Effective August 22, 2026

Privacy Policy

Vendes Corporation, operating as Vendes Packaging (“Vendes,” “we,” “us” or “our”), is the personal information controller for information collected through this website and our business communication channels. We process personal data in accordance with Republic Act No. 10173, or the Data Privacy Act of 2012, its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission.

1. Information we collect

When you submit an inquiry, request a quotation or communicate with us, we may collect:

• Name and company or business name;
• Mobile number, email address and preferred contact channel;
• Business type;
• Requested products, specifications, quantities and order frequency;
• Delivery location and requested delivery date;
• VAT Sales Invoice requirement; and
• Messages, quotation history, order details and other information you voluntarily provide.

Our website may also generate limited first-party technical records necessary for security, reliability and measurement, such as page visited, event time, anonymous session identifier, campaign tags and referring page. These records help us understand product interest and whether quotation channels are working; they are not used to build advertising profiles or sold to third parties. We do not ask you to submit passwords, government identification numbers, payment card details or unrelated sensitive personal information through the quotation form.

2. Why and how we use information

We use personal information only for legitimate and declared business purposes, including:

• Responding to inquiries and verifying requirements;
• Preparing, revising and following up quotations;
• Confirming stock, specifications, lead time, payment and delivery arrangements;
• Processing orders, customer support, invoices and business records;
• Preventing misuse and maintaining website and information security;
• Improving our products, website and service process using aggregated operational information; and
• Complying with tax, accounting, regulatory and other legal obligations.

Processing is based on your consent where required, steps taken at your request before entering into a transaction, performance of a confirmed transaction, our legitimate business interests, and compliance with applicable law. You may withdraw consent, but this will not affect processing already lawfully completed or records we must retain.

3. Who may receive information

Access is limited to authorized Vendes personnel who need the information for sales, quotation, finance, customer service or delivery coordination. When necessary, relevant information may be shared with service providers supporting website hosting, business communications, payment processing, logistics, accounting or legal compliance. We may also disclose information when required by law or a valid government or court process.

We require service providers to use information only for the authorized purpose and to apply reasonable confidentiality and security safeguards. We do not sell or rent personal information.

4. Storage, security and retention

We apply reasonable organizational, physical and technical safeguards designed to protect personal information from unauthorized access, alteration, disclosure, loss or misuse. No online system can guarantee absolute security, so please avoid sending sensitive information that is not needed for your inquiry.

Inquiry records that do not result in a transaction, and first-party website measurement records, are generally retained for up to 24 months from collection or the last meaningful interaction, unless you request earlier deletion or a longer period is reasonably necessary for an active quotation, dispute, fraud prevention or legal claim. If an inquiry becomes an order, related sales, invoice, payment, delivery and accounting records may be retained for the period required by applicable law and legitimate business-record requirements. When retention is no longer necessary, records are securely deleted, anonymized or otherwise disposed of.

5. Your data privacy rights

Subject to the Data Privacy Act and applicable limitations, you may exercise the right to be informed, access your personal data, object to processing, correct inaccurate or incomplete data, request erasure or blocking, request data portability where applicable, withdraw consent, seek damages and file a complaint with the National Privacy Commission.

To protect you, we may ask for reasonable information to verify your identity and authority before acting on a request. We will respond within a reasonable period and explain if a legal exception prevents us from completing it.

6. Links and third-party channels

Our website may link to Facebook, email, SMS, online wallets, banks or logistics providers. Their own privacy policies and security practices apply once you use those services. Review them before providing information through a third-party channel.

7. Changes to this policy

We may update this policy when our processes, service providers or legal obligations change. The effective date above will be updated, and material changes will be communicated through an appropriate notice on this website.

8. Privacy contact

Use the subject “Privacy Request” and briefly describe your request. You may also contact or file a complaint with the National Privacy Commission.