Data Privacy Statement

We respect the privacy of our customers, users, employees, business partners, and other individuals whose personal information we process. We are committed to handling personal information responsibly, fairly, transparently, and securely, and to processing information only for legitimate and appropriate purposes.

For operations in the Philippines, the Company intends to process personal information in accordance with applicable Philippine privacy laws and regulations, including Republic Act No. 10173, or the Data Privacy Act of 2012, its implementing rules and regulations, and applicable issuances of the National Privacy Commission ("NPC"), as may be amended from time to time.

• Identity information: name, date of birth, nationality, and similar identifying details.
• Contact information: email address, telephone/mobile number, mailing or business address.
• Account information: username, account credentials, profile details, and account activity.
• Transaction information: records of purchases, payments, subscriptions, transfers, and related transaction details.
• Verification information: information reasonably necessary for identity verification, fraud prevention, security, or regulatory requirements.
• Technical information: IP address, device information, browser type, operating system, access logs, and information about how the Platform is used.
• Communications: inquiries, support requests, feedback, and correspondence with the Company.
• Other information: information you voluntarily provide or information that we are legally permitted or required to collect.

We may process personal information for legitimate and relevant purposes, including to:

1. create and manage user accounts;
2. provide and improve our products and services;
3. process transactions and payments;
4. verify identity and prevent fraud, abuse, or unauthorized activity;
5. communicate with users and provide customer support;
6. maintain Platform security and operational records;
7. comply with legal, regulatory, contractual, and other lawful obligations;
8. conduct analytics and service improvement; and
9. carry out other purposes disclosed at or before the time of collection, or otherwise permitted by law.

Depending on the circumstances, the Company may process personal information based on the data subject's consent, performance of a contract, compliance with a legal obligation, protection of lawful interests or rights, or another lawful basis recognized under applicable privacy laws and regulations. Where consent is the applicable basis, it may generally be withdrawn subject to legal or contractual limitations and the consequences explained at the time of withdrawal.

The Company does not sell personal information as a general business practice. Personal information may be disclosed, when appropriate and lawful, to authorized employees and service providers, technology and hosting providers, payment and financial service providers, professional advisers, business partners, regulators or government authorities, and other persons where disclosure is required or permitted by law. Third parties receiving personal information are expected to apply appropriate confidentiality and security measures.

Because digital services may use technology, infrastructure, or service providers located outside the Philippines, personal information may be transferred to or accessed from other jurisdictions. Where applicable, the Company will take reasonable steps to ensure that such transfers are subject to appropriate safeguards and are handled in accordance with applicable privacy requirements.

Personal information will be retained only for as long as reasonably necessary for the purposes for which it was collected, to fulfill contractual or business requirements, to comply with legal or regulatory obligations, to resolve disputes, or to establish, exercise, or defend legal claims. When retention is no longer necessary, information will be securely deleted, destroyed, anonymized, or otherwise disposed of in accordance with applicable requirements.

The Company will implement reasonable and appropriate organizational, physical, and technical measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, misuse, or destruction. Access to personal information will be limited to persons who have a legitimate need to access it. No electronic transmission or storage system can be guaranteed to be completely secure; users should also take reasonable steps to protect their account credentials and devices.

The Platform may use cookies, analytics tools, and similar technologies to maintain sessions, remember preferences, understand usage, improve performance, and support security. Where required, the Company will provide appropriate notice and obtain consent or provide available controls in accordance with applicable requirements.

Subject to applicable law and reasonable verification requirements, data subjects may have rights concerning their personal information, including the right to be informed, access personal information, object to or restrict certain processing, request correction of inaccurate or incomplete information, request deletion or blocking in appropriate circumstances, and exercise data portability where applicable. Certain rights may be subject to lawful exceptions or limitations.

Requests, questions, complaints, or concerns regarding privacy may be submitted to the Company using the contact details below. The Company may request information reasonably necessary to verify the identity of the requester and will process requests within the period required by applicable law.

Company

SALAPPI Corporation

Privacy Officer / DPO

Robert Myron G. Aldeguer, Jr.

Email

rio@salappi.com

Address

51st Floor, PBCOM Tower, Ayala Avenue corner V.A. Rufino Street, Makati City, 1226, Metro Manila, Philippines

Telephone

+63 917 953 1358

If you believe that your privacy rights have been violated, you may first contact the Company so that we can review and address your concern. You may also have the right to lodge a complaint with the National Privacy Commission of the Philippines, subject to applicable procedures and requirements.

The Platform is not intended to knowingly collect personal information from children without appropriate authorization or lawful basis. Where applicable, the Company will take reasonable steps to address personal information relating to minors in accordance with applicable laws and regulations.

The Company may update this Data Privacy Statement from time to time to reflect changes in the Platform, business practices, technology, or applicable laws and regulations. The updated version will indicate its effective date. Users are encouraged to review this Statement periodically.