FULLGROWN

PRIVACY POLICY

1. Our Commitment to Privacy

FULLGROWN is operated by Full Grown Clotheshoppe, a sole proprietorship in the Philippines. We respect the privacy of our customers, website visitors, and people who communicate with us.

This Privacy Policy explains what personal data we may collect, why we process it, how it may be used or shared, how we protect it, how long it may be retained, and the rights available to you under applicable Philippine data-protection law.

We aim to collect only information reasonably necessary to operate our store, fulfill orders, provide customer support, meet legal obligations, protect our business and customers, and carry out optional marketing where permitted.

2. Personal Information Controller

For personal data processed for FULLGROWN's own business purposes, the Personal Information Controller is:

Full Grown Clotheshoppe
Brand: FULLGROWN
Registered Owner: Seanne Archier Saavedra España
Business Address: 3rd Street, Mansueto Friendly Homes, Bulacao, 6045 City of Talisay, Cebu, Philippines
Website: fullgrown.ph
Privacy and Customer Support Email: ali@fullgrown.ph
Mobile: 0921 267 5197
Business Hours: Monday-Saturday, 9:00 AM-8:00 PM Philippine Standard Time

3. Personal Data We May Collect

Depending on how you interact with us, we may collect:

• Identity and contact information, such as your name, email address, mobile number, billing address, and shipping address.
• Order and transaction information, such as products ordered, size, quantity, order status, payment status, delivery information, returns, exchanges, and customer-service history.
• Payment-related information necessary to process or confirm a transaction. Payment credentials may be collected or processed directly by payment providers rather than stored by Fullgrown.
• Communications you send to us through email, website forms, Messenger, Instagram, or other official support channels.
• Website and device information that may be generated when you use our Shopify-powered website, such as IP address, browser/device information, network information, pages viewed, and cookie or similar technology data.
• Information you voluntarily provide when participating in promotions, surveys, community activities, or marketing sign-ups.

We do not intentionally request sensitive personal information unless it is reasonably necessary and permitted by law.

4. Why We Process Personal Data

We may process personal data for purposes including:

• Creating, receiving, verifying, and fulfilling orders.
• Processing or confirming payments and refunds.
• Delivering products and coordinating with couriers.
• Providing order updates and customer support.
• Managing returns, exchanges, complaints, and disputes.
• Preventing fraud, abuse, security incidents, and unauthorized transactions.
• Maintaining business, accounting, tax, transaction, and compliance records.
• Operating, securing, troubleshooting, and improving our website and customer experience.
• Measuring store performance and website activity through tools that are actually enabled on our store.
• Sending marketing communications, promotions, surveys, or similar optional messages where we have an appropriate legal basis, including consent when required.
• Complying with applicable laws, lawful government requests, regulatory requirements, or legal claims.

We will not use personal data for an incompatible new purpose without an appropriate legal basis and, where required, proper notice or consent.

5. Basis for Processing

Depending on the activity, Fullgrown may process personal data because it is necessary to perform or take steps relating to a transaction or contract with you, to comply with a legal obligation, to pursue a legitimate business interest that is not overridden by your rights, or because you have provided consent where consent is required.

Where processing relies on consent, you may withdraw that consent subject to applicable law and without affecting processing that was lawful before withdrawal.

6. Shopify and E-Commerce Platform

Our online store is powered by Shopify. When you visit or purchase from a Shopify-powered store, Shopify may process information such as your name, contact and delivery details, payment-related information, device/browser information, IP address, and website activity to provide its platform and related services.

For customer information processed for our store, Fullgrown determines the business purposes for which customer data is used. Shopify and its relevant service providers may process information in connection with providing their services.

Shopify also maintains its own privacy notices describing its processing practices.

7. Payments

Payments may be processed through PayMongo, banks, e-wallets, card networks, Cash on Delivery arrangements, or other payment methods actually made available at checkout.

Payment providers may collect and process information necessary to authorize, verify, secure, settle, refund, or otherwise administer a transaction. Fullgrown does not need to receive or store every payment credential handled directly by those providers.

Customers should also review the applicable privacy notices of the payment services they choose to use.

8. Shipping and Fulfillment

We may disclose information reasonably necessary to deliver an order to J&T Express or another logistics provider used for the transaction. This may include the recipient's name, delivery address, mobile number, order or parcel information, and other information reasonably required for fulfillment.

Couriers and logistics providers may process that information according to applicable law and their own privacy practices.

9. Other Recipients and Service Providers

Where reasonably necessary, personal data may be disclosed to classes of recipients such as:

• E-commerce and website service providers.
• Payment processors, banks, e-wallets, and financial institutions.
• Couriers and fulfillment providers.
• Technology, hosting, security, analytics, communications, or customer-support providers actually used by Fullgrown.
• Professional advisers such as accountants, auditors, lawyers, or consultants when necessary.
• Government authorities, regulators, courts, or law-enforcement bodies when disclosure is required or permitted by law.

