Merchandise Store (“we”, “us”) is operated by MGC New Life Christian Academy, 14th Drive, University Parkway, Bonifacio Global City, Fort Bonifacio, Taguig City, Philippines. This policy explains what personal information we collect when you visit or buy from this store, why we collect it, and what rights you have over it.

We process personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

Information you give us

• Account details — your name, email address, phone number and password, if you choose to create an account.
• Order details — the items you buy, your delivery address, and contact details for the delivery.
• Correspondence — the content of emails and enquiries you send us.
• Marketing preferences — whether you have asked to receive our newsletter.

Information collected automatically

• Technical data — IP address, browser type, device type, and pages visited, used to keep the store working and secure.
• Browser storage — your shopping bag and, if you sign in, your session are stored in your own browser. See Cookies and browser storage.

Payment information

We never see or store your card details. Payment is taken on a secure checkout page hosted by Shopify, and card data goes directly to Shopify and its payment processors. We receive only confirmation that a payment succeeded, along with the order details.

We use your personal information to:

• process, fulfil and deliver your orders;
• send order confirmations, shipping notices and receipts;
• respond to your questions, returns and support requests;
• maintain your account and order history, if you have one;
• send you marketing emails, only where you have asked us to;
• detect and prevent fraud, abuse and technical problems; and
• meet our legal, tax and accounting obligations.

We do not sell your personal information, and we do not use it for automated decision-making or profiling that produces legal effects.

Under the Data Privacy Act, we rely on the following grounds:

• Contract — processing needed to fulfil an order you have placed.
• Consent — for marketing emails, which you may withdraw at any time.
• Legal obligation — for tax, accounting and record keeping.
• Legitimate interests — keeping the store secure and improving it, balanced against your rights.

We share personal information only with service providers who help us run the store, and only as far as they need it:

• Shopify — our commerce platform. Hosts the catalogue, checkout, payments, customer accounts and order records.
• DigitalOcean — hosting for this website and its backend service.
• Payment processors — engaged through Shopify to take payment securely.
• Couriers and logistics partners — given the name, address and phone number needed to deliver your order.

We may also disclose information where required by law, a court order, or a lawful request by a government authority.

This store keeps two things in your browser’s local storage rather than on our servers:

• Your shopping bag — so items are still there if you close the tab or return from checkout.
• Your sign-in session — a token that keeps you logged in until it expires or you sign out.

Clearing your browser storage removes both. Shopify also sets its own cookies during checkout to keep your basket and payment session secure; these are governed by Shopify’s privacy policy.

• Order records — retained for approximately 10 years, as required for tax and accounting purposes.
• Account details — kept while your account is active. Ask us to close it and we will delete or anonymise your details, except records we are legally required to keep.
• Marketing preferences — kept until you unsubscribe, plus a record of the unsubscribe itself so we do not contact you again.

Under the Data Privacy Act of 2012 you have the right to:

• be informed about how your data is processed;
• access the personal information we hold about you;
• correct anything inaccurate or out of date;
• object to processing, including direct marketing;
• erasure or blocking of your data in the circumstances the law allows;
• data portability — receive a copy in a commonly used electronic format;
• damages for inaccurate, incomplete or unlawfully obtained data; and
• lodge a complaint with the National Privacy Commission.

To exercise any of these, email [email protected]. We may need to verify your identity first, and we will respond within the period required by law.

This site is served over HTTPS, and payment pages are hosted and secured by Shopify. Access to order and customer data is limited to staff who need it to run the store, and our systems credentials are stored encrypted and rotated when necessary.

No method of transmission or storage is completely secure. If a breach occurs that is likely to put your rights at risk, we will notify you and the National Privacy Commission as required by law.

This store is intended for use by adults. Purchases by or for students under the age of 18 should be made by a parent, guardian, or authorised school representative, who is responsible for the details submitted.

We do not knowingly collect personal information directly from children without parental consent. If you believe a child has provided us with personal information, contact [email protected] and we will delete it.

Shopify and DigitalOcean operate infrastructure outside the Philippines, so your information may be stored or processed abroad. We use providers that offer contractual and technical safeguards consistent with the Data Privacy Act, and we remain accountable for information transferred to them.

We may update this policy as the store changes or the law requires. The date at the top of this page shows when it was last revised. Material changes will be highlighted on the site.

For any question about this policy or your personal information, contact our Data Protection Officer:

• Email: [email protected]
• Phone: +63 2 8816 4233
• Address: 14th Drive, University Parkway, Bonifacio Global City, Fort Bonifacio, Taguig City, Philippines

You may also complain to the National Privacy Commission if you believe your rights have been infringed.