Rewards Hub

Rewards Hub

Privacy Policy

Last updated 27 September 2026

This Privacy Policy explains how Rewards Hub (“we”, “us”) processes personal information when you create an account, visit a partner shop, or operate a shop workspace. It is written to comply with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC).

1. Personal information we collect

Depending on how you use the Service, we may process:

  • Identity: first name, last name, and the combined display name used in the app.
  • Account: email address, hashed password, public membership code, role (customer, owner, staff, or administrator), and account status.
  • Shop and loyalty: shops you visit, point balances, earn and redeem history, perks claimed, and (for owners) storefront, product, and team data.
  • Technical: session cookies needed to keep you signed in, device and approximate log data used to secure the Service.

We do not require sensitive personal information (as defined under RA 10173) to create a customer account. Do not submit government IDs, health data, or similar records through free-text fields unless a shop has a lawful basis and a separate notice.

2. Purpose and lawful basis

We process personal data to:

  • create and authenticate your account (contract / legitimate interest in security);
  • operate shop-scoped points and perks (contract with you and with the shop);
  • let platform administrators register shops and support accounts (legitimate interest);
  • comply with legal obligations and NPC or law-enforcement requests when required;
  • improve reliability and prevent fraud (legitimate interest, with safeguards).

Account creation requires your consent to this Policy and the Terms of Service. You may withdraw consent by requesting account closure, subject to data we must keep for law or dispute resolution.

3. Sharing

Partner shops see only what they need to serve you at that shop (for example, your name as shown on the membership profile and that shop’s point balance). We do not sell personal data. Processors that host the Service (such as our database and hosting providers) act under contract and may only process data on our instructions.

4. Data retention and disposal

Under RA 10173, personal data shall not be retained longer than necessary for the declared purpose, or as otherwise allowed by law.

  • Active accounts: identity and account data are kept while the account remains open.
  • Loyalty ledger: earn, redeem, and adjustment records for a shop are kept for five (5) years after the last transaction on that shop, to support dispute handling, fraud review, and ordinary business recordkeeping.
  • Closed or deleted accounts: we delete or anonymize profile fields within thirty (30) days of a verified deletion request, except information we must retain for a longer period under tax, accounting, or other applicable Philippine law, or to establish or defend legal claims. Those remnants are isolated and not used for marketing.
  • Security logs: typically up to twelve (12) months, unless an incident requires a longer hold.

When retention ends, we dispose of personal data in a secure manner so it cannot reasonably be reconstructed.

5. Your rights (RA 10173)

You may request, subject to lawful exceptions:

  • to be informed of processing;
  • access to your personal data;
  • rectification of inaccurate data;
  • erasure or blocking when processing is unlawful or no longer necessary;
  • object to processing based on legitimate interest, including direct marketing;
  • data portability where technically feasible;
  • damages under the Act, and the right to file a complaint with the NPC.

Send privacy requests to help@rewards-hub.shop. We will respond within the periods required by the Act and NPC rules. You may also reach the National Privacy Commission at privacy.gov.ph.

6. Security

Passwords are stored hashed. Access to admin tools is limited to authorized administrators. No method of transmission is perfectly secure; report suspected incidents to help@rewards-hub.shop.

7. Children

The Service is intended for users who can form a contract under Philippine law. If you believe we hold data of a child without proper authority, contact us so we can delete it.

8. Changes

We will post updates on this page and change the “Last updated” date. Material changes that affect your rights will be highlighted on sign-in or by email when we have a working address.

Terms of Service · Privacy Policy · Create account