1. Who we are

This notice explains how we handle your personal data under the Data Privacy Act of 2012 (RA 10173). Yang's Fried Rice is the personal information controller: we decide how your data is used, and we answer for it.

Yang's Fried Rice, Malate Branch, Manila. Contact us at lleyton.flores.482006@gmail.com or 0962 693 9019, or ask at the counter.

2. What we collect

• Account: first and last name, email, mobile number, that you confirmed you are 18 or have a parent's permission, password (stored scrambled, never readable) and an optional profile photo. We do not ask for your address or your date of birth: all orders are picked up at the store.
• Orders: the items, special instructions, totals, payment method, any tip, the bill you said you would pay with (so we have change), the status and times of each order, and whether a ready order was never picked up.
• Payments: the payment reference and whether it went through. Your GCash or Maya login stays with PayMongo; we never see it.
• Senior citizen or PWD discount: if you claim it, the ID number, the name on the ID and a photo of the ID.
• Reviews you leave on an order.
• Problem reports: the items you mark as missing, wrong or damaged, and a photo if you add one. Photos are private: only you and our staff can see them.
• Security logs: failed sign-in attempts, with the IP address and a scrambled copy of the email used.
• Cookies: only the ones that keep you signed in. We use no advertising or tracking cookies.

3. Why we use it, and on what basis

• To create your account, sign you in, prepare your order, take payment, give refunds and deal with a problem you report — to carry out our contract with you.
• To check that a Senior Citizen or PWD discount is allowed and to keep sales records — because the law requires it (RA 9994, RA 10754, the Tax Code).
• To stop fraud, repeated failed sign-ins and orders that are never collected — our legitimate interest in keeping the shop running. Two pay-in-store orders not picked up switch pay in store off for that account.
• To tell you about your order in the app and by email — to carry out our contract with you.

4. How long we keep it

• Account details: until you ask us to delete your account.
• Orders and payment records: five years, because tax law requires us to keep sales records.
• Discount ID photo: deleted as soon as your order is completed. The ID number and name on the ID stay with the sales record.
• Problem reports: the photo is deleted when you delete your account; the note is cleared 180 days after the report is resolved.
• Failed sign-in records: 30 days.
• Notifications: 90 days once read, 180 days at most.
• A cart you never checked out: 30 days after you last changed it.

5. Who we share it with

We do not sell your data. Only these parties receive it:

• Supabase — stores our database, sign-ins and files.
• PayMongo — processes GCash and Maya payments.
• Vercel — hosts this website.
• Resend — sends our order emails.
• Our store staff, who need it to prepare your order.
• Government agencies, when the law requires it.

6. Data stored outside the Philippines

Supabase, Vercel and Resend may store or process your data on servers outside the Philippines. We only use providers that protect it with encryption and access controls, and we stay responsible for it under Philippine law.

7. Your rights

Under the Data Privacy Act, you have the right to:

• be told how your data is used;
• see a copy of your data;
• correct data that is wrong;
• object to its use, or ask us to delete or block it;
• get your data in a format you can take elsewhere (data portability);
• be compensated for damage caused by misuse of your data;
• complain to the National Privacy Commission (privacy.gov.ph).

You can correct most details yourself on your profile page, and delete your account there too. Deleting it removes your profile, photos, notes, review comments and notifications. Your past orders stay as unnamed sales records, which tax law requires us to keep. For anything else, contact us:

Yang's Fried Rice, Malate Branch, Manila. Contact us at lleyton.flores.482006@gmail.com or 0962 693 9019, or ask at the counter.

8. Changes to this notice

We will update this page if anything changes. The date at the top shows the last change.