Privacy

The short version

We collect what we need to make and deliver your order, we keep it only as long as we need it, and we do not sell it or share it with anyone except the people who deliver your package and process your payment.

Who we are

Thirdside Works is a sole-proprietor workshop in Marikina, Metro Manila, Philippines. The registered business name appears in the footer of this site. For anything about your data, message us on Messenger or use the contact details on the contact page.

What we collect, and why

When you place an order we collect:

Your name and a way to reach you (Messenger profile, phone number or email) — to confirm the order and send the photo before shipping.
A delivery address, or your choice of pickup — to deliver the piece. Addresses are passed to the courier for that delivery only.
The personalisation details: names, dates, text and photos you send us — to make the piece. Photos are used only to make your order.
Payment confirmation (a reference number or screenshot) — to match your payment to your order. We do not see or store card numbers; GCash, Maya and your bank handle those. When you pay online, PayMongo's own page takes the payment; we receive only whether it was paid, the method and the amount.

When you order on this site, the order itself — the details above — goes to our own order system; the website keeps only the order number, the private link to your order page, your e-mail, when you ordered, and how you heard about us if you tell us.

We use your e-mail for your orders, and for reminders if you turn them on: the confirmation, and a short note when their status changes — payment received, ready, on its way, delivered or cancelled.

When you browse the site it sets a few small cookies of its own, and no others: two hold your cart for 30 days — what is in it, and the number of pieces for the cart icon; one notes how your first visit began — the page you landed on, the site that linked you here, and any campaign tag in the link — for 30 days, so that an order can tell us which posts bring people in; and, for ten minutes after you place an order, one remembers that order's page, so a second tap on Place order shows it instead of placing another. If you use My orders, your device keeps a small cookie for 30 days so you stay signed in; it holds a scrambled form of your e-mail, never the e-mail itself. Sign out of My orders removes it.

If you sign up for our newsletter — on this site, or by ticking the box at checkout — we keep your e-mail address, where you signed up, the sentence you agreed to and the date you confirmed. It brings new designs, gift ideas and order deadlines. Nothing is sent until you confirm: we e-mail you a link, and the sign-up counts only once you tap it. Every newsletter e-mail has a link to stop it, and you can stop any time. The list is kept by Thirdside Works and is never shared or sold.

To know which pages people read, the site uses Cloudflare Web Analytics: a cookieless count of visits and pages, by Cloudflare. It sets no cookie, does not follow you from site to site and does not identify you, and it never runs on a page whose address carries a private link — your order page, the way back from a payment, My orders, and the newsletter's confirm and stop pages.

If you sign in to My orders and save people, we keep what you type about them (the name to print, who they are, their style and their dates) until you delete it. If you turn on reminders, we also keep your e-mail to send them; turn reminders off or delete everything any time from My orders.

How long we keep it

Order details, including names and delivery addresses: two years after the order, for warranty, remakes and the records the Bureau of Internal Revenue requires.
The map pin for your delivery: deleted from our order system as soon as your order is delivered or cancelled, and never kept longer than 30 days; it is never in our backups. Our own copy of your order e-mail keeps its map link.
Photos you send for lithophanes, Larawan and similar pieces: deleted from our working files 30 days after the piece ships. We do not keep a copy and we do not make a second piece from it.
Chat messages live in Messenger under Meta's own policies; we do not export them.
Newsletter subscriptions: until you unsubscribe.
People you save in My orders (the name to print, who they are, their style and their dates): until you delete them; the e-mail for your reminders, until you turn reminders off or delete everything.

Who else sees it

Only the services needed to complete your order: the delivery rider or courier (name, phone, address for that delivery), the payment service you chose, and the e-mail service that sends your order confirmation and updates. We do not sell personal data, we do not share it for advertising, and we do not publish photos of your finished piece without asking you first.

At checkout, for a delivery in Metro Manila, the map and the place search come from Google Maps. What you type to search for your place, the place you pick and the pin you drop go straight from your browser to Google, under Google's own privacy policy, so it can show the map and find the spot. This site keeps none of it — not your search, not your pin: the pin goes to our order system with your order, for the rider, and as a map link into our own copy of your order e-mail.

Your rights

Under the Data Privacy Act of 2012 (Republic Act 10173) you have the right to know what we hold about you, to correct it, to have it deleted when it is no longer needed, and to object to its use. Message us and we will act within a reasonable time, normally a few days. If you are not satisfied, you may complain to the National Privacy Commission.

By placing an order you consent to the collection and use described on this page, for that order. You can withdraw consent at any time by asking us to delete your details, except where we are required by law to keep order records.

Changes

If this page changes in a way that matters, the date at the top changes with it.