Privacy policy

Who we are

CitraPep sells products online in the Philippines. This policy explains what personal information we collect, why, and how we protect it, in line with the Data Privacy Act of 2012 (Republic Act No. 10173).

What we collect

• Your name, email address and mobile number
• Your delivery address
• Your order details and payment screenshot (amount, date, reference number)
• Refund details you give us (e-wallet or bank account name and number)
• Messages you send us

Why we collect it

• To process, pack and deliver your order through our courier
• To confirm your payment and issue receipts and refunds
• To contact you about your order
• To send occasional promotions and discount codes to customers. You can unsubscribe anytime with the link in any promo email, and we’ll stop.

Who we share it with

Only with the courier delivering your parcel (name, phone and address) and the email service we use to send you messages. We never sell your information.

How we protect it

Your information is stored on a secured server. Payment screenshots and refund photos are kept private and can only be seen by our staff. Staff access is limited and logged.

How long we keep it

Order records are kept for as long as needed for accounting and tax purposes, then deleted. You can ask us to delete your information sooner unless we must keep it by law.

Your rights

You can ask to see, correct or delete your personal information, or object to how we use it. Email us at support@citrapep.shop with your order number.

“Remember me” on this device

If you tick “Remember my details” at checkout, a small cookie keeps your details on that device for your next order. Use “Not you? Clear my details” at checkout to remove it.