Skip to content
ANAFruit Wines

Legal

Privacy policy

This policy explains what personal information we collect when you use this website or buy from us, why we collect it, who we share it with, and the rights you have over it under the Data Privacy Act of 2012 (Republic Act No. 10173).

Last updated

Who is responsible for your data

ANA Fruit Wines is the personal information controller for the data described here. Our address is To be supplied: Business address, and you can reach us at orders@anawine.com or +63 977 276 0619 (Globe) / +63 969 394 3524 (Smart).

The information we collect

We do not have customer accounts. We only collect what we need to take and deliver your order:

  • Your first and last name, email address and phone number.
  • Your delivery address, any delivery instructions you add, and a billing address if it is different.
  • What you ordered, the prices, the shipping cost and the order status, including courier and tracking details once shipped.
  • Your confirmation that you meet the minimum age, and the time you gave it.
  • Payment status and reference numbers from our payment provider. We never receive or store your card details.
  • Anything you tell us when you contact us, such as emails and photos sent with a delivery problem.

To protect checkout and payment from abuse, we use a hashed form of your IP address and email address, used only to limit repeated requests. Our hosting provider may also keep standard technical logs, which can include IP addresses, for security and to keep the site running.

How we use it, and why we are allowed to

We use your information to:

  • Process your order, take payment and deliver your wine. This is needed to perform our contract with you.
  • Check that you meet the minimum age to buy alcohol. This supports our legal obligations as a seller of alcohol and our legitimate interest in selling responsibly.
  • Contact you by email about your order, for example with a shipping quote and a payment link. These messages are part of the service you asked for, not marketing.
  • Handle returns, refunds, complaints and questions.
  • Keep business and tax records, as the law requires.
  • Keep the site secure and prevent fraud and abuse, which is our legitimate interest.

We do not make decisions about you by purely automated means, and we do not sell your information.

Who we share it with

We share your information only with the service providers that help us run the shop, and only what each one needs:

  • PayCools, which processes your payment on its hosted checkout page.
  • Supabase, which hosts our database where orders are stored.
  • Cloudflare, which carries traffic between your browser and this website.
  • Google (Google Workspace), which we use to send you order-related emails.
  • The courier delivering your order, who receives your name, phone number and delivery address.

These providers act on our behalf, and we remain responsible for how they handle your data. We may also disclose information when the law requires it, for example to a government authority with a lawful request.

Data sent outside the Philippines

Some of our service providers may store or process data on servers outside the Philippines. For international orders, your details also go to couriers and customs in the destination country. Wherever your data goes, we remain accountable for protecting it as required by Philippine law.

How long we keep it

  • Order records, including your name, contact details and address: for as long as tax and accounting laws require us to keep them.
  • Emails and messages with you about an order or a problem: 2 years after the matter is closed.

After that, we delete or anonymise the information unless we need it to deal with a legal claim.

Keeping it safe

Data between your browser and this site is encrypted. Only authorised staff can sign in to see orders. Your private order link contains a secret code, so only people you share it with can see your order.

If a data breach puts your personal information at real risk, we will notify the National Privacy Commission and you within 72 hours of finding out, as the rules require.

Cookies and browser storage

We use only what the site needs to work. We do not use analytics, advertising or tracking cookies.

  • Your cart is saved in your browser's local storage. It holds only which wines you picked and how many. We receive it only when you go to checkout.
  • When you confirm your age on entry, a small cookie remembers that choice for 30 days so we do not ask on every visit.
  • During checkout, your browser keeps a temporary reference for the current tab so that the same order is not placed twice. It is cleared when you close the tab.
  • Staff who sign in to our admin area receive a sign-in cookie. Customers never do.

Your rights

Under the Data Privacy Act you have the right to:

  • Be informed about how your data is collected and used.
  • Access the personal information we hold about you.
  • Correct information that is wrong or incomplete.
  • Object to processing, or ask us to erase or block your data, where there are grounds to do so.
  • Receive a copy of your data in a commonly used electronic format (data portability).
  • Claim damages if you are harmed by inaccurate, incomplete, outdated, false or unlawfully used information.
  • File a complaint with the National Privacy Commission.

To use any of these rights, contact our data protection officer (below). We may need to confirm your identity first. Some requests may be limited when we must keep records by law, for example order and tax records. If a person has died or cannot act, their lawful heirs or assigns may exercise these rights for them.

Our data protection officer

Questions or requests about your personal data can go to our data protection officer: To be supplied: Data protection officer. You can also write to us at orders@anawine.com or To be supplied: Business address.

Complaints

If you are unhappy with how we handle your data, please tell us first so we can try to fix it. You also have the right to complain to the National Privacy Commission (privacy.gov.ph).

Marketing

We do not send marketing emails. If we ever start, we will only send them to people who have clearly opted in, and every message will let you unsubscribe.

Changes to this policy

We will update this policy if the way we handle personal data changes. The date at the top shows the latest version. If a change is significant, we will say so clearly on this page.