Privacy policy

PRIVACY POLICY

Last Updated: September 5, 2026

The Humble Bake House ("The Humble Bake House," "we," "us," or "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you visit our website, place an order, communicate with us, or otherwise use our services (collectively, the "Services").

The Humble Bake House is operated by Paolo Capuli's Humble Bake House, a business located in Makati City, Philippines.

Our Services are powered by Shopify, which provides the technology and infrastructure that enables us to operate our online store.

This Privacy Policy is intended to comply with applicable Philippine data privacy laws, including Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations, as applicable.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. PERSONAL INFORMATION WE COLLECT

"Personal information" means any information, whether recorded in material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual.

Depending on how you interact with us, we may collect the following personal information:

Contact Information

This may include:

Full name;
Email address;
Mobile or telephone number;
Billing address;
Delivery or shipping address; and
Other contact information you voluntarily provide to us.

Order and Transaction Information

This may include:

Products purchased;
Quantity of products ordered;
Order date and time;
Order number;
Order status;
Delivery or pick-up details;
Payment status;
Refund or cancellation information; and
Communications relating to your order.

Payment Information

When you make a payment through our online store, payment information may be processed by our payment service providers.

Depending on the payment method used, this may include payment card information, transaction references, payment confirmation, and other information necessary to process your payment.

The Humble Bake House does not intentionally store complete credit or debit card numbers or card security codes on our own systems. Payment information may instead be collected and processed by Shopify and/or the applicable payment processor in accordance with their respective privacy and security policies.

Account Information

If our website allows you to create an account, we may collect:

Username;
Email address;
Account preferences;
Saved addresses;
Order history; and
Other information associated with your account.

Communications

When you contact us through email, telephone, social media, messaging platforms, or other channels, we may collect the information contained in your communication, including your name, contact information, order details, and the contents of your message.

Website and Device Information

When you visit our website, certain technical information may be automatically collected, such as:

IP address;
Browser type;
Device type;
Operating system;
General location information derived from technical data;
Pages visited;
Referring website;
Date and time of visits;
Website interactions; and
Other technical information necessary for website operation and security.

2. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information through the following means:

Directly from you

For example, when you:

Place an order;
Create an account;
Subscribe to our mailing list;
Contact us;
Request customer support;
Participate in promotions;
Submit a review or feedback; or
Otherwise voluntarily provide information to us.

Automatically

We may collect certain information automatically when you browse or interact with our website through cookies and similar technologies.

Through Shopify and Service Providers

Our website is hosted and supported by Shopify and may use other service providers that process information on our behalf, such as payment processors, delivery providers, website applications, analytics providers, and communication platforms.

3. PURPOSES OF PROCESSING

We collect and process personal information only for legitimate and specified purposes.

Depending on how you interact with us, we may use your personal information to:

Process and Fulfill Orders

We use your information to:

Process your order;
Confirm your purchase;
Process payments;
Prepare your products;
Arrange delivery or pick-up;
Contact you regarding your order;
Provide order updates; and
Process cancellations, refunds, or customer service requests.

Provide Customer Support

We may use your information to respond to inquiries, complaints, requests, and other communications.

Improve Our Services

We may use information about how customers interact with our website to improve our products, ordering process, website functionality, customer experience, and business operations.

Marketing and Promotions

Where permitted by applicable law and, where required, with your consent, we may use your contact information to send:

Product announcements;
New product information;
Promotions;
Special offers;
Bake-day announcements;
Newsletters; and
Other marketing communications.

You may opt out of marketing communications at any time by using the unsubscribe mechanism included in our communications or by contacting us.

Website Security

We may process information to detect, prevent, and investigate fraudulent, unauthorized, malicious, or unlawful activities and to protect the security and integrity of our website and systems.

Legal and Regulatory Compliance

We may process personal information when necessary to:

Comply with applicable Philippine laws and regulations;
Respond to lawful government requests;
Comply with court orders or legal processes;
Establish, exercise, or defend legal claims; or
Protect our rights, property, customers, employees, or the public.

4. LEGAL BASIS FOR PROCESSING

Under the Data Privacy Act of 2012, personal information may be processed when permitted by law.

