Stitchie’s Privacy Policy

Effective date: 2026-10-25

This policy explains what personal data Stitchie’s collects when you use the Stitchie’s website, why we collect it, who receives it, how long we keep it and the choices you have. It is our privacy notice under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). By using the website you acknowledge this policy.

Who we are and contact

Stitchie’s sells made-to-order clothing through this website. Stitchie’s decides why and how your personal data is processed, so it is the personal information controller. You can reach us at manalo.rommel@gmail.com (Rommel Manalo), Batangas City, Batangas, Philippines 4200.

Data we collect

If you choose Google to sign in, we ask Google for your basic profile and email address. From Google we receive and store your name, email address and profile picture, and the provider tokens on your account record: the access token Google issues for your sign-in and a refresh-token field beside it, which holds a placeholder value when Google sends no refresh token. We use Google user data only to create your Stitchie’s account and sign you in. We do not sell it, do not use it for advertising and do not share it except as needed to run the service.

Once you are signed in, we also create a login session token. It is a SHA-256 value. Your account record stores it, and your browser keeps the same value under the local storage key stitchies:login-token (see “Browser storage, cookies and the Messenger chat plugin” below).

If you choose Facebook to sign in, Facebook gives every app your public profile automatically, and we also request your email address. From Facebook we receive and store your name, email address and profile picture, and the provider tokens on your account record: the access token Facebook issues for your sign-in and a refresh-token field beside it, which holds a placeholder value when Facebook sends no refresh token.

Checkout and orders

At checkout we ask for a mobile number (required) and an email address (optional); both are saved on your account.
Your order records the items you chose and any customization notes you wrote for each item, and a copy of your name, email address, profile picture and mobile number.
You can change your name and phone number on your account page.
At checkout you choose GCash, card or cash on delivery. Online payment is made on PayMongo’s hosted checkout page, which may also offer other methods such as PayMaya and QR Ph. You enter your card details on PayMongo’s page, so your full card number never reaches Stitchie’s servers. PayMongo tells us when a payment is made. We record the payment method and amount, and we keep PayMongo’s payment record, which can include the card brand, the issuing country and the last four digits of the card, and the billing name, email address, phone number and address you gave PayMongo.
We send the order confirmation email through Mailgun from hello@stitchies.me to the email address on your account. If you give a different email address at checkout, it replaces the one on your account and the confirmation goes to it.

What we do not collect

The website has no analytics, advertising pixels or tracking code of our own. Our checkout has no delivery-address field, and the website has no body-measurement field.

How we use it

To create your account and sign you in.
To take, make, collect payment for and deliver your orders, and to contact you about them.
To send your order confirmation email.
To meet our accounting, tax and legal obligations.

We do not use your personal data for advertising.

We do not sell your personal data. We share it only with the providers that help us run the service, and only as needed for the purpose below:

Google and Facebook — to sign you in, when you choose them.
PayMongo — to process online payments.
Mailgun — to send order confirmation emails.
Our hosting provider — to store and serve the website, API and database.

We may also disclose personal data when the law requires it.

Browser storage, cookies and the Messenger chat plugin

The website’s own code sets no cookies. It stores these items in your browser’s local storage so the site can work:

stitchies:login-token and stitchies:login-userId — keep you signed in.
stitchies:cart-order-id — remembers your bag.
stitchies:promo-code — remembers a promo code you entered.

You can clear these at any time in your browser settings; you will be signed out and your bag will be forgotten.

Third parties also load on our pages. Our pages load fonts from Google Fonts on Google’s servers. Every page also loads the Facebook Messenger chat plugin, which loads Facebook’s script and is run by Facebook. Anything you write in the chat is held by Facebook, not by Stitchie’s website.

Storage, security and retention

We keep your data on the servers of our hosting provider. Our servers keep technical logs. No method of storage or transmission is perfectly secure, so we cannot guarantee absolute security.

We keep your account data for as long as your account exists. Order and payment records, including the name, email address, profile picture and mobile number copied onto each order, are kept only as long as our accounting, tax or legal obligations require, then deleted. When you ask us to delete your data, we follow the steps in “How to delete your data” below.

Your rights

Under the Data Privacy Act you have the right to:

be informed about how your personal data is processed;
access the personal data we hold about you;
correct inaccurate or outdated data;
object to the processing of your data;
ask us to erase or block your data;
receive your data in a portable format; and
lodge a complaint with the National Privacy Commission of the Philippines.

To use any of these rights, email us at manalo.rommel@gmail.com from the email address on your account.

How to delete your data

You can ask us to delete your account and the personal data tied to it at any time. See how to delete your data for the steps, what gets deleted and what we keep.

Changes to this policy

We may update this policy from time to time. The effective date at the top shows when the current version took effect; please review it periodically.