Privacy Policy

1. Personal information controller

C&R Industrial Tools and Supply operates this ecommerce website. Privacy questions and data-subject requests may be sent to support@rodelc.com or through the support form.

2. Information we collect

• Account data such as name, email, mobile number and password hash.
• Delivery information such as recipient, address, barangay, city, province and postal code.
• Order, product, shipping, payment status and customer-support records.
• Technical/security information such as IP address, user agent, login attempts and audit events.
• Information you voluntarily provide in order notes, warranty/return requests or support tickets.

3. Why we process it

We process information to create and secure accounts, perform the sales contract, validate stock, receive/verify payment, fulfill and track delivery, provide customer support, process cancellations/returns/warranty concerns, prevent fraud, maintain accounting/audit records, comply with legal obligations, and protect the store and customers.

4. Payment information

For PayMongo checkout, payment entry is hosted/handled by the payment provider. The store records transaction references, status, amount and reconciliation data needed to verify the transaction. The application is not designed to store full payment-card numbers or CVV/security codes.

5. Who may receive information

We may disclose only the information reasonably needed to service providers involved in the transaction, such as J&T Express or LBC for delivery, PayMongo/payment providers for payment processing, hosting/database providers, and configured email providers. We may also disclose information where required by law, lawful process or competent authorities.

6. Data minimization and marketing

We aim to collect information that is relevant to the stated purpose and avoid unnecessary sensitive information. This V2 build does not include a marketing-email subscription system or sale of personal information for advertising. If non-essential marketing/analytics tools are added later, this policy and consent controls should be updated before deployment.

7. Retention

Account and transaction records are retained only as long as reasonably necessary for fulfillment, support, fraud prevention, warranty, accounting, tax/legal obligations, dispute handling and legitimate business records. Different records may require different retention periods. Data that no longer needs to be retained should be securely deleted or anonymized where appropriate and lawful.

8. Security

The application uses password hashing, prepared database statements, CSRF protection, strict/HTTP-only session cookies, role-based admin access, login throttling, upload validation, webhook verification, HTTPS production rules and audit logging. No system is completely risk-free; suspected incidents should be reported promptly to the privacy contact.

9. Your rights

Subject to applicable law and valid exceptions, you may ask to be informed about processing, request access or correction, object or withdraw consent where consent is the basis, request deletion/blocking where applicable, and raise a privacy complaint. We may need to verify identity before acting on a request.

Submit Privacy Request

10. Cookies and device storage

The website uses essential session cookies for login, cart and checkout-security functions. See the Cookie Notice.

11. Policy changes

Material changes will be reflected by an updated version/effective date. The policy version accepted during checkout is stored with the order.