1. Overview

COSOVA (hereinafter “we”, “us”, or “COSOVA”) is committed to protecting personal data. This Privacy Policy explains how we collect, use, store, process, and disclose personal data through our website (https://cosovaph.com), mobile applications, social media channels, and related services, and describes the rights available to individuals in the Philippines.

2. Scope

This Policy applies to personal data collected directly by COSOVA and personal data processed by third parties (including payment gateways, logistics providers, and third-party platforms). If you access our services via a third-party platform, that platform’s privacy policy may also apply.

3. Legal Basis and Compliance

We process personal data in accordance with the Philippines’ Data Privacy Act of 2012 and its implementing rules and regulations, as well as applicable regulatory guidance and industry best practices.

4. Categories of Personal Data We Collect

· Identifiers: name, company/organization name (if applicable), date of birth (if applicable).

· Contact information: email address, phone number, billing and shipping addresses.

· Transaction and payment data: order details, invoices, proof of payment (payment card details are held by third-party payment processors).

· Shipping and logistics data: recipient name, tracking numbers, return history.

· Customer service communications: emails, chat transcripts, call recordings (if applicable).

· Device and usage data: IP addresses, browser type, operating system, cookie data, and usage analytics.

· Preferences and marketing data: communication preferences, shopping preferences, promotional interaction records.

· Sensitive data: except where expressly required and with explicit consent, COSOVA does not intentionally collect sensitive personal data as defined under Philippine law.

5. Purposes of Processing

We process personal data for order fulfillment and transactional processing; customer service and after-sales support; payment verification and fraud prevention; logistics coordination and delivery; legal and tax compliance; service and product improvement, analytics and marketing (where consent has been obtained); and other purposes for which you have given consent.

6. Disclosure & Recipients

To provide our services, we may disclose personal data to payment gateways (e.g., PayMongo), logistics and warehousing providers, customer support and outsourced service providers, and lawful authorities when required. In the event of a corporate transaction (e.g., merger or asset transfer), personal data may be transferred to the acquiring entity subject to contractual protections.

7. Cross-Border Transfers

Personal data may be transferred to or stored in countries outside the Philippines to fulfill contractual obligations or provide services. We will implement reasonable technical and organizational measures and comply with applicable legal requirements to protect transferred data.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to maintain sessions, improve user experience, perform analytics, and support marketing activities. You can manage or reject cookies through your browser settings; however, this may affect website functionality.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, for compliance with legal obligations, or to enforce our agreements. Transaction records are retained in accordance with Philippine accounting and tax laws (typically at least five years); other retention periods depend on legal and business requirements.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards (e.g., access controls, encryption in transit, backups, security testing) to protect personal data. In the event of a security incident affecting personal data, we will take remedial actions and notify affected individuals and regulators as required by law.

11. Your Rights

Subject to applicable law, you may exercise rights including: access, rectification, erasure (in certain circumstances), portability, objection or restriction of processing, and withdrawal of consent. Submit requests via the contact details below; we will process requests in accordance with legal timelines and requirements.

12. Minors

We do not knowingly collect personal data from children under 18 without parental or guardian consent. If you believe we have collected a child’s personal data without such consent, contact us so we can investigate and take corrective measures.

13. Contact

Privacy Contact: COSOVA
Email: info@cosovaph.com

14. Policy Updates

We may update this Policy to reflect changes in legal, regulatory, or business practices. Material changes will be posted on our website with an updated effective date. Please review this Policy periodically.