DRAFT — pending review by Philippine counsel before launch. Written against the Data Privacy Act of 2012 (RA 10173) and National Privacy Commission guidance.

Privacy notice

1stopshopbiz Corp. is the personal information controller for the SultanPay waitlist. Brand: SultanPay. Registered address: Unit 15 CV Starr Arcade, C.V. Starr Ave., Philam Village, Pamplona Dos, Las Piñas City.

Contact for privacy requests: hello@sultanpay.co. Data Protection Officer contact: {{DPO_EMAIL}} (placeholder until a DPO contact is designated).

What we collect

For the user waitlist: email address and/or Philippine mobile number, region, the time you gave consent, the version of the consent text, a salted hash of your IP address (not the IP itself), IP country when the host provides it, campaign parameters, a referral code, and any optional answers you add after joining.

For the merchant waitlist: business name, contact name, mobile number, city or municipality, business type, approximate customers per day, whether you already accept QR payments, consent metadata, and campaign parameters.

Purpose

We use this personal information to run the waitlists, send a confirmation email when an email is provided, tell you about early access, and invite some people to product research. We do not sell the list.

Retention

Waitlist records are deleted within 12 months of launch or on request, whichever comes first.

Your rights under the Data Privacy Act

As a data subject you may exercise rights of access, correction, objection, erasure, damages, and data portability, and you may complain to the National Privacy Commission. To exercise these rights, write to hello@sultanpay.co or the DPO contact above.

How to withdraw consent

If you gave us an email address, every email has a one-click unsubscribe link. Using it records a withdrawal and stops further contact. You can also withdraw at any time at sultanpay.co/withdraw using the email address or mobile number you signed up with, or by writing to hello@sultanpay.co.