1. Privacy Policy
My Little Philippines V.O.F. is responsible for processing personal data through toko4all.nl and phil4you.nl. Our correspondence address is Linnewever 12, 2292 JH Wateringen, the Netherlands. This policy explains which personal data we process, why we do so, with whom we share data and what rights you have. For privacy-related questions, please contact [email protected]. Please note: this policy has been revised for readability and must be checked against current practices and services before publication.
1.1. Data processing for core services
1.1.1. Personal data processed by My Little Philippines
At Toko 4 All, we sell and deliver Asian products. When you use our services, you provide personal data that we need to receive your payment, deliver your order and provide customer service. For example, you receive a payment confirmation by email, and we may contact you by telephone if a delivery is delayed or there is a problem with a product.
The personal data we collect for these core services includes: • First and last name • Address details • Payment details • Email address • Telephone number • Other personal data you actively provide in correspondence
We do not intend to collect data from website visitors under the age of 16 without the consent of their parent or guardian. If you believe we have collected such data without consent, please contact us so that we can delete it.
1.1.2. How long My Little Philippines retains personal data
We do not retain personal data longer than necessary for the purposes for which it is processed. Records forming part of our tax administration are generally subject to a statutory retention period of seven years. Other data, such as correspondence or account information, is retained according to applicable needs and obligations. We assess deletion requests in light of any statutory retention requirements.
1.1.3. Third parties with whom My Little Philippines shares personal data
Delivery service MyParcel
We use MyParcel to arrange delivery of your order and share the personal data needed for this purpose. We have entered into a data processing agreement setting out the parties' responsibilities for protecting your data and privacy.
Web hosting provider Lightspeed
We use Lightspeed's software and hosting services and share personal data as necessary. We have entered into a data processing agreement setting out the parties' responsibilities for protecting your data and privacy.
Payment service provider Buckaroo
We use a payment service provider to process online payments. The data needed to complete a payment is processed under the applicable privacy terms of that provider. Before publication, confirm which provider is currently active (for example, Buckaroo or Mollie) and name it here.
Government authorities
Where legally required, we may share personal data with public authorities. For example, under Article 47 of the Dutch General Tax Act, a tax inspector may request information necessary for the assessment of taxes.
1.2. Data processing for account registration
1.2.1. Personal data processed by My Little Philippines
Creating an account is optional. An account allows you to view your order history and can make checkout faster if you save your shipping and billing information.
The personal data we may collect for an account includes:
- Username
- Password
- First and last name
- Address details
- Email address
- Telephone number
1.2.2. How long My Little Philippines retains personal data
You can view and update your account details yourself. You can also ask us to delete your account at any time.
1.3. Data processing for website statistics
1.3.1. Types of personal data processed by My Little Philippines
If we use website analytics, information about how visitors use our websites may be processed. The types of data collected and whether consent is required depend on the analytics tools and their actual settings. Non-essential cookies or similar technologies are used only where valid consent has been obtained.
Depending on the settings, data such as a shortened IP address and a browser or device identifier may be processed. Such data is not automatically completely anonymous.
If we use Google Analytics, we review its privacy settings, agreements with the provider and applicable cookie consent requirements. Before publication, confirm whether Google Analytics is actually used and how it is configured.
1.3.2. How long My Little Philippines retains personal data
The retention period for analytics data depends on the tool settings and the purpose of processing. Before publication, confirm the actual retention period configured.
1.4. Data processing for advertising
1.4.1. Advertising through Facebook and Google
We may advertise on platforms such as Google and Facebook. Where visitor data is collected through our own website for advertising or tracking purposes, we obtain prior consent where required.
1.4.2. Advertising preferences on Facebook and Google
You can generally manage your advertising preferences in the settings of the relevant platform. For cookies and similar technologies on our own websites, you can manage your preferences using the available cookie settings.
1.4.3. Processing only with explicit consent
We request prior consent for placing or accessing non-essential tracking technologies on our websites where required by law. You may withdraw that consent later.
1.4.4. Personal data processed by My Little Philippines
Depending on the advertising services used, online identifiers and usage data may be processed. Such data is not necessarily anonymous. We limit processing to what is necessary and permitted.
The anonymous personal data we collect from you includes:
- An anonymous identifier for your browser
- Anonymous demographic information and interests provided in your Google account
- Anonymous demographic information and interests provided in your Facebook account
1.4.5. How long My Little Philippines retains personal data
The retention period for advertising data depends on the services used and their settings. Before publication, confirm the actual retention periods.
1.5. Security of your data
1.5.1. How My Little Philippines protects personal data
We recognise the responsibility that comes with handling your personal data. We have taken various measures to prevent misuse, loss and unauthorised access.
We protect your data through the following measures:
- Our servers and devices are equipped with up-to-date security software, such as antivirus protection and firewalls.
- We transmit data over a secure SSL/TLS connection, indicated by ‘https’ and the padlock symbol in your browser.
- Access to personal data is protected by a strong password.
- Access to our Wi-Fi network is protected by a strong password.
- Our email server is protected using STARTTLS.
- We use DKIM and SPF email authentication standards to help prevent fraudulent emails sent in our name.
- We have entered into data processing agreements with our business partners.
If you believe your data is not properly secured or suspect misuse, please contact us.
1.6. Accessing, correcting, transferring or deleting your data
1.6.1. Your rights
You have the right to request access to, correction or deletion of your personal data. You may also request that we provide certain personal data in a machine-readable format to you or another organisation you designate. Where processing is based on consent, you may withdraw that consent at any time, including through our cookie settings where applicable. You can also object to the processing of your personal data. You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
1.6.2. How to submit a request
You can send a request for access, correction, deletion or data portability, or object to processing, by contacting René Zuidwijk at [email protected].
Where necessary to verify your identity, we may ask for additional information. We do not routinely request a copy of your identity document. If a copy is nevertheless needed, we recommend masking sensitive details such as your citizen service number (BSN) and document number.
We generally respond to requests within one month. For complex requests, this period may be extended under the conditions of the GDPR. We will inform you of any extension in good time.
2. Cookie Policy
2.1. About cookies
A cookie is a small text file that a website may store on your device. Cookies strictly necessary for the website to function may be used without prior consent. For other cookies or similar technologies, we ask for consent where legally required. Third-party services may also place cookies.
2.1.1. Essential cookies
Essential cookies enable basic website functions, such as page navigation and access to secure areas. Without them, the website may not function properly.
2.1.2. Website analytics cookies
If we use analytics cookies, they help us understand how our website is used. Where consent is required, these cookies are placed only after you have given permission. Before publication, confirm which analytics tools are actually active.
2.1.4. Advertising cookies
If we use advertising cookies or similar tracking technologies, we do so only with the required consent. These technologies may help measure advertising performance or make advertisements more relevant.
2.2. Managing cookie settings
You can manage your cookie preferences or withdraw consent through the cookie settings on our website, where this feature is available. You can also delete or block cookies in your browser. Disabling essential cookies may affect how the webshop functions. Before publication, confirm that the cookie banner offers a working way to change consent later.
3. Changes to this Privacy and Cookie Policy
We may update this Privacy and Cookie Policy if our services, systems or legal obligations change. The latest version will be published on our website. When publishing, state the actual date of the most recent substantive review.