1. Who we are
Baery (“Baery”, “we”, “us”) runs the Baery marketplace at baerymarket.com and the Baery baker console. This policy explains what personal information we collect when you use them, why we collect it, who we share it with, and the rights you have. We follow the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and the rules of the National Privacy Commission.
This policy is about customers of the marketplace. Bakers’ business documents are covered in the baker terms. The Baery baker app stores its data on the baker’s own phone unless the baker signs in and turns on sync.
2. What we collect
What you give us
- Account: your name and email address. If you sign up with a password, we store only a secure hash of it, never the password itself. If you sign in with Google or Apple, we receive your name, email address and an account identifier from them.
- Contact and delivery details: your mobile number and any addresses you save or enter at checkout.
- Orders: what you ordered, from which shop, pickup or delivery, the date and time you chose, the amounts, and any notes you add.
- Reports and reviews: the reason and description you give when you report a problem, and the ratings and reviews you write.
- Your activity on Baery: shops you follow, products you save, and your settings, such as your preferred payment method and which notifications you want.
- Two-step verification: if you turn it on, the information needed to check your codes and to remember devices you trust.
What we get from payments
Payments are handled by our payment provider, Xendit. You enter your card on Xendit’s secure page or approve the payment in your wallet. Baery never receives or stores your full card number. We receive the payment method type, the payment status, and references we need to match the payment to your order and to process refunds.
What is collected automatically
- Technical logs: like any website, our servers record requests, including your IP address, browser type and the time of the request. We use these to keep the service running and secure.
- Error reports: when something breaks on our side, we send a report to our error-monitoring provider. We remove your sign-in details and the content of what you submitted, such as addresses and phone numbers, before it is sent.
- Browser storage: we keep your sign-in session, your cart and any devices you chose to remember in your browser’s local storage. We don’t use advertising cookies or third-party analytics trackers. Google or Apple may set their own cookies when you choose to sign in with them.
3. Why we use it
We use your information only for these purposes:
- To take and fulfil your orders: processing payment, passing the order to the baker, showing its progress, and handling problems and refunds. This is necessary to perform our agreement with you.
- To run your account: signing you in, keeping it secure, and remembering your addresses and settings.
- To keep Baery safe and working: preventing fraud and abuse, fixing faults, and enforcing our terms. These are our legitimate interests.
- To meet legal obligations: for example keeping transaction records that tax and e-commerce laws require, and responding to lawful requests from authorities.
- To send you messages you asked for: order updates and, only if you turn them on, promotions and news about new bakers. You can change these at any time in your account.
We don’t sell your personal information, we don’t share it with advertisers, and we don’t use it to make automated decisions that have legal or similarly significant effects on you.
4. Who we share it with
The baker you order from
When you place an order, the baker receives your name, mobile number, email address, your order and any notes, and, for delivery, your address. They need these to make, hand over and follow up on your order, and to issue your invoice. The baker also receives any problem you report on that order.
Your name, mobile number and email are added to that baker’s own customer list, and your later orders from the same shop are grouped under it. From that point the baker is also responsible for those details as a separate business under the Data Privacy Act. Bakers agree to use them only for your orders. For any request about the copy a baker holds, you can contact the baker directly, or ask us and we will pass the request on.
If you choose delivery, the baker may give your name, number and address to the courier they book. That courier is chosen by the baker, not by Baery.
Service providers who work for us
These companies process information for us, only on our instructions and under contracts that require them to protect it:
- Xendit: payment processing and refunds;
- Vercel and Railway: hosting for the website and our servers;
- Neon: our database;
- Upstash: temporary data used to keep the service fast and to limit abuse;
- a cloud file-storage provider: product and shop photos;
- Resend: sending account emails, such as sign-in and password-reset links;
- Sentry: error monitoring, with personal details removed as described in section 2;
- Google and Apple: only if you choose to sign in with them.
When the law requires it
We may disclose information to a government authority, court or regulator when the law requires us to, for example to the Bureau of Internal Revenue for marketplace records. We may also disclose it when it is necessary to protect someone’s safety, or to establish, exercise or defend a legal claim.
If Baery is ever merged or sold, your information may pass to the new owner, who will be bound by this policy. We will tell you before that happens.
5. Where your information is stored
Our main servers and database are in Singapore. Some of our service providers may also process information in other countries, such as the United States. When your information leaves the Philippines, we remain responsible for it, and we only use providers that protect it to a standard comparable to the Data Privacy Act.
6. How long we keep it
- Your account and settings: until you close your account.
- Orders and payment records: for as long as tax, accounting and e-commerce laws require us to keep transaction records, even after you close your account. We keep only what those laws need.
- Reviews: until you ask us to remove them or you close your account. After that, a review may remain without your name.
- Technical logs and error reports: for a short period, usually no more than 90 days.
7. How we protect it
We use encryption in transit (HTTPS), passwords stored only as secure hashes, optional two-step verification, access controls that keep each baker’s data separate from every other baker’s, and staff access limited to what the job requires. No system is perfectly secure. If a breach puts your information at real risk, we will notify you and the National Privacy Commission as the law requires.
8. Your rights
Under the Data Privacy Act, you have the right to:
- be informed about how your information is processed, which is what this policy is for;
- access the personal information we hold about you;
- correct information that is inaccurate or incomplete. You can do most of this yourself in your account;
- object to processing, including withdrawing consent to marketing messages at any time;
- have your information erased or blocked, except where we are legally required to keep it;
- data portability: to receive a copy of your information in a commonly used electronic format;
- claim damages if you are harmed by inaccurate, unlawfully obtained or misused information;
- file a complaint with the National Privacy Commission (privacy.gov.ph).
To use any of these rights, including closing your account, write to support@baerymarket.com from the email address on your account. We will respond within 15 working days. We may need to confirm your identity first.
9. Children
Baery is not directed at children. You must be 18 or older to have an account, or have a parent or guardian’s permission. We don’t knowingly collect information from children without that consent. If you believe a child has given us information, contact us and we will delete it.
10. Changes to this policy
When we change this policy, we update the version and date at the top of the page. If a change materially affects how we use your information, we will tell you by email or on the Service before it takes effect.
11. Contact and data protection officer
For any question or request about your personal information, contact our data protection officer at support@baerymarket.com.