Privacy Policy

1. Information We Collect

When you create an account, place an order, or contact us, we may collect:

• Your name, email address, and password (stored securely, never in plain text)
• Order history, favorites, and loyalty points balance
• Messages you send us through the contact form or in-app chat
• Basic usage data (pages visited, device/browser type) for improving the Service

2. How We Use Your Information

We use your information to:

• Process and fulfill your orders
• Maintain your account and rewards balance
• Send password-reset codes and order-related notifications
• Respond to questions or support requests
• Improve our menu, service, and website

3. Sharing Your Information

We don't sell your personal information. We only share it with service providers that help us operate — such as email delivery for password resets — and only as needed to provide the Service, or when required by law.

4. Data Security

Passwords are hashed, not stored as plain text, and account access is protected against automated guessing. No online service can guarantee absolute security, but we take reasonable steps to protect your information.

4a. Identity Verification (Valid ID)

When you register, you provide a photo of a valid ID. Our system automatically checks only that the photo is clear enough to read (for example, that it is not blurry or too dark). It does not check whether the ID is genuine and does not use face recognition. Authorized AGAFE management then compares the ID with the name and date of birth you registered and approves or rejects the verification.

Your account can be used while the review is pending; Cash on Delivery is unlocked only after your identity is approved. The ID image is stored encrypted outside the public website, is accessible only to specifically authorized management, and every access is logged. After an approval the encrypted image is kept for a limited period (currently up to 12 months) so management can investigate fraud, fake orders or payment disputes on the account, then it is securely deleted; a rejected image is deleted with its record. We keep the verification result and its history.

Government IDs are sensitive personal information under the Data Privacy Act of 2012 (Republic Act No. 10173). You may ask us about, or object to, this processing using the contact details below; without an approved verification, Cash on Delivery is not available.

5. Your Choices

You can update your account details from Settings, unsubscribe from the newsletter at any time using the link in any email, and request that we delete your account by contacting us.

6. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent revision.

7. Contact

Questions about this Privacy Policy? Reach us at agafebnb@gmail.com or via our Contact page.