Privacy Policy

INSTOREREVIEWS DIGITAL MARKETING SERVICES ("In Store Reviews," "ISR," "we," or "us") respects the privacy of its customers, authorized users, and visitors.

This Privacy Policy explains how we collect, use, store, share, and protect personal information through our website, application, QR-powered guest pages, and hosted business websites.

We process personal information in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules, and other applicable laws.

Registered business name: INSTOREREVIEWS DIGITAL MARKETING SERVICES
DTI Certificate No.: 7345836
Business location: Lapu-Lapu City, Cebu 6015, Philippines
Email: info@instorereviews.com
Phone: +63 948 196 4567

ISR operates as a home-based online business and does not maintain a public customer-facing office. Our complete registered address may be disclosed confidentially to authorized entities where required by law.

Privacy inquiries and data subject requests may be sent to info@instorereviews.com.

ISR may act as a personal information controller when handling information necessary to operate customer accounts, process subscriptions, communicate with customers, and administer the platform.

When processing guest feedback, survey responses, and certain staff activity records on behalf of subscribing businesses, ISR generally acts as a personal information processor.

The subscribing business determines the purpose and lawful basis for collecting and using that information.

Depending on how the Service is used, we may collect:

Account and business information: Names, email addresses, phone numbers, account credentials, business details, team roles, and account settings.

Billing and transaction information: Subscription plans, payment amounts, payment dates, transaction identifiers, invoices, and billing status.

Service and technical information: IP addresses, device and browser details, security logs, sign-in activity, and usage information.

Guest interaction information: QR scan timestamps, QR location identifiers, survey answers, feedback, and interactions with business pages.

Staff response information: Alert delivery, acceptance, resolution status, response times, and notes entered by authorized staff.

Uploaded content: Business images, menus, website content, documents, and materials submitted to AI-assisted features.

Delivery information: Recipient names, contact details, and shipping addresses when physical products are ordered.

We use personal information to:

• Register and administer customer accounts.
• Provide subscriptions and purchased services.
• Process payments and maintain transaction records.
• Deliver printed QR products.
• Operate feedback, alerts, surveys, and analytics.
• Provide customer support and resolve complaints.
• Maintain platform security and prevent fraud.
• Fulfill legal, accounting, and regulatory obligations.
• Improve the reliability and functionality of the Service.

We process information only where an appropriate legal basis applies, including contractual necessity, legitimate interests, legal obligations, or consent where required.

ISR uses authorized third-party payment providers to process purchases, subscription payments, refunds, and recurring billing.

Depending on the payment method and availability, these providers may include PayPal, Xendit, or other providers disclosed during checkout.

A provider is used only when its payment method has been activated and made available to customers.

Payment providers may collect payment credentials, billing details, transaction identifiers, and fraud-prevention information according to their own privacy policies.

ISR does not intentionally collect or store complete payment card numbers or card security codes on its own servers.

We retain payment references and billing records needed for account management, refunds, disputes, and legal compliance.

For recurring subscriptions, we may store subscription identifiers, billing intervals, renewal dates, payment status, and payment-provider references.

Payment providers may retain authorization information or payment tokens necessary to process future subscription charges.

Customers may cancel recurring subscriptions according to our Terms and Conditions and Refund & Cancellation Policy.

When a guest scans an ISR-powered QR code, the platform may record the QR location, time of interaction, page activity, and feedback voluntarily provided.

Negative feedback may trigger notifications to authorized personnel of the subscribing business.

The business receiving feedback is responsible for explaining its use of guest information and meeting applicable privacy requirements.

ISR does not sell guest feedback or personal information.

Certain features may transmit customer-provided images, text, or audio to authorized AI service providers, including OpenAI, to generate requested results.

Customers should avoid submitting unnecessary sensitive personal information and must ensure they have the right to use uploaded materials.

AI processing is subject to the applicable service arrangements and privacy safeguards.

ISR may engage service providers for functions such as:

• Cloud hosting and database storage
• Email delivery
• Payment processing
• Notifications
• Mapping and business listings
• AI-assisted processing
• Website delivery and security
• Error monitoring and technical support

Providers may include DigitalOcean, Google, Mailgun, OpenAI, Cloudflare, PayPal, and Sentry, where used in the current production environment.

Xendit or another payment provider may be added when activated.

We share only information reasonably necessary for the relevant service and apply appropriate contractual and technical safeguards.

Some providers process or store information outside the Philippines, including in the United States.

Where personal information is transferred internationally, ISR applies appropriate safeguards and remains subject to its obligations under applicable privacy laws.

ISR may use essential cookies and browser storage for sign-in sessions, security, preferences, and QR interaction functionality.

Third-party integrations may use their own technologies subject to their applicable policies.

Any nonessential tracking or advertising technologies will be disclosed and managed in accordance with applicable consent requirements.

We retain information only for as long as reasonably necessary to provide services, comply with legal obligations, resolve disputes, and protect legitimate business interests.

Account and business content may be retained while subscriptions are active and for a reasonable period afterward to support account recovery or reactivation.

Billing, tax, and transaction records are retained for legally required periods.

Guest feedback and staff-response information are retained according to applicable customer arrangements and lawful deletion requests.

We use reasonable organizational and technical measures to protect personal information, including encrypted communications, access restrictions, account authentication, and security monitoring.

No online service can guarantee absolute security.

Where required by law, ISR will notify affected parties and appropriate authorities of qualifying personal data breaches within applicable reporting deadlines.

Subject to applicable law, individuals may have the right to:

• Be informed about processing of their information.
• Access and correct personal information.
• Object to certain processing activities.
• Request deletion, blocking, or erasure where legally appropriate.
• Request data portability where applicable.
• File a complaint with the National Privacy Commission.

Requests may be sent to info@instorereviews.com.

We may verify identity before fulfilling requests and may retain information where legally required.

For information controlled by a subscribing business, we may coordinate with that business.

ISR's business accounts are intended for adults acting on behalf of businesses.

Our guest-facing pages are not designed to intentionally collect personal information from children.

Where information relating to minors is processed, applicable legal safeguards and requirements must be followed.

We may update this Privacy Policy when our practices, providers, or legal obligations change.

Material changes will be communicated through the website, application, or customer email as appropriate.

For questions, privacy requests, or complaints, contact:

INSTOREREVIEWS DIGITAL MARKETING SERVICES
DTI Certificate No. 7345836
Lapu-Lapu City, Cebu 6015, Philippines
Email: info@instorereviews.com
Phone: +63 948 196 4567

Individuals may also contact the Philippine National Privacy Commission at https://privacy.gov.ph.