The law we follow
The Philippine Data Privacy Act of 2012 (RA 10173). We also honour the extra rights given by laws such as the GDPR (EU and UK), PDPA (Singapore) and CCPA (California) where they apply.
Who is responsible for what
| Data | Who decides how it's used | Our role |
|---|---|---|
| Your Likom account | Us | Controller |
| Business owner and staff accounts | Us | Controller |
| A business's customer relationship data (its cards, purchases, rewards) | The business | We process it for the business under the Selyo data processing terms |
Your rights
To be informed, to access, to correct, to object, to erase or block, to data portability, and to complain to the National Privacy Commission. Requests to [email protected]; we answer within 15 days.
How long we keep data
Accounts while they are active, then deleted or anonymised. Purchase and business records are kept for the periods set out in the full notices (for tax, audit and dispute purposes), without names where the law allows. Unused accounts are closed after two years, with notice.
Providers
Neon (database, Singapore), Railway (servers), Cloudflare (websites and images), Resend (email) and Google (sign-in, notifications) process data for us under contracts that limit them to our instructions.
If something goes wrong
If a breach is likely to put people at risk, we notify them and the National Privacy Commission within the time the law requires.
Data Protection Officer
Reach our Data Protection Officer at [email protected].
See also security and the full privacy notices.