Last updated: September 2026
This Privacy Policy explains how Brew & Savour ("we", "us", "our") collects, uses, stores, and protects personal data belonging to customers who use our web-based ordering application (the "App"), reachable at brewandsavour.coffee, or who otherwise interact with us at our physical location in Sto. Domingo, Capas, Tarlac. It applies to every customer who creates an account, places an order, loads or spends wallet balance, or otherwise submits personal data to us through the App.
This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its 2016 Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission ("NPC") of the Philippines.
Brew & Savour, operating from Sto. Domingo, Capas, Tarlac, Philippines, is the Personal Information Controller ("PIC") for the personal data described in this Policy. We determine what data is collected and why. Some of our service providers (described in Section A8) act as Personal Information Processors on our behalf, meaning they process data only under our instructions and do not independently decide what to do with it.
| Category | What we collect | When |
|---|---|---|
| Account & identity | Name, email address, and — if you provide it — phone number. If you sign in with Google or Facebook, we receive the name, email, and profile photo your account chooses to share with us; we do not receive your password for those services. | When you create an account (required to place an order — see Section B3) |
| Order data | Items ordered, order total, order timestamps, pickup preference (dine-in/takeaway, arrival mode), and order status history. | Every time you place, cancel, or receive an order |
| Payment reference data | For GCash/Maya/Bank transfer payments: the last 5 digits of your transaction reference number, entered by you, used solely so our staff can manually confirm your payment against our own account records. We never receive, see, or store your full account number, PIN, OTP, or banking/e-wallet login credentials — those never leave the GCash, Maya, or your bank's own app. | When you choose a reference-code payment method at checkout |
| Wallet data | Your Brew & Savour wallet balance, top-up history, and any bonus credited to your wallet along with its usage deadline (see Section B6). | When you load or spend wallet balance |
| Location data | Your device's real-time GPS coordinates, used only while you have an active order awaiting pickup (see Section A5 for full detail). | Only while an order of yours is active, and only if you grant location permission |
| Device & push notification data | A push-notification device token (if you enable notifications), and basic technical data your browser sends automatically (device/browser type, general usage timestamps). | When you enable notifications, and passively during ordinary use of the App |
| Loyalty & discount status | Which discounts and milestone rewards you've used or are eligible for, and your direct-payment order count and spend (used to calculate loyalty progress — see Section B7). | Ongoing, tied to your account |
We do not collect government ID numbers, financial account numbers, health information, or other sensitive personal information as defined under the DPA, except incidentally to the extent a customer voluntarily includes such information in an order note, which we do not request and discourage.
We only collect and process personal data for purposes that are declared, specified, and legitimate, consistent with the DPA's principle of proportionality:
Our legal basis for processing is your consent (given when you create an account and agree to this Policy), the necessity of processing to perform our contract with you (i.e. fulfilling the order you placed), and our legitimate business interests (such as fraud prevention), balanced against your rights as required by the DPA.
We do not sell, rent, or trade your personal information to third parties for their own independent marketing purposes.
The App may ask permission to access your device's location while you have an order awaiting pickup. This is used exclusively to estimate a realistic pickup time and to let our staff know when you are genuinely approaching the store, so your order can be timed accurately.
If you enable notifications, your device is issued a push notification token (via Google Firebase Cloud Messaging) so we can alert you when your order is ready, or if there's a problem with your payment. This token identifies your device for notification delivery only — it is not used to track your browsing activity outside the App. You can disable notifications at any time through your browser or device settings, or by declining the permission prompt.
This site uses your browser's local storage and IndexedDB (not third-party advertising cookies) to remember things like your cart contents, sign-in state, and notification preferences, so you don't have to re-enter information every visit. A service worker is used to allow basic offline access and to receive push notifications; it does not track your browsing activity on other websites.
The following third parties process data on our behalf, strictly to help us operate the App — none of them are permitted to use your data for their own independent purposes:
We may also disclose personal data where required by Philippine law, a valid court order, or a lawful request from the National Privacy Commission or another competent government authority.
Our cloud infrastructure (Google Firebase, AWS) processes and stores data on servers located outside the Philippines, including in Singapore. Where we transfer personal data outside the Philippines, we take contractual and technical steps to require a comparable standard of data protection at the receiving end, consistent with the DPA's cross-border transfer requirements. By using the App, you acknowledge that this cross-border processing is a necessary part of how the service operates.
We apply a defined retention schedule rather than keeping data indefinitely. Two separate rules apply, and they work in opposite directions: Philippine tax law requires us to keep transaction records, while the Data Privacy Act requires us not to keep personal data longer than necessary. We reconcile them by keeping the financial record and removing the personal details from it.
We apply reasonable organizational, physical, and technical security measures proportionate to the sensitivity of the data involved, including: authenticated, role-restricted access to customer data (limited to authorized staff for order fulfillment purposes only); encrypted data transmission (HTTPS/TLS); Firebase App Check to help ensure requests originate from our genuine application; and server-side validation of all pricing, payment, and loyalty logic so a compromised or modified client device cannot alter another customer's data or manipulate order pricing.
No system can be guaranteed 100% secure. If you believe your account has been compromised, please contact us immediately using the details in Section A16.
As a data subject under the DPA, you have the right to:
To exercise any of these rights, contact us using the details in Section A16. We will respond within a reasonable time and may need to verify your identity first.
