Skip to content
MindAI

Privacy Policy

Scope

Casa Verde Blinds Manufacturing Inc. ("we", "us") is the personal information controller for data collected through casaverdeblinds.ph, our showrooms, our hotline and our messaging channels. We process personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

What we collect

  • Contact and identity details you give us: name, company, email address, mobile or landline number.
  • The installation address and site details needed to quote, measure, deliver and install.
  • Photographs, sketches or floor plans you upload of the windows to be covered.
  • Order and service records: quotations, measurements, invoices, delivery notes, warranty claims and the notes our staff make on your enquiry.
  • Website technical data: IP address, browser type, pages visited and referring page, collected through server logs and strictly necessary cookies.

We do not ask for sensitive personal information as defined by RA 10173, and we ask you not to send it. We do not knowingly collect information from children.

Why we process it, and on what basis

We process your information to prepare and issue quotations, schedule site measurement and installation, manufacture to your sizes, deliver, invoice, honour warranty claims and answer enquiries. The lawful basis is the performance of a contract with you, or steps taken at your request before entering one.

We rely on our legitimate interests, balanced against your rights, to keep security and audit logs, to prevent fraud and duplicate submissions, and to improve our products and website. We rely on legal obligation for the tax, accounting and receipting records required by the Bureau of Internal Revenue and other regulators. We rely on your consent, which you may withdraw at any time, for marketing emails and newsletters — withdrawing it does not affect an order already in progress.

Who we share it with

We share only what is necessary, and only with: our installation teams and contracted fitters; couriers and freight providers, for delivery; our hosting and email providers, who process data on our instructions under contract; our accountants and auditors; and government agencies where the law requires disclosure or where you are transacting with us through a public procurement process.

We do not sell personal information and we do not share it for third-party advertising. Where a processor stores data outside the Philippines, we require contractual safeguards consistent with the NPC’s rules on cross-border transfer, and we remain accountable for the data.

How long we keep it

  • Enquiries that do not become orders: two years from last contact, then deleted.
  • Order, installation and warranty records: the warranty term plus two years, so a claim can be verified against what was actually installed.
  • Accounting, invoicing and tax records: ten years, as required of BIR-registered taxpayers.
  • Newsletter subscriptions: until you unsubscribe, plus a suppression record so we do not contact you again in error.
  • Website server logs: twelve months.

How we protect it

Access is limited to staff who need it for their role, under individual accounts with role-based permissions and an audit trail of administrative actions. Passwords are stored only as salted hashes. Traffic to and from our site is encrypted in transit, backups are encrypted, and uploaded files are retained only for the life of the enquiry that needed them. If a personal data breach occurs that is likely to give rise to a real risk of serious harm, we will notify the NPC and the affected data subjects within 72 hours of knowledge of it, as the Act requires.

Your rights as a data subject

Under RA 10173 you have the right to be informed, to object to processing, to access your data, to rectify inaccurate data, to erasure or blocking in the circumstances the Act allows, to data portability, and to be indemnified for damages arising from inaccurate, false, unlawfully obtained or unauthorised use of your data. You may exercise any of these free of charge.

Write to our Data Protection Officer at dpo@casaverdeblinds.ph or by post to our Trece Martires office, marked for the Data Protection Officer. We acknowledge within five working days and respond substantively within fifteen. If you are not satisfied with our response you may complain to the National Privacy Commission at privacy.gov.ph.

Cookies

We use strictly necessary cookies only: session handling, form security and load balancing. These cannot be switched off without breaking the site, and none of them track you across other websites. We set no advertising cookies. If we later introduce analytics or marketing cookies we will ask for your consent before setting them and update this policy first.

Changes

We will post any change to this policy on this page with a revised effective date, and where the change is material we will say so on the homepage for thirty days. Continuing to use the site after a change takes effect means you accept the revised policy.