Privacy policy

SUNSTREET DATA PRIVACY NOTICE

Effective Date: July 25, 2025

We at New Barbizon Fashion Inc. (NBFI) are dedicated to protecting the privacy and security of your personal data. This Data Privacy Notice explains how we collect, use, and protect your information when you use our eCommerce website, Sunstreet.com.ph, in full compliance with the Philippine Data Privacy Act of 2012 (DPA).

What is personal data, and what data do we collect from you?
To provide you with our products and services, we collect the following types of personal information:

  • Information You Provide Directly:
    • Identity and Contact Data: Your full name, email address, telephone number, and shipping/billing addresses.
    • Account Data: Your username and password for your Sunstreet.com.ph account.
    • Transaction Data: Your purchase history and order details. Please note that payment information is processed securely by our partners; we do not store your full credit card details.
  • Information We Collect Automatically:
    • Usage and Device Data: Information about how you interact with our site, including your IP address, browser type, and pages viewed. This data is collected via cookies and other technologies like Google Analytics and Facebook Pixel.

Who is the Personal Information Controller?
New Barbizon Fashion Inc. (NBFI) is the personal information controller. This means we determine how and why your personal data is processed. Our eCommerce platform provider, Shopify, also acts as our Personal Information Processor.

How do we protect your data?
Your data is 100% safe with us. We implement appropriate technical, organizational, and physical security measures, including SSL encryption, strict access controls, and regular security assessments to protect your data from unauthorized access, alteration, or destruction.

Why do we collect your personal data?
We process your personal data only for legitimate purposes. We need your data to:

  • Process, fulfill, and deliver your orders.
  • Manage your account and provide customer support.
  • Process payments securely via our payment partners.
  • Conduct fraud analysis and prevent high-risk transactions.
  • Improve our website, services, and user experience.
  • Send you marketing and promotional communications if you have explicitly given us your consent to do so.
  • Comply with legal and regulatory obligations.

Who can we share your personal data with?
We only share your data with trusted third parties who are essential for our operations. These include:

  • Platform Provider: Shopify, which hosts our eCommerce store.
  • Payment and Delivery Partners: GOGO Express, for payment processing and order delivery.
  • Analytics and Marketing Partners: Google (Analytics) and Meta (Facebook Pixel) to help us understand website traffic.
  • Legal Authorities: If required by law, court order, or other legal processes.

Your data may be stored outside the Philippines by our partners, like Shopify. In such cases, it is protected by internationally recognized safeguards like Standard Contractual Clauses (SCCs).

Where and how long do we keep your personal data?
We retain your personal data for five (5) years from your last interaction with us (e.g., your last purchase or account login). After this period, your data will be securely deleted or anonymized, unless a longer retention period is required by law.

What are your rights as a data subject?
You have the right to be informed, to access your data, to rectify inaccuracies, to object to processing, to request erasure or blocking, to withdraw consent, and to data portability. You also have the right to file a complaint with the National Privacy Commission (NPC).

What if there are changes to this Privacy Policy?
We may update this policy periodically. We encourage you to review this page regularly for the latest information on our privacy practices.

How can you contact us?
For any questions, concerns, or requests regarding your data, please contact our Data Protection Officer:

You can also file a complaint with the National Privacy Commission (NPC). For further details, please refer to NPC’s website: https://privacy.gov.ph/mechanics-for-complaints.

Please note that any request for correction, erasure, and/or objection to the processing of your personal data is subject to applicable laws and/or the DPA, its IRR, and other issuances of the NPC.