What we hold, and what we don’t.

What this site collects

If you sign in with Google, we receive and store your name, your email address, and the account identifier Google uses for you. That is the whole of it — we do not ask Google for your contacts, your photos, or anything else.

Your basket stays in your browser. The jars you pick are saved on your own device and are never sent to us until you place an order.

When you place an order, we hold the name, mobile number and email of whoever we should contact about it — you, or the person taking the delivery for you; the address, its landmark notes and its map pin; what you bought; and your proof of payment. You can still order by messaging us on Facebook or Instagram instead, and then we only hold what you send us there.

What we do not do

• No tracking you off this site. No advertising pixels, no Google Analytics, nothing that follows you to other websites. If we ever count visits to see which pages are useful, it will be without cookies and without handing you to anybody else.
• No selling or sharing of your details to anyone, for any price.
• No marketing email unless you ask us for it.
• No cookie banner, because there is nothing to consent to — see below.

Cookies

This site sets cookies only to keep you signed in. One holds your session; three short-lived ones exist for ten minutes while you are signing in with Google, and then delete themselves. All of them are strictly necessary, none of them follow you anywhere, and signing out removes them.

Who else sees it

Google, if you use Google sign-in — that is between you and them, and their privacy policy applies to it. Whoever delivers your order needs the address to bring it to you. Nobody else.

How long we keep it

Your account stays until you delete it. Sessions expire 30 days after you sign in. Order and payment records are kept for as long as tax law requires us to keep our books — but as figures, not as people, once you delete your account.

Backups. Deleting your account removes you from the live site immediately, but a backup taken beforehand still holds what you deleted. Ours are deleted within 30 days, are only ever used to restore the site after a failure, and are never read for anything else. If we ever do restore one, we re-apply every deletion that happened in between, so nobody comes back.

Deleting your account

You can do it yourself, at any time, without asking us: Settings → More options → Delete my account. It happens immediately and it cannot be undone.

What goes: your name, email and phone number; your saved addresses and their map pins; the name and address recorded on past orders; your Google connection; and every device you are signed in on.

What stays: what was ordered, when, what it cost, and how it was paid. We are required to keep our books, and those records survive as an anonymous entry. The honest consequence is that afterwards nobody can tell who that order went to — including us, if you come back with a question about it.

Your rights

Under the Philippine Data Privacy Act of 2012 (RA 10173) you can ask what we hold about you, have it corrected, have it erased, and object to how it is used. Ask us on Facebook or Instagram and we will answer. If you are not satisfied with our answer, you can raise it with the National Privacy Commission.

Asking us anything

Message us on Facebook or Instagram — we answer every message.