Skip to main content
Hello mga KaPuskal! Puskal caught you peeking early! This site is in BETA — products are real but we're not officially open yet. Grand opening coming very soon!

Privacy Notice

Effective 2026-03-21 · Version 1.1

This Privacy Notice describes how Juan Puskal TCG collects, uses, and protects your personal data in accordance with the Philippines' Data Privacy Act of 2012 (Republic Act 10173).

1. What Personal Data We Collect

We collect the following personal data when you use our platform:

  • Account information: name, email address, phone number (if provided)
  • Order and transaction information: shipping address, payment method reference, order history
  • Seller information: display name, contact email, contact phone number, wallet transaction history
  • Usage data: pages visited, browser type, IP address (collected via server logs and analytics)
  • QuickSell contact information: email or mobile number provided during listing creation (used only to send your shareable link and transaction notifications)

We do not store full payment card numbers. Card payments are processed by PayMongo and are subject to PayMongo's privacy policy.

2. Why We Collect This Data

We collect and process your personal data for the following purposes:

  • Order fulfillment: to process and deliver your purchases
  • Account management: to maintain your account and authenticate your identity
  • Transaction notifications: to send you order confirmations, shipping updates, and deal notifications
  • Fee collection and receipts: to issue official receipts for platform fees as required by Philippine BIR regulations
  • Platform safety: to detect fraud, abuse, and unauthorized activity
  • Legal compliance: to comply with Philippine DTI, BIR, and NPC requirements

3. How Long We Retain Your Data

| Data Type | Retention Period | |-----------|-----------------| | Account information | Until account deletion request is processed | | Order records | 7 years (BIR retention requirement for receipts and accounting records) | | Transaction logs | 2 years | | QuickSell listings | 30 days after listing creation (DynamoDB TTL) | | Server/access logs | 90 days |

Note: some data (e.g., transaction records) may be retained for the legally required BIR retention period of 7 years even after account deletion.

4. Who We Share Your Data With

We share your personal data only with the following:

  • AWS (Amazon Web Services): cloud infrastructure, email delivery (SES), storage (S3), and database (DynamoDB). Your data is stored on Amazon Web Services (AWS) servers in the Asia Pacific (Singapore) ap-southeast-1 region. This constitutes a cross-border transfer of personal data outside the Philippines, conducted in compliance with Section 21 of RA 10173 and NPC Circular 2024-01 on cross-border data transfers. AWS maintains appropriate safeguards as a certified data processor.
  • PayMongo: payment processing — subject to PayMongo's own privacy policy
  • Google / Facebook: if you use social sign-in, basic profile information is shared per OAuth consent
  • Philippine regulatory bodies: if required by law (DTI, BIR, NPC, or law enforcement with valid legal process)

We do not sell your personal data to third parties.

5. Your Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights:

  • Right to be Informed: You have the right to know how your personal data is collected and processed.
  • Right to Access: You may request a copy of your personal data held by us.
  • Right to Correction: You may request correction of inaccurate or incomplete personal data.
  • Right to Erasure or Blocking: You may request deletion or blocking of your personal data in cases provided by law.
  • Right to Object: You may object to the processing of your personal data on grounds provided by law.
  • Right to Data Portability: You may request a copy of your personal data in a commonly used, machine-readable electronic format.
  • Right to File a Complaint: You may lodge a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated.

To exercise your rights, email support@juanpuskal.com with the subject: "Data Privacy Rights Request".

6. How to Request Data Deletion

You have the right to request deletion of your personal data. To submit a deletion request:

  1. Email support@juanpuskal.com with the subject: "Data Deletion Request"
  2. Include the email address associated with your account
  3. We will process your request within 30 days

You may also use the in-app Data Deletion link at the bottom of any page.

7. Data Breach Notification

In the event of a personal data breach, Juan Puskal TCG will:

  • Notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, if it is likely to result in a risk to your rights and freedoms.
  • Notify affected individuals without undue delay when the breach is likely to result in a high risk to their rights.
  • Maintain a record of all personal data breaches as required by RA 10173.

8. NPC Registration

Juan Puskal TCG is in the process of registering with the National Privacy Commission (NPC) as required for data controllers in the Philippines. This Privacy Notice will be updated upon completion of NPC registration. Your rights under the Data Privacy Act of 2012 apply regardless of NPC registration status.

For privacy-related inquiries, contact our Data Privacy Officer at privacy@juanpuskal.com.