The App is not directed at children, and account creation requires the legal capacity to contract under Philippine law (see Section B2). We do not knowingly collect personal data from children without the consent required by the DPA and its implementing rules. If you believe a child has provided us personal data without appropriate consent, please contact us so we can address it.
In the event of a personal data breach that is likely to give rise to a real risk of serious harm to affected data subjects, we will notify the National Privacy Commission and affected customers within the timeframe required under the DPA and its implementing rules, and will take reasonable steps to contain and remediate the breach.
We may update this Policy as our practices, features, or applicable law change. Material changes will be reflected here with an updated "Last updated" date at the top of this page, and where appropriate, we will provide additional notice within the App.
For questions about this Policy, to exercise your data privacy rights, or to raise a concern, please contact us directly at our Sto. Domingo, Capas, Tarlac location (beside KKK Turbo gas station), or through our official Facebook page. If you are not satisfied with our response, you may lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).
By creating an account, placing an order, or otherwise using the Brew & Savour App, you agree to be bound by these Terms of Service and the Privacy Policy above. If you do not agree, please do not use the App — you are always welcome to order in person at the counter instead, without using the App.
You must have the legal capacity to enter into a binding contract under Philippine law to create an account. If you are a minor, you may only use the App with the involvement and consent of a parent or legal guardian, who accepts these Terms on your behalf.
You can browse and search the full menu without an account. However, an account (created via Google or Email/Password sign-in) is required to add anything to your cart or place an order — guest checkout is not available. This is necessary so we can correctly identify you for pickup, apply and protect loyalty rewards, manage wallet balance, and handle cancellations or refunds fairly. You are responsible for maintaining the confidentiality of your sign-in credentials and for all activity that occurs under your account.
All prices are listed in Philippine Pesos (₱) and are inclusive of applicable taxes unless stated otherwise. We reserve the right to change menu prices at any time; the price charged is the price displayed at the time you place your order. Accepted payment methods are GCash, Maya, and bank transfer (via reference number, manually confirmed by our staff against our own account records), cash paid in person to staff (credited to your wallet), and your Brew & Savour Wallet balance. Brew & Savour does not itself process card or e-wallet transactions — payments via GCash/Maya/bank transfer are made directly between you and that provider.
We may offer discounts and milestone rewards to registered customers who pay by a direct payment method (GCash, Maya, bank transfer, or cash to staff) — Wallet payments do not qualify for these, per Section B6. Current mechanics include a one-time first-order discount, a one-time "win-back" discount after a period of inactivity, a one-time discount upon your 5th qualifying purchase, and free-item milestone rewards at qualifying order counts or spend thresholds.
By enabling notifications or granting location access, you consent to our use of that data strictly for the purposes described in Sections A5 and A6 of the Privacy Policy above. You may withdraw this consent at any time through your device or browser settings; doing so will not affect your ability to place orders, though pickup time estimates may be less precise and you will not receive order-ready alerts.
The Brew & Savour name, logo, menu descriptions, photography, and the App's design and underlying software are the property of Brew & Savour or its licensors and are protected under Philippine intellectual property law. You may not copy, reproduce, or commercially exploit any of this content without our prior written permission.
You agree not to:
We reserve the right to suspend or terminate any account, without prior notice, where we reasonably believe these Terms have been violated, including forfeiture of any wallet balance or unclaimed rewards associated with that account to the extent permitted by law.
The App is provided on an "as is" and "as available" basis. While we take reasonable steps to keep the App accurate and functional, we do not warrant that it will be uninterrupted, error-free, or free of occasional inaccuracies (for example, in estimated pickup times or item availability). To the maximum extent permitted by Philippine law, Brew & Savour's aggregate liability arising from your use of the App shall not exceed the total amount you paid for the order giving rise to the claim. Nothing in these Terms limits any liability that cannot lawfully be excluded or limited under Philippine law, including liability for gross negligence or willful misconduct.
We are not liable for any failure or delay in performance caused by circumstances beyond our reasonable control, including but not limited to natural disasters, power or internet outages, government action, or failures of third-party service providers (such as Google Firebase, AWS, GCash, or Maya) that we rely on to operate the App.
These Terms and the Privacy Policy above are governed by the laws of the Republic of the Philippines. Any dispute arising from or relating to these Terms or your use of the App shall first be addressed through good-faith direct discussion with us. If unresolved, the parties submit to the exclusive jurisdiction of the proper courts of Tarlac Province, Philippines, without prejudice to any right you may have to file a complaint with the National Privacy Commission or another competent government body.
If any provision of these Terms is found invalid or unenforceable by a court or competent authority of proper jurisdiction, that provision will be limited or eliminated to the minimum extent necessary, and the remaining provisions will remain in full force and effect. Our failure to enforce any right or provision of these Terms is not a waiver of that right or provision. Together, these Terms and the Privacy Policy above constitute the entire agreement between you and Brew & Savour regarding your use of the App, superseding any prior agreement on the same subject.
We may update these Terms from time to time, for reasons including changes to our features, business practices, or applicable law. Material changes will be reflected here with an updated "Last updated" date at the top of this page. Your continued use of the App after such changes take effect constitutes your acceptance of the revised Terms.
For any questions about these Terms, the Privacy Policy above, your account, or an order, please reach out to us directly at our Sto. Domingo, Capas, Tarlac location (beside KKK Turbo gas station), or through our official Facebook page.
← Back to Brew & Savour