Who we are
TamarawGO is a food delivery platform in Mindoro, Philippines, run by TamarawGO Web Portal Services. It connects customers with independent local stores and independent riders. This policy explains what personal data TamarawGO collects, why, who can see it, and how long it is kept.
Personal information controller: Steven Dale Portugal Lucero, sole proprietor, doing business as TamarawGO Web Portal Services (registered with the Department of Trade and Industry and the Bureau of Internal Revenue), 2F Room 1, ZS Building, San Jose St., Payompon, Mamburao, Occidental Mindoro 5106, Philippines. Data protection officer: Steven Dale Portugal Lucero, reachable at help@tamarawgo.ph.
What we collect
- Your account: your name, mobile number (verified by a one-time code), email address and password. Passwords are stored only in a protected, irreversible form.
- Addresses: the delivery addresses and map pins you save.
- Orders: what you ordered, from which store, the prices and fees, how you paid, and each step of the order.
- Payments: for QR Ph, GCash and Maya payments, the payment reference from our payment provider, PayMongo. TamarawGO does not receive or store your bank or e-wallet login, PIN, card or account details.
- Proof of delivery: the rider's photo of the food at the door, and, when a customer cannot be reached, a screenshot of the rider's call log. These are deleted after 24 hours, unless they are part of an open incident report or must be kept under a legal request.
- Rider location: for riders, the phone's location while they are online and during a delivery, to offer orders nearby and to confirm deliveries. When a rider completes a delivery, their distance from the customer's pin is recorded.
- Reports and support: incident reports, the statements and evidence attached to them, and messages with our support staff.
- Devices: a notification token for your phone, and technical records such as IP address and app version, kept for security.
Why we use it
- To take, prepare, deliver and settle orders, including choosing a rider and working out the delivery fee from the road distance.
- To process payments, refunds, rider earnings and store payouts, and to keep accurate financial records.
- To send you updates about your orders and your account.
- To handle incident reports, support requests and disputes, and to keep the platform safe and free from fraud.
- To meet our legal obligations and respond to lawful requests from authorities.
[Legal basis for each purpose under Sections 12 and 13 of the Data Privacy Act.]
Who can see it
- The store on your order sees your name, the items and your town, not your exact pin. The rider sees your exact drop-off pin once they accept the order. Both can see your mobile number, so they can reach you about the order, from the time a rider accepts until 24 hours after the order ends.
- TamarawGO staff see only what their role needs. Contact details are hidden from staff until they give a reason, and every look is recorded.
- Service providers that run parts of the service for us: PayMongo for payments, Google Firebase for notifications, an SMS provider for verification codes, and our hosting providers.
- Authorities, only where the law requires it, such as a court order. Each such request is recorded.
TamarawGO does not sell personal data.
How long we keep it
Delivery photos and call-log screenshots are deleted after 24 hours, as above. Order, payment and financial records are kept for as long as Philippine law requires. [Retention period for each kind of record, after legal review.]
Your rights
Under the Data Privacy Act you may be informed about, access, correct, object to the processing of, and ask for the erasure or blocking of your personal data, ask for a copy of it, and complain to the National Privacy Commission. To delete your account, see Delete your account. For anything else, contact us at help@tamarawgo.ph.
How we protect it
Connections to TamarawGO are encrypted. Access is limited by role, staff sign in with a second factor, and sensitive actions are recorded in an audit log that cannot be changed. Photos are re-encoded on upload, which removes hidden data such as location tags, and are stored privately.
Children
[Minimum age to use TamarawGO, after legal review.]
Changes
If this policy changes, the new version will be posted here with its date, and important changes will be announced in the app.