Requesting your data

What you can ask for

• To be told what personal information we hold about you, and why.
• A copy of it, in a form you can read and take elsewhere.
• A correction, where something we hold is wrong or out of date.
• Removal of what we are not required to keep.
• That we stop a particular kind of processing, such as marketing email.

How to ask

Write to privacy@resibo.ph. Tell us which of the above you want, and enough for us to find you: the email address on the account, and the registered business name if you are a seller.

We will confirm it is really you before we hand anything over. That step is not bureaucracy, it is the reason a request like this cannot be used against you by somebody else.

We aim to answer within 15 calendar days of confirming who you are. If a request is complicated enough to take longer, we will tell you that inside the same 15 days rather than going quiet.

There is no charge for the first request. If a request is repetitive or excessive we may ask for a reasonable fee, and we will say so before doing any work.

Deletion, and what cannot be deleted

We will remove what we are free to remove. We cannot remove an issued invoice or the order data behind it, because tax law sets a retention period for those records and we are required to keep them for it.

We would rather say that at the start than accept a deletion request and quietly under-deliver on it. Where we cannot delete something, our answer will name what is being kept and the reason.

• Removable: marketing contact details, marketplace access tokens, account and profile details the archive does not depend on.
• Retained: issued invoices, the order records behind them, and the audit entries recording internal access.

Disconnecting a marketplace

You can withdraw Resibo's access from the marketplace's own settings at any time, on Shopee, TikTok Shop or Lazada. That takes effect immediately and stops us pulling anything new.

To have the stored access token removed from our side as well, write to privacy@resibo.ph and say which shop. The token is encrypted at rest either way, and it is never displayed to anyone.

If you bought from a seller who uses Resibo

The seller is the controller of your information, and we hold it on their behalf. Start with them: they can act on your request directly, and they know the order you are asking about.

If you cannot reach them, or they need our help to answer you, write to privacy@resibo.ph with the marketplace and the order number. We will work with the seller rather than around them.

Most of what a marketplace gives us about a buyer is already masked by the marketplace itself, so there is often less here than you would expect.

If you are not satisfied

You can complain to the National Privacy Commission. You do not have to come to us first, though we would rather you did, because most of what goes wrong is something we can fix the same week.