PRIVACY NOTICE

Privacy Notice for Customers

Robinsons Townville Malls, operated by Robinsons Supermarket Corporation, respects your privacy and is committed to protecting your personal data we collect and process. This Privacy Notice provides information on how we process your personal data when you visit our malls and interact with us. It describes the purpose and manner of processing your personal data and it also covers your data privacy rights and how you can exercise them.

1. What Personal Data We Collect and Process

1.1. We may process the following personal data when you visit our malls, participate in promotions, events, or membership programs, submit inquiries or concerns, use our online channels, or otherwise interact with us:

1.1.1. Name

1.1.2. Address

1.1.3. Email Address

1.1.4. Contact Number

1.1.5. Pet Information

1.1.6. Date of Birth 

1.1.7. Age 

1.1.8. Proof of purchase

1.1.9. Valid ID 

1.1.10. Information contained in inquiries, feedback, complaints, or other communications submitted to us

1.2. Cookies and Web Analytics

Our website uses cookies and similar technologies to improve your browsing experience, analyze site traffic, and help us understand how users interact with our pages. These technologies may process non-identifiable technical information such as your device and browser type, IP address, pages viewed, or referring sites. You may manage or disable cookies through your browser settings, although doing so may affect certain website features.

2. How We Use Your Personal Data

We use your personal data for the following purposes:

2.1. To respond to inquiries, requests, and customer concerns. To respond to questions, feedback, complaints, requests, or other concerns submitted through our branches, events, online channels, social media pages, email, telephone, or other official communication channels.

2.2. To administer membership programs and provide membership benefits. To process membership applications, maintain membership records, validate membership eligibility, facilitate participation in membership activities, events, promotions, and other membership benefits, and communicate membership-related updates and information. 

2.3. To validate promotional and membership eligibility. To verify purchases, validate submitted receipts, confirm eligibility for promotions, activities, benefits, and membership programs, and prevent fraudulent participation.

2.4. To improve our programs, services, and customer experience. To assess participation in our programs and activities, understand customer preferences, evaluate the effectiveness of our programs, and improve our services, facilities, and customer engagement initiatives.

2.5. To comply with legal and regulatory requirements. To comply with applicable laws, regulations, lawful requests of government authorities, and other legal obligations.

2.6. To protect our rights, customers, and business operations. To prevent fraud, investigate incidents, address disputes, enforce our policies and terms, and establish, exercise, or defend legal claims.

3. Children’s Privacy

We do not collect personal data directly from children. Any personal data relating to a child is provided to us only through the child’s parent or legal guardian, and is used solely for the specific purpose for which it was given. We encourage parents and guardians to supervise their children’s online and in‑store activities to ensure that personal data is not shared without their consent.

4. Who We Share Our Personal Data With

We do not sell your personal data. We only share it when needed. When we share your data, we make sure that the people or companies we work with protect it and use it only for the purpose we allow.

We may share your personal data with:

4.1. Affiliates and related companies. Where permissible under applicable laws and regulations, we may share personal data with other Robinsons Retail Group companies for legitimate business, operational, administrative, legal, reporting, audit, and customer engagement purposes.

4.2. Our service providers. We may share personal data with service providers who support our operations, including information technology providers, system administrators, marketing and communications providers, event organizers, survey providers, customer support providers, and other vendors engaged by us to assist in delivering our programs, services, and business operations.

4.3. Business Partners. Where necessary to administer promotions, events, membership benefits, or other customer programs, we may share limited personal data with authorized business partners, sponsors, merchants, or participating establishments, subject to appropriate safeguards and contractual obligations.

4.4. Government agencies or law enforcement. We may disclose personal data when we are required to do so by law.

5. How We Protect Your Personal Data

We take reasonable steps to make sure that personal data in our custody is accurate, complete, and up to date. We strictly enforce our Privacy Policy and we have implemented technological, organizational and physical security measures to protect personal data from loss, misuse, modification, unauthorized or accidental access or disclosure, alteration or destruction. We put in effect safeguards such as the following:

5.1. We store your personal data in secure systems protected by safeguards such as firewalls, access controls, and encryption on our devices and servers.

5.2. Only authorized personnel are allowed to handle personal data, and they are required to keep it confidential.

5.3. We also use secure connections to protect personal data when transacting through our website and systems. Only authorized personnel have access to the personal data from our platforms.

5.4. Physical records containing personal data are stored in secure locations and are accessible only to authorized personnel.

Although we use various measures to secure your information, no method of online transmission or electronic storage can be guaranteed to be completely secure. We remain committed to protecting your data and continually updating our security controls.

6. How Long We Keep Your Personal Data

We keep your personal data only for as long as it is needed for the purposes described in this Privacy Notice, or as required by law. This may include keeping records while you are an active customer, for business or tax requirements, or when your information is needed to resolve issues or disputes.

When we no longer need your personal data, or when you ask us to delete it and the law allows us to do so, we securely delete or anonymize it using reasonable methods so it can no longer be read, recovered, or used.

7. Your Data Privacy Rights

Under the DPA, you have rights over the personal data we process about you. You may exercise these rights, subject to certain limitations under the DPA.

7.1. Right to be informed. You have the right to be informed whether your personal data shall be, are being, or have been processed, including the existence of automated decision making and profiling.

7.2. Right to access. You have the right to know whether or not data relating to you are being processed as well as how it is being processed.

7.3. Right to object. You have the right to object to the processing of your personal data where such processing is based on consent or legitimate interest, including processing for direct marketing, automated processing or profiling.

7.4. Right to erasure or blocking. You have the right to request for the suspension, withdrawal, blocking, removal, or destruction of your personal data from our systems.

7.5. Right to Rectify. You have the right to dispute and request for correction of your personal data if you believe it is inaccurate, incomplete, or outdated.

7.6. Right to file a complaint.  You have the right to file a complaint with the National Privacy Commission (NPC) if you feel that your personal data has been misused, maliciously disclosed, or improperly disposed, or that any of your data privacy rights have been violated.

7.7. Right to damages. You have the right to claim compensation for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of their personal data, taking into account any violation your rights and freedoms as a data subject. 

7.8. Right to Data Portability. When applicable, you have the right to obtain a copy of your personal data and/or request to have your personal data transferred to another Personal Information Controller, in a commonly used electronic or structured format.

Generally, we do not charge any fee to fulfill the exercise of your data subject rights. As an exception, where you request copies of your personal data and the other information in exercising your right to access, we may require reasonable fees to cover administrative costs.

8. Changes in our Privacy Notice

From time to time, it may be necessary for us to update this Privacy Notice as required by changes in our processing of your personal data, latest amendments to the DPA, or new issuances of the NPC. Should we update our Privacy Notice, we will post the revised version here and will take effect immediately. We suggest that you check this site periodically for the most up-to-date version of our Privacy Notice. Rest assured, that any changes will not be retroactively applied and will not alter how we handle previously collected personal data without obtaining your consent, unless required by law. 

9. How to Contact the Data Protection Officer

If you have questions about this Privacy Notice, or if you want to exercise your data privacy rights, please contact our Data Protection Officer (DPO):

Data Protection Officer

Robinsons Supermarket Corporation

110 E. Rodriguez Jr. Avenue, 

Bagumbayan, Quezon City

rscdataprivacyoffice@rsc.com.ph