Privacy Policy

Effective Date: April 27, 2025

At Loca Cheesecakes, operated by Loca Ventures Corp., we are committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using our website or placing an order, you consent to the practices described herein.

1. Data Controller

Company: Loca Ventures Corp.

Address: Cebu East Gate, Taft Properties, Cebu City, Philippines

Email: gonzalo@locacheesecakes.com

2. Information We Collect

We collect the following categories of personal information:

a) Information You Provide Directly

  • Name, delivery address, email address, and phone number (collected at checkout)
  • Payment information (processed securely by our payment providers — we do not store card details)
  • Any communication you send us via email or social media

b) Information Collected Automatically

  • Browsing behaviour on our website (pages visited, time spent, clicks) via cookies and tracking technologies
  • Device information, browser type, IP address, and referral source
  • Order history and purchasing behaviour

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To process and fulfil your orders and communicate order status
  • To send transactional emails (order confirmations, delivery notifications)
  • To send marketing emails and promotional offers via Klaviyo, if you have opted in
  • To serve personalised advertising on Meta platforms (Facebook, Instagram) using Meta Pixel
  • To analyse website traffic and improve our online store experience
  • To comply with legal obligations and resolve disputes

4. Third-Party Services and Data Sharing

We share your data with trusted third-party service providers solely to operate our business. These include:

Shopify

Our e-commerce platform. Shopify collects and processes data necessary to operate our online store, including checkout, payment, and order management. Shopify is GDPR-compliant and ISO/IEC 27001-certified. Learn more at shopify.com/legal/privacy.

Meta (Facebook / Instagram)

We use Meta Pixel on our website to measure the effectiveness of our advertising campaigns, build custom audiences, and retarget visitors with relevant ads on Facebook and Instagram. Meta may collect your IP address and browsing activity on our site. You can manage your ad preferences at facebook.com/ads/preferences.

Klaviyo

We use Klaviyo for email marketing. If you subscribe to our newsletter or purchase from us, your email and purchase data may be shared with Klaviyo to send you relevant communications. You can unsubscribe at any time via the link in any email. Klaviyo is GDPR-compliant. Learn more at klaviyo.com/legal/privacy.

Payment Processors

Payments are processed by third-party providers (Visa/Mastercard networks, GCash, Maya, and PHQR). We do not store your full payment card details.

Delivery Partners

We share your name and delivery address with courier partners to fulfil your order.

5. Cookies

Our website uses cookies and similar tracking technologies to enhance your experience. These include:

  • Essential cookies: required for the website and checkout to function
  • Analytics cookies: to understand how visitors use our site
  • Marketing cookies: used by Meta Pixel and other advertising tools

You can manage cookie preferences in your browser settings. Disabling certain cookies may affect your browsing experience.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order records are retained for a minimum of five (5) years for accounting and legal compliance purposes.

7. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data, subject to legal retention requirements
  • Opt out of marketing communications at any time
  • Lodge a complaint with the National Privacy Commission of the Philippines

To exercise any of these rights, please contact us at gonzalo@locacheesecakes.com.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no method of transmission over the internet is 100% secure.

9. Children's Privacy

Our website and services are not directed at children under 13 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be posted on our website with an updated effective date. We encourage you to review this policy periodically.

11. Contact

For privacy-related questions or concerns, please contact us at gonzalo@locacheesecakes.com.