Last Updated: September 19, 2026
This Privacy Policy explains how [LEGAL ENTITY NAME — e.g. "ATBP Marketplace, Inc." or the registered sole proprietorship name], operating ATBP at [REGISTERED BUSINESS ADDRESS, PHILIPPINES] ("ATBP," "we," "us"), collects, uses, discloses, and protects personal data in connection with the ATBP Platform, as the Personal Information Controller for that data, in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
For any question, request, or complaint about this Policy or your personal data, contact ATBP at contact@atbph.com. Designated privacy contact / Data Protection Officer: [DPO NAME, or "the Privacy Contact below" once a Data Protection Officer is formally designated per NPC Circular 16-01].
Most personal data comes directly from you, when you create an account, complete your profile, apply as a Seller, place or fulfil an order, or message another User. Some information (device/browser data, page activity) is collected automatically as you use the Platform. Where you sign in using Google or Facebook, we receive the name, email address, and profile photo that provider shares with us under your permission to that provider, not anything beyond what you've authorized there.
We use personal data to: operate and maintain the Platform and User accounts; process orders and, where a Seller is owed proceeds, calculate and record payouts; verify Seller identity and business registration; facilitate local pickup and delivery matching; enable messaging and reviews between Users; provide customer support and handle complaints under our redress mechanism; send transactional messages (order updates, account notices) and, where you've consented, marketing communications; detect and prevent fraud, abuse, and violations of our Terms of Service; and comply with legal and regulatory obligations, including those under the Internet Transactions Act (RA 11967).
We process personal data on the basis of your consent (given when you create an account and agree to this Policy), the necessity of processing to perform our contract with you (fulfilling orders, providing the marketplace service), and compliance with our legal obligations. You may withdraw consent for non-essential processing (such as marketing communications) at any time through your account settings or by contacting us.
When you buy something on ATBP, ATBP shares the information the Seller needs to fulfil that specific order with the Seller: your name, delivery address (or pickup arrangement details), phone number, and the order/product details. For a message you send a Seller, that Seller sees what you send them. ATBP does not give a Seller access to your payment card or wallet details, your full order history with other Sellers, or any personal data beyond what that particular order or conversation requires.
Sellers must only use a Buyer's information for the transaction it was shared for, and for a Seller's own applicable legal obligations (such as tax or shipping records). A Seller must not: sell or rent Buyer information to anyone; share it with an unrelated third party; use it for marketing unrelated to that order; add a Buyer to the Seller's own marketing list without the Buyer's separate, appropriate consent; or use it for any purpose unrelated to fulfilling that transaction. A Seller who misuses Buyer information this way is in breach of the Terms of Service and may have their account suspended or terminated.
Beyond the Buyer-to-Seller sharing above, we share personal data only as necessary with: the third-party service providers listed in Section 8, to the extent each one needs to do its job; and government agencies or regulators where required by law, such as in response to a valid legal order or under the Internet Transactions Act. We do not sell personal data to third parties.
ATBP currently uses the following categories of third-party service provider. This list reflects what the Platform actually uses today, and will be updated if that changes:
ATBP does not currently use a third-party payment processor, payout processor, SMS provider, or courier API to move real transactions, payouts, text messages, or shipments; checkout, payouts, and shipping on the Platform run through ATBP's own systems today. If ATBP connects a real payment processor, payout provider, SMS provider, or shipping courier's API in the future, this Policy will be updated to name that provider and explain what it processes before that change takes effect.
The Platform currently uses only cookies that are strictly necessary for it to function: a session cookie that keeps you logged in, and a cookie that remembers the city/area you've selected for local discovery. Neither is used for advertising, and neither is shared with an ad network. Site analytics (Section 8) is cookieless. Because the Platform does not currently set any non-essential or advertising cookie, it does not currently show a cookie-consent banner; if that changes, this Policy and the Platform will be updated together, with a consent mechanism added before any non-essential cookie is set. You can still block or delete cookies through your browser's own settings at any time, though doing so may sign you out or reset your saved area.
Some of our service providers (see Section 8) may process or store personal data on servers located outside the Philippines as part of their own global infrastructure. Where this occurs, we choose providers that maintain a comparable standard of data protection, consistent with the Data Privacy Act's requirements for cross-border data transfers.
We keep personal data only as long as needed for the purpose it was collected for, or as long as applicable law requires. Where an exact period depends on a legal requirement (tax, corporate recordkeeping, or a payment provider's own rules) rather than ATBP's own choice, that's noted below instead of a specific number of days, since it isn't ATBP's to set unilaterally.
| Category | Retention |
|---|---|
| Account information | While your account is active, plus a limited period after closure to handle any follow-up dispute or legal obligation. |
| Order and transaction records | As required for Philippine tax and business recordkeeping obligations, which ATBP has not independently shortened. |
| Seller verification documents (ID, BIR registration) | For as long as needed to keep the Seller account verified, and thereafter as required by applicable business/legal recordkeeping requirements. |
| Payment-related records | As required by applicable tax, accounting, and (once a real payment provider is connected) that provider's own recordkeeping requirements. |
| Customer support and dispute records | Long enough to handle a follow-up complaint, appeal, or legal claim related to that case. |
| Marketing preferences | Until you withdraw consent, plus a short record that you did so. |
| Fraud/security records | Long enough to investigate and to prevent repeat abuse, consistent with applicable law. |
When data is no longer needed for any of these purposes, we securely delete or anonymize it.
Subject to applicable law, you have the right to:
To exercise these rights, or to request account deletion, contact us at contact@atbph.com or through the contact form. Account deletion is currently handled by our support team on request rather than a self-service button; we'll confirm with you once it's processed. Deleting your account does not erase records ATBP is legally required to keep (e.g., completed order/tax records).
We only send marketing communications (as opposed to transactional messages about your own orders or account) if you've opted in, and every marketing message includes a way to opt out. Opting out of marketing does not stop transactional messages needed to service your account or orders.
We apply reasonable technical and organizational safeguards to protect personal data, including encrypted connections (HTTPS/TLS) between your device and the Platform, encryption of stored data at rest through our infrastructure providers, hashed (not plain-text) passwords, rate limiting against automated abuse, role-based access controls for ATBP staff, and audit logging of administrative actions. No system is completely secure, and we cannot guarantee absolute security; we work to reduce risk and to respond quickly if something goes wrong, as described in the next section.
If a personal data breach occurs that is likely to give rise to a real risk of serious harm to affected Users, ATBP will notify the National Privacy Commission and affected Users within the timeframe required by NPC regulations, and will take reasonable steps to contain and address the breach.
The Platform is not directed to, and Users must be at least 18 years old or the age of majority in their jurisdiction. We do not knowingly collect personal data from minors.
We may update this Privacy Policy from time to time. Material changes will be notified to Users through the Platform or by email before taking effect.
For questions, requests, or complaints regarding this Policy or your personal data, contact: contact@atbph.com.
See also our Terms of Service, which this Policy forms part of.