Privacy Policy

UR Amazing Enterprises ("UR Amazing," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, shop through our online store, or interact with us through Messenger or other channels, in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

This Policy applies across all UR Amazing digital properties, including our WordPress-hosted brand website and our Shopify-hosted online store, referred to together in this Policy as the "Site."

1. Who we are

UR Amazing Enterprises is the Personal Information Controller (PIC) responsible for the personal data collected through the Site, as that term is defined under the Data Privacy Act. Our business details are:

2. Information we collect

We collect personal data directly from you, automatically through your use of the Site, and from third parties who help us operate our store and marketing.

2.1 Information you give us directly

• Contact and account details: full name, email address, phone number, delivery and billing address.
• Order and payment details: products purchased, order history, and payment information processed through our payment partner (PayMongo). We do not directly store your full card or payment credentials — these are handled by our PCI-compliant payment processor.
• Messenger and inquiry details: messages, skin concerns, or preferences you share with us through Facebook Messenger, Instagram Direct, email, or contact forms.
• Reviews and feedback: any testimonials, reviews, or content you voluntarily submit.

2.2 Information collected automatically

• Device and usage data: IP address, browser type, device type, pages visited, and time spent on the Site, collected through Shopify's and WordPress's standard analytics and our own tracking.
• Cookies and similar technologies: see Section 6 for details on the specific cookies we use.

2.3 Information from third parties

• Shopify (our e-commerce platform), which processes checkout, order, and customer account data on our behalf.
• PayMongo (our payment processor), which shares limited transaction confirmation data with us (e.g., payment status), without giving us your full payment credentials.
• Meta (Facebook/Instagram), when you interact with our ads, Page, or Messenger.

3. Why we collect and use your data

In line with Section 11 of the Data Privacy Act, we only process personal data for legitimate, specified, and declared purposes, and we limit collection to what is reasonably necessary for those purposes:

4. How we share your data

We do not sell your personal data. We only share it with the following categories of recipients, each bound by confidentiality and data protection obligations:

• Shopify Inc. — our e-commerce hosting and checkout platform.
• PayMongo — our payment processing partner, for transaction handling.
• Delivery and logistics partners — to fulfill and deliver your orders.
• Meta Platforms, Inc. — where you choose to message us via Messenger/Instagram, or interact with our ads.
• Government authorities or regulators — where required by law, court order, or a valid request from the National Privacy Commission or other competent authority.

Where any of these third parties process data on our behalf outside the Philippines, we take reasonable steps to ensure they maintain a comparable standard of protection to that required under the Data Privacy Act.

5. How long we keep your data

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, or as required by law (for example, the Bureau of Internal Revenue's record-keeping requirements). Order and transaction records are generally retained for [e.g., 5 years] to comply with tax and accounting regulations. Once the retention period lapses and data is no longer needed, we securely dispose of or anonymize it.

6. Cookies and similar technologies

Our Site uses cookies set by Shopify and WordPress to operate correctly (e.g., keeping items in your cart, remembering your session), as well as analytics and advertising cookies (e.g., Meta Pixel) to understand how the Site is used and to measure our ads.

Where required, we will present a cookie consent banner allowing you to accept or decline non-essential cookies, consistent with NPC Circular No. 2023-04's prohibition on pre-ticked consent boxes and cookie walls that force acceptance before you can access the Site. You can also manage cookies through your browser settings at any time.

7. How we protect your data

In line with Section 20 of the Data Privacy Act, we implement reasonable and appropriate organizational, physical, and technical security measures to protect your personal data against accidental or unlawful destruction, alteration, disclosure, or access, including:

• Use of Shopify's and our payment processor's PCI-DSS-compliant, encrypted checkout infrastructure.
• Restricted, role-based access to customer data among our team.
• Secure, password-protected access to our WordPress admin and Shopify admin panels.
• Regular review of our data handling practices as our business grows.

8. Data breach notification

In the event of a personal data breach that poses a real risk of serious harm to you, we will notify both the National Privacy Commission and affected data subjects within seventy-two (72) hours of discovering the breach, in accordance with NPC breach notification rules, followed by a full breach report as required.

9. Your rights as a data subject

Under Sections 16 to 18 of the Data Privacy Act, you have the right to:

• Be informed that your personal data will be, is being, or has been processed.
• Access your personal data that we hold, upon reasonable request.
• Object to the processing of your data, including for direct marketing purposes.
• Correct any inaccurate or outdated personal data we hold about you.
• Erasure or blocking of your data under certain conditions, such as when it is no longer necessary for the purpose it was collected.
• Data portability — to obtain a copy of your data in an electronic, structured, and commonly used format.
• Damages — to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.
• File a complaint with the National Privacy Commission if you believe your rights have been violated.

To exercise any of these rights, contact us using the details in Section 12. We will respond within a reasonable time and in accordance with NPC guidelines.

10. Children's privacy

Our Site and products are not directed at children, and we do not knowingly collect personal data from individuals under 18 years of age without the consent of a parent or legal guardian. If we learn that we have inadvertently collected such data, we will take steps to delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our platforms, or applicable law. Material changes will be posted on this page with an updated "Last updated" date, and where appropriate, we will notify you directly.

12. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, you may reach us at:

If you believe your data privacy rights have been violated and we have not adequately addressed your concern, you may file a complaint with the National Privacy Commission: