Privacy Policy

1. Introduction

Welcome to Miles Prints Lumina ("we," "us," or "our"). We are committed to protecting your personal information and respecting your right to privacy in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you access or use our web application at milesprints-lumina.com (the "Service"). By using our Service, you consent to the practices described in this policy.

If you do not agree with the terms of this Privacy Policy, please do not use our Service.

2. Who We Are (Personal Information Controller)

Miles Prints Lumina acts as the Personal Information Controller (PIC) as defined under the Data Privacy Act of 2012. We determine the purposes and means by which your personal data is processed.

For privacy-related concerns, you may contact our Data Protection Officer (DPO):

• Email: [email protected]
• Website: milesprints-lumina.com
• Address: Philippines

3. What Personal Information We Collect

We collect the following categories of personal information:

3.1 Order and Fulfillment Information

• Email address — used to send order confirmations and delivery tracking updates
• Shipping address — used solely to fulfill and deliver your order

We collect only the information necessary to process and deliver your order. We do not collect your full name, phone number, or any other personal details beyond what is listed above unless you voluntarily provide them when contacting us for support.

• Facebook Messenger ID — collected when you opt in to receive order updates via our Facebook Messenger integration. This is used solely to send you automated order status notifications (e.g., order confirmed, shipped, out for delivery).

3.2 Payment and Financial Information

• Transaction reference numbers and order amounts
• Payment status (e.g., paid, pending, failed)

Note: Payment processing is handled by PayMongo (paymongo.com), a BSP-regulated payment processor based in the Philippines. When you make a payment, you are redirected to PayMongo's hosted payment page. We do not receive, process, or store your card details, e-wallet credentials, or any other raw payment information — these are handled entirely by PayMongo in accordance with their own Privacy Policy and PCI-DSS standards.

3.3 Usage and Analytics Data

• Browser type and version
• Device type and operating system
• Pages visited, features used, and time spent on the Service
• Referring URLs and clickstream data
• Error logs and diagnostic information

3.4 Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. See Section 10 for details.

4. How We Collect Your Information

We collect personal information through the following means:

• Directly from you — when you register an account, make a purchase, fill out forms, or contact us
• Automatically — through cookies, log files, and analytics tools when you use the Service
• From third parties — such as payment processors, analytics providers, or social login services (if applicable)

5. Purposes for Which We Use Your Information

We process your personal data only for legitimate purposes, specifically:

We will not process your personal data for purposes incompatible with those stated above without your prior consent.

6. Sharing of Personal Information

We do not sell your personal data. We may share your information with the following third parties only to the extent necessary:

• PayMongo — our payment processor, regulated by the Bangko Sentral ng Pilipinas (BSP), who handles all payment transactions on their hosted page. Your payment data is subject to PayMongo's Privacy Policy. We only receive transaction confirmation and reference numbers from PayMongo.
• Meta Platforms, Inc. (Facebook Messenger) — when you opt in to Messenger notifications, your Facebook Messenger ID and order information are shared with Meta solely to deliver automated order status updates. Your use of Messenger is subject to Meta's Privacy Policy. You may opt out of Messenger notifications at any time by messaging us or adjusting your notification preferences.
• Analytics providers — to help us understand how the Service is used
• Cloud hosting and infrastructure providers — to store and operate the Service
• Email service providers — to send transactional and marketing communications
• Legal and regulatory authorities — when required by Philippine law, court order, or government regulation
• Business successors — in the event of a merger, acquisition, or sale of assets, subject to continued compliance with this Privacy Policy

All third-party service providers we engage are required to handle your data in a manner consistent with the Data Privacy Act of 2012 and this Privacy Policy.

7. Retention of Personal Data

We retain your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy, or as required by Philippine law. Specifically:

• Account data — retained for the duration of your account, and up to 5 years after account closure for legal and audit purposes
• Transaction/financial records — retained for a minimum of 10 years in compliance with Philippine tax and accounting regulations (NIRC, BIR requirements)
• Usage and analytics data — retained for up to 2 years
• Communications/support records — retained for up to 3 years

When personal data is no longer needed, we securely dispose of it in accordance with NPC guidelines.

8. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data:

1. Right to be Informed — You have the right to know how your data is being collected and processed.
2. Right to Access — You may request a copy of the personal data we hold about you.
3. Right to Rectification — You may request correction of inaccurate or incomplete data.
4. Right to Erasure or Blocking — You may request deletion or blocking of your personal data under certain circumstances.
5. Right to Object — You may object to the processing of your personal data, including for direct marketing purposes.
6. Right to Data Portability — You may request a copy of your data in a structured, commonly used format.
7. Right to File a Complaint — You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your rights under the DPA have been violated.

To exercise any of your rights, please contact our DPO at [email protected]. We will respond to your request within 15 business days as required by NPC guidelines.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction, including:

• SSL/TLS encryption for data in transit
• Access controls and role-based permissions
• Regular security assessments and vulnerability testing
• Secure third-party payment processing (PCI-DSS compliant)

In the event of a personal data breach that may pose a risk to your rights and freedoms, we will notify the National Privacy Commission and affected data subjects in accordance with NPC Circular 16-03 (Personal Data Breach Management) within 72 hours of discovery.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you logged in to your account
• Remember your preferences and settings
• Analyze usage patterns and improve the Service
• Deliver relevant content and features

You may manage or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

11. Children's Privacy

Our Service is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from a minor, we will delete it promptly. Parents or guardians who believe their child has provided us with personal data may contact us at [email protected].

12. Links to Third-Party Websites

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will:

• Post the updated policy on this page with a new Last Updated date
• Notify registered users via email or in-app notification where required

Your continued use of the Service after the effective date of the updated policy constitutes your acceptance of the changes.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

We are committed to resolving any concerns you may have in a timely and transparent manner.

This Privacy Policy is governed by the laws of the Republic of the Philippines, including but not limited to Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.