Banok's

Banok's Chicken Inasal

Privacy Policy

This notice explains what personal data Banok's processes, why it is needed, who may receive it, how long it is retained, and how you can exercise your privacy rights.

Version 1.0 Effective Updated

At a glance

Banok's uses only information reasonably needed to secure accounts, fulfill orders, process payments and refunds, provide support, maintain business records, and protect customers and operations. Banok's does not sell personal data and currently does not use advertising or behavioral-tracking cookies.

1. Scope and personal information controller

This policy applies to the Banok's portal, branch ordering sites, progressive web app, accounts, orders, payments, delivery tracking, notifications, and support. Banok's Chicken Inasal and the selected branch determine how customer data is used for these services and act as the personal information controller. Operator location: Zamboanga del Norte, Philippines.

2. Personal data collected

  • Identity and account data: name, customer ID, email, mobile, profile, linked identity, verification status, and hashed password.
  • Authentication and security data: hashed OTP records, login events, IP address, device or browser data, session identifiers, limits, and logs.
  • Address and location data: municipality, barangay, street or landmark, saved preferences, delivery coordinates, and coverage result.
  • Order data: branch, items, quantities, prices, discounts, fees, VAT, fulfillment, status, cancellation, rider, receipt, and timestamps.
  • Payment and refund data: method, channel, amount, provider status and references, reconciliation, reason, external reference, and confirmation evidence. Banok's does not receive your banking password, PIN, OTP, or full card credentials from PayMongo checkout.
  • Support, application, and technical data: messages, tickets, files, notifications, cart and checkout state, PWA preferences, public cache, and errors.

3. How data is collected

Data comes from you during registration, verification, addressing, ordering, payment, refunds, support, and uploads; from Banok's systems and staff during operations; and from authorized providers including Google, PhilSMS, PayMongo, mapping and email providers, hosting systems, and assigned riders.

4. Purposes and legal bases

Banok's processes data to secure accounts, authenticate users, provide branch menus, validate delivery, fulfill orders, collect and reconcile payments, handle cancellations and refunds, issue receipts and notices, prevent fraud, maintain inventory and finance records, improve reliability, resolve disputes, and comply with law. Bases include pre-contract steps, contract performance, legal obligations, legitimate secure-operation interests, legal claims, and consent for genuinely optional purposes. Optional marketing requires a separate choice if introduced.

5. Location and delivery information

Delivery coordinates verify branch coverage, support fees and routing, guide the assigned rider, and investigate issues. Relevant branch staff and the assigned rider may access the name, mobile, address, coordinates, order, and instructions necessary for fulfillment.

6. Payments and refunds

Payment details entered on PayMongo or provider pages are processed under that provider's notice. Banok's receives transaction identifiers, channel, amount, status, and timestamps needed to match, reconcile, dispute, and refund payments. Some QR Ph refunds require bank details through a provider-secured link. An agreed manual refund uses only the minimum destination and transfer information necessary. Never send passwords, PINs, or OTPs.

7. Recipients and providers

Role-based access may be given to the selected branch, authorized cashiers, managers, administrators, finance or support staff, and assigned riders. Providers may include PayMongo and payment networks; PhilSMS and email services; Google sign-in; Geoapify, OpenStreetMap or map services; Hostinger and infrastructure, storage, logging, backup, and security providers; and professional advisers, banks, regulators, courts, or authorities when necessary or required.

Some providers may process data outside the Philippines. Banok's remains accountable for data under its control and uses reasonable safeguards. Personal data is not sold or rented.

8. Cookies, cache and local storage

Necessary cookies maintain sessions, login, checkout state, and CSRF protection. Local storage may remember PWA installation preferences and limited application state. The service worker caches public assets for performance and offline fallback, not offline ordering. Banok's currently uses no advertising, remarketing, or behavioral-profiling cookies, so no optional-cookie banner is displayed. Optional analytics or marketing technology will be disclosed and held until a valid choice where required.

9. Retention and deletion

  • Account and address data remains while active and afterward only for unresolved orders, security, law, or claims.
  • Orders, receipts, payments, refunds, finance, stock, and audits follow applicable accounting, tax, fraud, dispute, and legal periods.
  • OTP codes are valid for 10 minutes and stored as hashes; related delivery and abuse records may remain longer for security.
  • Authenticated access ends after 30 days of inactivity and no later than 90 days, while transaction records follow their own retention rules.
  • Closed order conversations are scheduled for deletion after three days; cancellation can include a three-hour grace period and open support may delay deletion.
  • Support, delivery tracking, notifications, attachments, and technical logs remain while necessary and longer only for disputes, refunds, security, or law.

Data due for disposal is deleted, anonymized, or securely made inaccessible according to the relevant system and backup lifecycle.

10. Security safeguards

Safeguards include role-based access, branch isolation, hashing, HTTPS, secure sessions, CSRF protection, validation, rate limits, payment-webhook verification, audit events, backups, and restricted staff access. No online service guarantees absolute security; protect your device and credentials and report suspected misuse.

11. Your data-subject rights

Subject to the Data Privacy Act and applicable exceptions, you may request information, access, correction, objection, withdrawal of optional consent, erasure or blocking when warranted, portability where applicable, and compensation or complaint remedies. Banok's may verify identity, request details needed to locate records, and retain data required for an order, law, security, or claim.

12. Children's privacy

The service is not designed to knowingly create independent accounts for children unable to validly consent or contract. A parent or guardian should supervise a minor's use. Contact Banok's if a child's data may have been submitted without authority.

13. Automated processing

Systems automatically validate branch host, coverage, prices, stock, order limits, payment status, security limits, session expiry, and available actions. Banok's does not currently use advertising profiles or solely automated decisions producing legal or similarly significant effects without an available staff review process.

14. Changes and prior versions

This policy is reviewed when practices, providers, systems, law, or operations change. Version and dates identify the current notice. Material changes will be communicated and a new choice requested where processing relies on consent. Prior versions are retained internally and may be requested.

15. Privacy contact and complaints

Choose the branch associated with your account or order through the official branch portal, then submit a Customer Support ticket under “Privacy concern.” Do not include passwords, PINs, or OTPs.

Privacy email: info@banoks.ph.

Controller: Banok's Chicken Inasal, Zamboanga del Norte, Philippines. You may also contact or complain to the National Privacy Commission.