Depending on the circumstances, The Humble Bake House may process personal information based on:

Consent – where you have voluntarily provided consent for a specific purpose;
Contractual necessity – where processing is necessary to fulfill an order or provide a service you requested;
Legal obligation – where processing is necessary to comply with a legal or regulatory requirement;
Protection of lawful rights and interests – where processing is necessary to protect our legitimate interests or the rights of another person, provided that such processing does not override your fundamental rights and freedoms; and
Other lawful bases permitted under the Data Privacy Act and its implementing rules and regulations.

Where consent is the basis for processing, you may withdraw your consent, subject to legal or contractual limitations.

5. DISCLOSURE AND SHARING OF PERSONAL INFORMATION

We do not sell your personal information.

We may share or disclose personal information only when reasonably necessary for legitimate business purposes, fulfillment of your order, provision of our Services, or compliance with applicable law.

Recipients may include:

Shopify

Our online store is hosted and powered by Shopify. Shopify may process personal information necessary to operate our store, process transactions, maintain website functionality, and provide related services.

Payment Service Providers

We may share necessary information with payment processors and financial service providers to process and verify payments.

Delivery and Logistics Providers

We may provide necessary information, such as your name, address, telephone number, and order details, to delivery providers so that your order can be delivered.

Technology and Service Providers

We may use third-party providers for services such as:

Website hosting;
Cloud storage;
Email;
Customer communications;
Analytics;
Website applications;
Information technology;
Security; and
Business administration.

These service providers may process personal information only as necessary to provide the services for which they have been engaged and subject to appropriate contractual or other safeguards.

Government Authorities and Law Enforcement

We may disclose personal information where required or permitted by law, including in response to valid legal processes, government requests, investigations, or court orders.

Business Transactions

If The Humble Bake House undergoes a business transfer, restructuring, sale, merger, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable privacy laws.

6. CROSS-BORDER TRANSFERS

Some of our service providers, including Shopify and other technology providers, may operate or process information outside the Philippines.

As a result, personal information you provide to us may be transferred to, stored in, or processed in other countries.

Where personal information is transferred outside the Philippines, we will take reasonable steps to ensure that appropriate safeguards are in place and that the processing remains consistent with applicable Philippine data privacy requirements.

Third-party providers may also be subject to the privacy laws and regulations of the countries where they operate.

7. SHOPIFY

Our online store is powered by Shopify.

Shopify provides the technology infrastructure that allows us to operate our online store and may collect and process personal information relating to your use of our website.

Shopify's processing of personal information may be subject to Shopify's own privacy policies.

You may review Shopify's privacy information here:

Shopify Privacy Policy

We encourage you to review Shopify's privacy practices to understand how Shopify processes information through its platform.

8. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies to:

Keep our website functioning properly;
Remember your preferences;
Maintain shopping cart functionality;
Understand how visitors use our website;
Improve website performance;
Provide relevant content; and
Support marketing and analytics activities where applicable.

Cookies may be placed by us or by third-party service providers used on our website.

You may be able to control or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website or online ordering process.

9. MARKETING COMMUNICATIONS

If you choose to receive marketing communications from us, we may send information about:

New products;
Upcoming bake days;
Special offers;
Promotions;
Events; and
Other news from The Humble Bake House.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe option in the email or contacting us directly.

Even if you opt out of marketing communications, we may still contact you regarding transactions or services you have requested, including:

Order confirmations;
Payment issues;
Delivery arrangements;
Order changes;
Refunds;
Customer service matters; and
Other necessary transactional communications.

10. DATA RETENTION

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including:

Processing and maintaining transaction records;
Providing customer service;
Maintaining business and accounting records;
Complying with legal and regulatory obligations;
Resolving disputes; and
Establishing, exercising, or defending legal claims.

When personal information is no longer necessary, we will take reasonable steps to securely dispose of, delete, or anonymize it in accordance with applicable law and our retention practices.

Certain information may need to be retained for a longer period where required by Philippine law or legitimate business requirements.

11. DATA SECURITY

We implement reasonable and appropriate organizational, physical, and technical measures designed to protect personal information against:

Unauthorized access;
Unauthorized disclosure;
Accidental or unlawful destruction;
Alteration;
Loss;
Misuse; and
Other unlawful forms of processing.

