Privacy Policy

Privacy Policy

Last Updated: June 19, 2026

Esonshopph ("we," "us," or "our") is committed to protecting the privacy and security of the business and personal information you share with us when using our wholesale digital gift card platform ("Platform"). This Privacy Policy explains how we collect, use, store, share, and protect your information, and outlines your rights as a registered business partner.

By registering and using the Platform, you acknowledge that you have read and understood this Privacy Policy.


1. Information We Collect

We collect information necessary to operate the Platform, process transactions, and maintain a secure environment. This includes:

a. Business and Account Information

  • Business name, registered address, and country of operation
  • Contact person name, email address, and phone number
  • Business registration documents submitted during the partner application process
  • Username, encrypted password, and account preferences

b. Transaction Data

  • Wallet top-up records, including payment references and amounts
  • Order history, purchased products, denominations, and delivery records
  • API usage logs and integration activity tied to your account

c. Technical Data

  • IP address and general location data
  • Browser type, device information, and operating system
  • Log files, session identifiers, and access timestamps
  • Cookies and similar tracking technologies (see Section 9)

d. Communications

  • Support tickets, inquiries, and correspondence with our team
  • Feedback, reports, or complaints you submit

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Account management: To register, verify, and maintain your partner account
  • Transaction processing: To fulfill orders, process wallet top-ups, and deliver digital products
  • Platform security: To detect, prevent, and investigate fraud, abuse, or unauthorized access
  • Communication: To send transactional notifications (order confirmations, top-up approvals, account alerts) and important platform updates
  • Compliance: To meet our legal obligations under applicable Philippine law and cooperate with regulatory or law enforcement requests where required
  • Platform improvement: To analyze usage patterns and improve the functionality, performance, and reliability of the Platform
  • Support: To respond to your inquiries and resolve disputes or technical issues

We do not use your information for unsolicited marketing, nor do we sell your data to third parties.


3. Legal Basis for Processing

Esonshopph processes your personal data in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. Our legal bases for processing include:

  • Contractual necessity: Processing required to fulfill our obligations under the Partner Agreement
  • Legal obligation: Processing necessary to comply with applicable laws and regulatory requirements
  • Legitimate interests: Processing for fraud prevention, platform security, and improving our services
  • Consent: Where you have provided explicit consent, such as for optional communications

4. Information Sharing

We do not sell, trade, or rent your personal or business information to third parties. We may share your information only in the following limited circumstances:

  • Service providers: Trusted third-party vendors who assist in operating the Platform (e.g., cloud hosting, email delivery, payment processing), bound by confidentiality and data processing agreements
  • Brand suppliers: Solely to the extent required to fulfill your orders (e.g., account-level order references)
  • Legal authorities: When required by law, court order, or lawful request from a government authority in the Philippines or another applicable jurisdiction
  • Business transfers: In the event of a merger, acquisition, or sale of assets, with prior notice provided to affected partners

5. Cross-Border Data Transfers

Esonshopph serves approved business partners from multiple countries. Your business data and account information may be processed and stored on servers located in the Philippines. By registering as a partner, you acknowledge and consent to this transfer and storage.

We apply data protection standards consistent with the Philippine Data Privacy Act of 2012 (RA 10173) as the primary governing framework for all personal data we process, regardless of where you are located.

For partners based in the European Economic Area (EEA), we recognize the rights afforded under the EU General Data Protection Regulation (GDPR), including rights to access, rectification, erasure, restriction of processing, and data portability. To exercise any of these rights, please contact us at support@esonshopph.com.

For partners in other jurisdictions with applicable data protection laws, we apply equivalent standards of care in handling your information.


6. Data Retention

We retain your personal and business data for as long as your account is active or as required to fulfill the purposes outlined in this Policy. Specifically:

  • Account data: Retained for the duration of the partnership and for a reasonable period after account closure to resolve disputes or meet legal obligations
  • Transaction records: Retained for a minimum of five (5) years to comply with financial recordkeeping requirements under Philippine law
  • Support communications: Retained for up to three (3) years after the matter is resolved
  • Technical logs: Retained for up to ninety (90) days for security and debugging purposes

When data is no longer required, it is securely deleted or anonymized.


7. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, disclosure, alteration, or destruction. These include:

  • HTTPS/TLS encryption for all data transmitted to and from the Platform
  • Encrypted storage of sensitive account and credential data
  • Role-based access controls limiting internal access to your data on a need-to-know basis
  • Multi-factor authentication requirements for platform access
  • Regular security reviews and monitoring

While we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. In the event of a data breach affecting your information, we will notify you and the relevant authorities in accordance with applicable law.


8. Your Rights

As a data subject under the Philippine Data Privacy Act and applicable international privacy laws, you have the following rights regarding your personal information:

  • Right to be informed: To know how your data is collected, used, and shared
  • Right to access: To request a copy of the personal data we hold about you
  • Right to correction: To request correction of inaccurate or outdated data
  • Right to erasure: To request deletion of your data, subject to legal retention requirements
  • Right to data portability: To receive your data in a structured, machine-readable format
  • Right to object: To object to processing based on legitimate interests
  • Right to restrict processing: To request that we limit how we use your data in certain circumstances
  • Right to file a complaint: To lodge a complaint with the National Privacy Commission (NPC) of the Philippines, or the relevant data protection authority in your jurisdiction

To exercise any of these rights, contact us at support@esonshopph.com. We will respond within thirty (30) days of receiving your request.


9. Cookies and Tracking Technologies

The Platform uses essential cookies and similar technologies to maintain your session, enable authentication, and ensure security. We do not use third-party advertising cookies or behavioral tracking technologies.

You may configure your browser to refuse cookies; however, doing so may impair Platform functionality including the ability to log in or place orders.


10. Partner's Own Privacy Obligations

If your business collects, processes, or stores personal data from your own customers or end users in the course of reselling Esonshopph products, you are solely responsible for ensuring your operations comply with all applicable data privacy laws in your jurisdiction — including but not limited to GDPR (EEA), PDPA (Singapore/Thailand), CCPA (California), or equivalent local legislation.

Esonshopph acts as a data controller for the information you provide to us directly. We do not act as a data processor on behalf of your end customers, and we do not have visibility into the personal data you collect in your own operations.


11. Third-Party Links

The Platform may contain links to third-party websites or brand portals. Esonshopph is not responsible for the privacy practices of those external sites. We encourage you to review the privacy policies of any third-party services you interact with.


12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. When we make material changes, we will notify you via email or a prominent notice on the Platform. The updated policy will take effect on the date indicated at the top of this page.

Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.


13. Contact Us

For privacy-related inquiries, data access requests, or concerns, please contact:

Esonshopph — Data Privacy
Email: support@esonshopph.com