Privacy Policy

Last updated: September 23, 2026

This Privacy Policy explains what information Zyplay (“Zyplay”, “we”, “us”) collects through this storefront, why we collect it, and how it's used and protected.

Information We Collect

We collect information you provide directly when you use the storefront, including:

  • Account information — the email address and password used to create and sign in to your Zyplay account (customer accounts are required to check out).
  • Profile information — your name and contact details, where you provide them.
  • Shipping addresses — the delivery addresses you save or enter at checkout, including province, which we use to determine your shipping region and fee.
  • Order information — the products, quantities, and prices in orders you place, along with order status and history.
  • Payment-reference information — the payment amount assigned to your order and any reference details you submit when confirming a payment. We do not collect your online banking password, PIN, or full card details through this storefront.
  • Payment-proof images — screenshots or images you upload as proof of payment for an order. These are stored in a private file storage bucket that is not publicly accessible, and are used solely to verify that payment for your order was made.

How We Use Your Information

We use the information above to:

  • Create and maintain your customer account and order history.
  • Process orders, calculate shipping fees, and reserve inventory or preorder capacity.
  • Verify submitted payments against orders before treating an order as paid.
  • Fulfill and ship orders to the address you provide.
  • Provide customer support in connection with your orders.
  • Help prevent fraudulent or abusive use of the storefront.

Order Records & Historical Snapshots

To keep order history accurate over time, Zyplay retains a snapshot of relevant details as they were at the time an order was placed — such as the delivery address, product details, and pricing used for that order — even if your saved address or account details, or the current product listing, later change.

Service Providers

Zyplay uses Supabase to host our application database, customer authentication, and private file storage (including payment-proof images). Supabase processes this information on our behalf to operate the storefront and does not independently use it for its own purposes.

Data Retention

We retain account and order information for as long as your account is active and as needed to maintain accurate order records, respond to support requests, and meet reasonable business and recordkeeping needs. Specific retention periods for individual data types are still being finalized.

Your Choices & Rights

You can review and update most of your account and address information directly from your account pages. Under the Philippine Data Privacy Act of 2012 (RA 10173), you may have rights to access, correct, or request deletion of personal data we hold about you. For requests we can't handle from your account pages — such as questions about your data or a request to close your account — please reach us through the Contact page.

Security

We take reasonable measures to protect your information, including storing payment-proof images in a private, non-public storage bucket. However, no method of storing or transmitting information online is completely secure, and we cannot guarantee absolute security of your data.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last updated” date on this page.

Contact Us

If you have questions about this Privacy Policy or how your information is handled, please visit our Contact page.

This policy describes our current practices and is not a substitute for formal legal advice. It is scheduled for a final legal/compliance review before production launch.