Privacy Policy

This website is run by Cocopo Coconut Products ("Cocopo", "we", "us"), a maker of virgin coconut oil based in Tayabas City, Quezon, Calabarzon, Philippines.

We handle personal data in line with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission.

We collect only what you give us, and what we need to answer you:

• Inquiries. Your name, email address, mobile number, and the subject and message you send through our contact form.
• Packaging quote requests. Your name, email address, mobile number, company, the packaging, branding and quantity you chose, your notes, and whether you would like us to call you.
• Customer accounts. Your name, email address and password (stored only in a form that cannot be read back), and, if you turn them on, your two-factor and passkey settings.
• Shipping address. The recipient, mobile number, company, address and delivery notes you save in your account.
• Technical data. Your IP address and browser details, which our server records to keep the website secure and working.

We do not ask for, and ask you not to send us, sensitive personal information such as government ID numbers or health records.

• To answer your inquiries and prepare your quotes.
• To call you about a quote, when you ask us to.
• To process, deliver and follow up on your orders.
• To run your account, and to show you the requests you have sent.
• To keep the website secure, and to prevent spam and abuse.
• To meet our obligations under Philippine law, such as keeping business records.

We process your data because you asked us for a quote, an answer or an account, because we need it to fulfil an order, because the law requires it, or, for analytics, because you agreed to it. We do not sell your personal data, and we do not use it for advertising.

When you send a packaging request without signing in, your browser keeps a random code in a cookie for up to a year, so it can show you the requests it sent. We keep only a scrambled form of that code, which cannot be turned back into the cookie.

If you later create an account with the same email address and confirm it, the requests sent with that address are added to your account.

Our website uses a few cookies:

• Needed to work: a session cookie and a security token that keep you signed in and protect our forms, and the cookie that remembers your packaging requests.
• Preferences: your light or dark theme, whether the account sidebar is open, and your cookie choice.
• Analytics, only if you say yes: Google Analytics, which counts visits to our pages. It is not loaded until you accept it, and you can change your mind from the cookie settings link at the foot of every page.

Your data is seen by Cocopo staff who handle inquiries, quotes and orders. We also rely on a few service providers who process it on our behalf and only as we instruct:

• the company that hosts our website and database;
• the service that delivers our emails;
• Google, for analytics, if you have accepted it; and
• couriers, to deliver your orders.

Some of these providers may store data outside the Philippines. Where they do, we take steps to make sure your data stays protected. We share data with government authorities only when the law requires us to.

We keep inquiries and quote requests for as long as we need them to serve you, and for as long as the law requires us to keep business records. We keep your account until you ask us to close it. When we no longer need your data, we delete it or make it anonymous.

Our website is served over an encrypted connection. Passwords are stored only in hashed form, accounts can be protected with two-factor sign-in and passkeys, and only staff who need your data can see it. No system is perfectly secure; if a breach ever puts your data at risk, we will tell you and the National Privacy Commission as the law requires.

Under the Data Privacy Act, you have the right:

• to be informed about how your data is used;
• to access the data we hold about you;
• to have wrong or outdated data corrected;
• to object to its processing, and to withdraw your consent where we rely on it;
• to have it erased or blocked;
• to receive it in a form you can take elsewhere;
• to be compensated for damages; and
• to file a complaint with the National Privacy Commission.

You can correct your name, email address and shipping address yourself in your account. For anything else, including closing your account, get in touch with us.

For questions about your data or this policy, send us a message through our contact page or call us on +63 917 315 6164. We may ask you to confirm who you are before we act on a request about your data.

We may update this policy from time to time. The date at the top says when it last changed.