We do not disclose personal data merely because a third party requests it. Disclosure must have an appropriate business or legal basis.

10. Marketing Communications

We may send promotional or marketing communications when permitted by applicable law and when an appropriate basis exists.

Where consent is required for direct marketing or another secondary purpose, we will seek that consent. You may unsubscribe from optional marketing communications using the method provided in the message or by contacting us.

Transactional messages relating to an order, payment, delivery, security issue, or customer-service request are not treated as optional marketing messages merely because you have opted out of marketing.

11. Cookies, Analytics and Similar Technologies

Our Shopify-powered website may use cookies and similar technologies that are necessary for store functionality, security, checkout, preferences, analytics, or other enabled features.

The exact technologies used may change as we configure our Shopify store and approved applications. Where required, we will provide appropriate notice or choices through our website's privacy or cookie controls.

Additional information will be provided in FG-LEGAL-009 - Cookie Policy once published.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for legitimate operational, accounting, tax, legal, fraud-prevention, dispute-resolution, or compliance requirements.

Different categories of information may have different retention periods. We will not state an artificial universal deletion period where a longer period is required by law or reasonably necessary for an unresolved transaction, complaint, audit, or legal obligation.

When personal data is no longer reasonably required, we will take appropriate steps to delete, anonymize, or securely dispose of it, subject to technical and legal limitations.

13. Data Security

Fullgrown will use reasonable and appropriate organizational, physical, and technical safeguards proportionate to the personal data we process and the risks involved.

These measures are intended to reduce the risk of unauthorized access, disclosure, alteration, loss, destruction, or other unlawful processing.

No online or electronic system can be guaranteed to be completely secure. If we become aware of a security incident involving personal data, we will assess and respond to it in accordance with applicable law and our actual responsibilities.

14. Your Rights as a Data Subject

Subject to the conditions and limitations provided by Philippine law, you may have rights including:

• The right to be informed about the processing of your personal data.
• The right to access personal data relating to you.
• The right to object to certain processing.
• The right to correct or rectify inaccurate or erroneous personal data.
• The right to request erasure or blocking in circumstances allowed by law.
• The right to data portability where applicable.
• The right to claim damages in appropriate circumstances.
• The right to file a complaint with the National Privacy Commission.

Some rights are not absolute and may be limited where Fullgrown has a lawful basis or legal obligation to retain or continue processing particular information.

15. How to Exercise Your Privacy Rights

To make a privacy request, contact:

Email: ali@fullgrown.ph
Mobile: 0921 267 5197

Please clearly describe your request and provide sufficient information for us to reasonably verify your identity and locate the relevant records. We may request reasonable verification before disclosing, changing, deleting, or transferring personal data in order to protect you against unauthorized requests.

We will handle legitimate requests within the periods and subject to the requirements established by applicable law.

16. Children's Privacy

Fullgrown's general online store is intended for ordinary retail customers and is not designed to intentionally collect children's personal data for independent marketing or profiling.

If a minor uses the store, a parent or legal guardian should supervise the transaction where appropriate. If we learn that personal data has been collected or processed in a manner requiring parental or guardian involvement under applicable law, we will take reasonable steps to address the situation.

17. Social Media and External Services

If you communicate with Fullgrown through Facebook, Instagram, Messenger, or another third-party platform, that platform may independently process information under its own privacy terms.

Our website may also contain links or integrations involving third-party services. Fullgrown does not control every independent privacy practice of those third parties, and users should review their applicable privacy notices.

18. International or Cross-Border Processing

Some technology and e-commerce service providers used by Fullgrown, including platform or infrastructure providers, may process or store information outside the Philippines as part of providing their services.

Where cross-border processing occurs, Fullgrown will use service providers and arrangements appropriate to its operations and will remain responsible for its own obligations under applicable Philippine data-protection law.

19. Changes to this Privacy Policy

We may update this Privacy Policy when our business practices, website functionality, service providers, legal obligations, or privacy requirements change.

The current version will be published on fullgrown.ph with its effective date or last-updated date. Where a material change requires additional notice or consent under applicable law, we will take appropriate steps before applying the new processing practice.

20. Questions and Complaints

Questions, requests, or complaints regarding this Privacy Policy or Fullgrown's handling of personal data may be sent to:

FULLGROWN
Operated by Full Grown Clotheshoppe
3rd Street, Mansueto Friendly Homes
Bulacao, 6045 City of Talisay
Cebu, Philippines

Email: ali@fullgrown.ph
Mobile: 0921 267 5197
Website: fullgrown.ph

Data subjects also have the right to lodge a complaint with the National Privacy Commission where applicable.

END OF DOCUMENT