Privacy Policy

Alleba Advertising and Events, 58 Luisa Street, Juna Subdivision, Matina, Davao City, Philippines, is the personal information controller for data collected through alleba.com. You can reach us at hello@alleba.com.

• Account details: name, username, email address, password (stored hashed), and — if you sign in with Google — the basic profile Google shares with us.
• Shop details: shop name, tagline, category, logo, links, fulfilment locations and the payment QR image you upload.
• Listings: product titles, descriptions, photos, prices, variants and stock.
• Orders: items ordered, amounts, delivery or pickup details, buyer contact details, payment references and order status.
• Messages: chat between buyers and sellers, and support tickets or dispute reports including any files you attach.
• Identity documents: for sellers who apply for verification, a government-issued ID image and a selfie.
• Billing: your plan, payment status and references from our payment provider. We never see or store your full card number.
• Beta applications: name, email, business name and what you intend to sell.
• Technical data: IP address, browser and device information, pages visited and referrers.

• To create and run your account, shops and listings.
• To let buyers and sellers complete and track orders and talk to each other.
• To verify seller identity and display trust badges.
• To handle support tickets, reports and disputes.
• To take payment for paid plans and issue receipts.
• To send service email such as verification codes, welcome mail, order updates and shipping notices.
• To detect fraud and abuse and keep the platform safe.
• To understand traffic and improve the site.

We rely on your consent, on performing our contract with you, on our legitimate interest in running a safe platform, and on legal obligations, as applicable.

• Public: your shop page, listings, public shop details, trust badges and the reviews you leave.
• The other party in a transaction: when you place an order, the seller sees the contact and delivery details needed to fulfil it. You see the seller's shop and payment details.
• Alleba admins: account, order, support and verification data, as needed to run the platform.
• Nobody else by default. Identity documents and dispute attachments are kept in private storage and are not publicly reachable.

We do not sell your personal data, and we do not share it for third-party advertising.

• Hosting, database, authentication and file storage for the site and its data.
• A payment provider for Alleba plan payments. Buyer-to-seller payments happen outside Alleba, directly between you and the seller.
• An email delivery provider for verification, notification and support email.
• Google Analytics for aggregate traffic measurement.
• Google Maps for turning a seller's pickup or meetup address into a map link.
• Google Sign-In, if you choose to sign in with a Google account.

These providers may process data outside the Philippines. We only pass them the data they need to deliver their service.

• Account and shop data: while your account is open, then removed or anonymised after closure, except where we must keep records.
• Order and receipt records: kept for our own bookkeeping and tax records.
• Identity documents: kept while your shop is verified and for a limited period afterwards for fraud-prevention and audit purposes, then deleted.
• Support tickets and disputes: kept so we have a history if an issue resurfaces.
• Analytics data: retained by the analytics provider under its own retention settings.

Access to your data is controlled at the database level so that you can only read your own records and the records of transactions you are part of. Private files such as identity documents and dispute attachments are served only through short-lived links to authorised users. No system is perfectly secure, so please use a strong, unique password and tell us straight away if something looks wrong with your account.

We use cookies and similar storage to keep you signed in and to remember your cart and preferences. Google Analytics sets its own cookies to measure traffic in aggregate. You can block cookies in your browser or install Google's opt-out add-on, though signing in will not work without the session cookies.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) you have the right to be informed, to access your data, to correct inaccurate data, to object to certain processing, to have your data erased or blocked where the law allows, to data portability, and to lodge a complaint.

Email hello@alleba.com to make a request and we will respond within a reasonable period. You can also complain to the National Privacy Commission if you are unhappy with how we handled your request.

Alleba is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has registered, email us and we will remove the account.

We will post updates here with a new “last updated” date, and notify account holders when a change is significant.