Effective Date / Last Modified: October 15 2026 (PST)
Version: 2.0

​

This Privacy Policy explains how Chiqui Rodriguez Inc. (“CRI,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal data in connection with chiquirodriguez.com and related services. It is designed to comply with the Philippine Data Privacy Act of 2012 (RA 10173), the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), and other applicable US state privacy laws.

​

1. Scope & Controller
Chiqui Rodriguez Inc. is the data controller. This policy applies to personal data collected through our website, orders, accounts, emails, events, and linked services.

2. Categories of Personal Data We Collect

• Identity and contact data (name, email, phone, shipping/billing addresses)

• Transaction and payment data (order history, payment method details – processed by secure third-party providers; we do not store full card numbers)

• Technical and usage data (IP address, device/browser information, cookies, analytics)

• Communications and any other information you voluntarily provide

3. Purposes and Legal Bases
We process personal data for:

• Order fulfilment, production coordination, shipping, and customer service (performance of contract / legitimate interests)

• Payment processing and fraud prevention (performance of contract / legitimate interests / legal obligation)

• Compliance with legal obligations, including customs documentation and tax requirements

• Improving our website and services (legitimate interests)

• Marketing communications (consent or legitimate interests, with easy opt-out)

• Security and record-keeping (legitimate interests / legal obligation)

Where GDPR applies, we rely on the legal bases of contract performance, legitimate interests, consent, and legal obligation as appropriate. Where CCPA/CPRA applies, we collect and use personal information for the business purposes described above.

4. Sharing of Personal Data
We share personal data only with:

• Service providers (printers, packagers, couriers, payment processors, IT/hosting, analytics) under contractual data-protection obligations

• Authorities when required by law

• Other parties with your consent or as necessary to protect rights or safety

We do not sell personal information. We do not share personal information for cross-context behavioural advertising in a manner that would constitute a “sale” or “sharing” under CCPA/CPRA without providing the required opt-out rights.

5. International Transfers
Personal data may be processed in the Philippines and in other countries where our service providers operate. When transferring personal data from the EEA/UK/Switzerland, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission (or equivalent UK mechanisms). For other jurisdictions we implement contractual and technical safeguards consistent with applicable law.

6. Retention
We retain personal data only as long as necessary for the purposes stated, to comply with legal obligations, or to resolve disputes, after which it is securely deleted or anonymised.

7. Your Rights
Depending on your location you may have the right to:

• Access, rectification, erasure, restriction, and data portability

• Object to processing based on legitimate interests

• Withdraw consent at any time (without affecting prior processing)

• Opt out of the sale or sharing of personal information (CCPA/CPRA)

• Lodge a complaint with a supervisory authority (e.g., National Privacy Commission in the Philippines, or the relevant EU Data Protection Authority)

To exercise these rights, email publicrelations@chiquirodriguez.com. We will respond in accordance with applicable law. You will not be discriminated against for exercising your rights.

8. Security
We implement appropriate technical and organisational measures to protect personal data. No system is completely secure. Please notify us immediately of any suspected unauthorised access.

9. Children
Our services are not directed to children under 13 (or higher age required by local law). We do not knowingly collect personal data from children.

10. Cookies
We use cookies and similar technologies as described in our Cookie Policy. Essential cookies are required for site function and order processing. Preference and analytics cookies can be managed through your browser settings or our cookie banner (where required).

11. Changes
We may update this Privacy Policy from time to time. The revised version will be posted on this page with a new Effective Date. Material changes will be reasonably notified (for example by email or a prominent notice on the website). Continued use after the Effective Date constitutes acceptance where permitted by law.

12. Contact
For privacy questions or to exercise your rights:
publicrelations@chiquirodriguez.com

This Privacy Policy is governed by the laws of the Republic of the Philippines, without prejudice to mandatory protections under GDPR, CCPA/CPRA, or other applicable local privacy laws.