These measures may include access controls, account security, secure systems, appropriate service-provider controls, and other safeguards appropriate to the nature of the information being processed.

However, no method of electronic transmission or storage is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.

If we become aware of a personal data breach that requires notification under applicable law, we will take appropriate steps in accordance with the Data Privacy Act and applicable rules and regulations.

12. YOUR RIGHTS UNDER THE DATA PRIVACY ACT

Subject to the conditions and limitations provided by the Data Privacy Act of 2012 and other applicable laws, you have rights concerning your personal information.

These include:

Right to Be Informed

You have the right to be informed about the processing of your personal information, including the purposes, scope, and manner of processing.

Right to Access

You have the right to reasonable access to personal information concerning you that we hold or process, subject to applicable legal limitations.

Right to Object

You have the right to object to certain processing of your personal information, including processing based on certain lawful grounds, subject to applicable exceptions.

Right to Rectification

You have the right to dispute inaccuracies or errors in your personal information and request correction where appropriate.

Right to Erasure or Blocking

Under circumstances provided by law, you may request the removal, destruction, or blocking of personal information.

Right to Data Portability

Where applicable under the Data Privacy Act and its implementing rules, you may have the right to obtain your personal information in an accessible format and request its transfer to another personal information controller.

Right to File a Complaint

You have the right to file a complaint regarding the processing of your personal information with the appropriate authority, including the National Privacy Commission (NPC), subject to applicable procedures.

These rights are not absolute and may be subject to limitations or exceptions provided by law.

13. HOW TO EXERCISE YOUR PRIVACY RIGHTS

To request access, correction, deletion, objection, or other assistance concerning your personal information, please contact us using the information below.

We may need to verify your identity before processing certain requests to protect your personal information from unauthorized access or disclosure.

We will respond to legitimate requests within the period required by applicable law.

Some requests may be denied or limited where permitted or required by law, such as where retention is necessary to comply with a legal obligation or to establish, exercise, or defend a legal claim.

14. CHILDREN'S PRIVACY

Our website and Services are not specifically directed toward children.

We do not knowingly collect personal information from children in circumstances where such collection is prohibited by applicable law.

If you believe that a child has provided personal information to us without appropriate authorization, please contact us so that we can review the situation and take appropriate action.

15. THIRD-PARTY WEBSITES AND SERVICES

Our website may contain links, applications, payment services, social media features, or other functionality operated by third parties.

When you interact with a third-party service, that third party may collect and process your information according to its own privacy policy.

The Humble Bake House is not responsible for the privacy practices of third-party websites or services that we do not control.

We encourage you to review the privacy policies of third-party services before providing them with personal information.

16. SOCIAL MEDIA

We may operate or maintain social media accounts or pages for The Humble Bake House.

If you interact with us through a social media platform, information you provide may also be processed by that platform.

Please be aware that information posted publicly on social media may be visible to others.

We encourage you to avoid posting sensitive personal information publicly.

17. DATA PRIVACY INCIDENTS

If we become aware of an actual or suspected personal data breach, we will investigate and take reasonable and appropriate steps to contain, assess, and address the incident.

Where notification is required under the Data Privacy Act, its implementing rules, or applicable regulations, we will comply with the applicable notification requirements.

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

Changes to our business;
Changes to our website or Services;
Changes in technology;
Changes in our data processing activities; or
Changes in applicable laws and regulations.

When we make changes, we will update the "Last Updated" date at the beginning of this Privacy Policy.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

19. CONTACT US

If you have questions about this Privacy Policy, wish to exercise your rights under the Data Privacy Act, or have a concern regarding our processing of your personal information, please contact us:

The Humble Bake House
Paolo Capuli's Humble Bake House

4386-F Montojo Street
Barangay Tejeros
Makati City, 1204
Philippines

Email: mailbox@thehumblebakehouse.com
Phone: +63 917 307 6766

DTI Business Name Registration No.: 7904186
BIR TIN: 315-401-374-00000

20. DATA PRIVACY CONTACT

For privacy-related concerns, requests, or complaints, you may contact our designated privacy contact through: