Last updated: June 27, 2026

Privacy Policy

At Soléia House, your privacy matters to us as much as the experience of wearing something beautiful. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have as a data subject under Philippine law — specifically the Data Privacy Act of 2012 (Republic Act No. 10173) and the rules and regulations issued by the National Privacy Commission (NPC).

Please read this policy carefully. By visiting soleiahouse.com or placing a rental or purchase order with us, you acknowledge that you have read and understood these practices.

1. Who We Are (Personal Information Controller)

The Personal Information Controller (PIC) for your data is:

• Legal Name: La Mode Saoirse
• Trade Name: Soléia House
• Website: https://soleiahouse.com
• Email: supportsoleiahouse@gmail.com
• WhatsApp / Phone: +63 945 329 0183
• DTI Business Name Registration No.: [TO BE PROVIDED: DTI Business Name Registration number]
• Registered Business Address: [TO BE PROVIDED: registered business / physical address]

2. Scope

This policy applies to all personal information collected through:

• Our website, soleiahouse.com
• Online orders and rental bookings placed through the site
• Communications via email, WhatsApp, or other messaging channels
• Social media interactions directly with Soléia House pages

It does not govern third-party websites or services we may link to. We encourage you to review their individual privacy policies.

3. Personal Data We Collect

3.1 Information You Provide Directly

• Identity information: Full name
• Contact information: Email address, mobile number
• Delivery information: Shipping address (province, city, barangay, postal code)
• Payment information: Payment is processed by PayMongo Philippines Inc., our third-party payment processor. We do not store raw card numbers, CVVs, or full bank account details on our systems.
• Government-issued ID (rentals only): A copy of a valid Philippine government ID is required to complete a rental transaction. This is used solely for identity verification and is handled per Section 7 (Data Retention) below.
• Body measurements (optional): Measurements you voluntarily share to help us assist with fit inquiries.

3.2 Information Collected Automatically

When you visit our website, we or our service providers may automatically collect:

• IP address and approximate location
• Browser type and version
• Device type and operating system
• Pages visited, time spent, and referring URL
• Cookies and similar tracking technologies (see Section 10)

3.3 Information from Third Parties

• PayMongo Philippines Inc.: Transaction status, payment method type, and fraud-screening signals
• Courier partners (e.g., J&T Express, LBC Express, and Lalamove): Delivery status updates
• Analytics providers: Aggregated, pseudonymous data on site usage

4. How We Collect Your Information

• Directly from you — when you create an account, place an order, book a rental, contact us, or subscribe to our newsletter
• Automatically — through cookies, pixels, and server logs when you browse our site
• From third parties — payment confirmation and delivery updates from PayMongo and our courier partners

5. Purposes and Legal Basis for Processing

6. Third-Party Sharing

We do not sell your personal data. We share it only as necessary to deliver our services:

• PayMongo Philippines Inc. — Our payment processor, registered with the NPC as a Personal Information Processor (PIP). When you check out, you consent to PayMongo’s Privacy Policy. PayMongo is PCI-DSS certified and handles your card and e-wallet data directly.
• Courier partners (e.g., J&T Express, LBC Express, and Lalamove) — Your name and delivery address are shared with the assigned courier to complete your delivery.
• Analytics and marketing platforms — Pseudonymised or aggregated data only, used to understand site performance. These providers are contractually bound to process data only for the purposes we specify.
• Government authorities — When required by Philippine law (e.g., BIR tax audits, NPC investigations, court orders), we will disclose personal data as legally mandated.

All third parties we engage are required to handle your data in compliance with RA 10173 and our data-sharing agreements.

7. Data Retention

• Transaction records (orders, payments, invoices): Retained for 5 years from the transaction date, in compliance with BIR requirements.
• Government-ID copies (rental verification): Retained only for the duration of the rental period plus 3 months, then securely destroyed (shredded or permanently deleted from digital systems).
• Account data: Retained while your account is active plus 2 years after your last transaction, or until you request erasure (whichever comes first).
• Marketing data (consent records, email lists): Retained until you withdraw your consent. Upon withdrawal, we will cease marketing communications within a reasonable time and delete or anonymise your marketing-specific data.
• Automatically collected data (server logs, analytics): Typically retained in aggregate or pseudonymised form for up to 2 years.

When retention periods expire or you exercise your right to erasure, we securely delete or anonymise your data.

8. Data Security

We take reasonable and appropriate security measures to protect your personal data, including:

• SSL/TLS encryption for all data transmitted between your browser and our website
• PCI-DSS compliance maintained by PayMongo for all payment card data
• Access controls — only authorised personnel have access to personal data, on a need-to-know basis
• Secure disposal of government-ID copies once their retention period expires

In the event of a personal data breach that is likely to adversely affect your rights and freedoms, we will notify the NPC within 72 hours of discovery, as required under NPC Circular No. 16-03. Where required, we will also notify affected data subjects without undue delay.

Our designated Data Protection Officer (DPO) can be contacted at:

• DPO Name: [TO BE PROVIDED: Data Protection Officer name]
• DPO Email: supportsoleiahouse@gmail.com

9. Your Rights as a Data Subject

Under RA 10173, you have the following rights regarding your personal data. To exercise any of these rights, please contact our DPO at the address in Section 12.

• Right to be Informed: To know what personal data we collect, how we use it, and with whom we share it — as set out in this Privacy Policy.
• Right of Access: To request a copy of the personal data we hold about you and information on how it has been processed.
• Right to Rectification: To have inaccurate or incomplete personal data corrected.
• Right to Erasure or Blocking: To have your personal data erased or blocked where it is no longer necessary, was collected unlawfully, or where you have successfully withdrawn consent and there is no other lawful basis for processing. Note that erasure is subject to our legal retention obligations (e.g., BIR records).
• Right to Data Portability: To receive your personal data in a structured, commonly used, electronic format, and to have it transmitted to another Personal Information Controller where technically feasible.
• Right to Object: To object to processing based on legitimate interest (including profiling for direct marketing). We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to File a Complaint with the NPC: If you believe your data privacy rights have been violated, you may lodge a complaint with the National Privacy Commission at privacy.gov.ph.
• Right to Damages: To be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.

We will respond to verified requests within 15 calendar days, unless the complexity or number of requests requires an extension, in which case we will notify you.

10. Cookies

Soléia House uses cookies and similar tracking technologies on our website. Cookies are small text files stored on your device that help us deliver a better browsing experience.

Types of cookies we use:

• Strictly necessary cookies: Required for the website to function (e.g., your shopping cart, checkout security). These cannot be disabled.
• Analytics cookies: Help us understand how visitors use the site (e.g., pages visited, time on site). These collect pseudonymous data.
• Marketing cookies: Allow us to show you relevant advertisements on other platforms and measure campaign effectiveness.

We will request your consent before placing analytics and marketing cookies. No non-essential cookie box is pre-ticked. You may withdraw your cookie consent at any time through your browser settings or our cookie preference tool. Withdrawing consent will not affect the lawfulness of any processing already carried out.

For instructions on managing cookies in your browser, visit allaboutcookies.org.

11. Updates to This Privacy Policy

We review and update this Privacy Policy periodically to reflect changes in our business practices, legal requirements, or technology. When we make material changes, we will post the updated policy on this page with a revised “Last updated” date. For significant changes, we may also notify you by email.

Your continued use of our website or services after the effective date of any update constitutes your acknowledgement of the revised policy.

12. Contact Us / Data Protection Officer

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to:

• Data Protection Officer: [TO BE PROVIDED: Data Protection Officer name]
• DPO Email: supportsoleiahouse@gmail.com
• General enquiries: supportsoleiahouse@gmail.com
• Instagram: @soleiahouse
• Facebook: @soleia
• NPC Registration No. (if applicable): [TO BE PROVIDED: NPC registration number, if required]

We respond within 24–48 hours, Monday to Saturday. Messages received on Sundays and public holidays are answered on the next business day.

For complaints that we are unable to resolve to your satisfaction, you have the right to contact the National Privacy Commission at privacy.gov.ph.

Disclaimer: The information on this page reflects our current policies and our understanding of applicable Philippine law, including RA 10173, RA 7394, RA 8792, and RA 11967. It does not constitute legal advice. For specific legal questions, please consult a licensed attorney in the Philippines. We periodically review and update these policies; the “Last updated” date indicates the most recent revision.