Privacy

WordBound is a small apparel shop based in the Philippines, selling at wordbound.shop. We decide what happens to the information described here, which under the Data Privacy Act of 2012 makes us the personal information controller.

Questions about anything on this page, including a request to see or delete what we hold, go to support@wordbound.shop.

Only what an order needs, and only when you give it to us.

• When you buy: your first and last name, email address, phone number, and the delivery address — plus what you ordered, in which size and colour, and what it cost.
• When you write to us: your name, email, and the message, along with an order number if you quote one.
• When you subscribe: your email address, and nothing else.
• When you leave a review: the name you choose to sign it with, your rating, and what you wrote. This part is published.

We never receive your card number. Payment details are typed into PayPal’s own checkout, and what comes back to us is confirmation that the payment succeeded, the amount, and the email address on the PayPal account.

To send you what you bought, to tell you where it is, and to answer you when you ask. A delivery address exists so a parcel can arrive; a phone number exists because couriers here call before they knock.

Order records are also our proof that a sale happened, which we need for returns, for disputes raised through PayPal, and for tax.

We do not sell your details, we do not trade them, and we do not send marketing to people who bought something unless they separately asked to hear from us.

Only the services that make an order actually happen, and each one sees only the part it needs.

• PayPal takes the payment. Your name and delivery address go to them with the order — that is what lets a payment qualify for their buyer and seller protection, so it is worth having.
• Our courier is told your name, address and phone number. A parcel cannot be delivered without them.
• The companies that host the shop and send its email hold your order and your address in order to store it and to deliver a receipt. They work only on our instructions and are not free to use your details for anything of their own.

That is the whole list. Nobody is sent your details for advertising, and nothing about you is sold or traded. If you would like to know exactly which companies these are, ask us at support@wordbound.shop and we will tell you.

Your bag is kept in your own browser’s storage, not on our servers. Clearing your browser data empties it, and we never see it until you check out.

The shop sets no advertising or tracking cookies. The only cookie we set is a sign-in cookie for the shop’s own staff dashboard, which is of no use to you and is never set by browsing the shop.

We do count how many people visit which pages, so we know what is worth making more of. That counting sets no cookie, follows nobody between sites, and cannot tell us who you are.

• Orders are kept while the sale can still be disputed, returned or audited — five years, in line with the record-keeping expected of a business here.
• Messages to us are kept for two years, so a second question about the same order has its history.
• Subscriptions are kept until you unsubscribe. We keep the fact that you unsubscribed rather than deleting the row, so that a later import cannot quietly sign you up again.
• Reviews stay published unless you ask us to take yours down. The link that lets you write one stops working ninety days after the order.

Under the Data Privacy Act you may ask what we hold about you, have it corrected, object to how it is used, have a copy sent to you, and in most cases have it erased. Write to support@wordbound.shop and we will answer within fifteen days.

One limit worth stating plainly: we cannot erase the record of an order that is still within its dispute or tax window, because that record is what proves the sale to PayPal and to the BIR. Everything else can go.

If you are not satisfied with how we have handled a request, you can complain to the National Privacy Commission.

The site is served only over HTTPS. Card details never touch our servers. The database refuses to hand order records to the public website at all — they are reachable only by the shop’s own dashboard, behind a password.

No shop can promise nothing will ever go wrong. If something does go wrong with data that identifies you, we will tell you and the National Privacy Commission rather than quietly hoping.

If this notice changes in a way that matters, the date at the top changes with it. Read alongside our terms of sale.