Privacy policy
This policy explains what personal information Ark Designs MZ collects, why we hold it, who else sees it, and what you can tell us to do with it. It follows the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission.
Who is responsible for your information
The Personal Information Controller is:
Arkdesigns MZ Digital Printing Services
Binangonan, Rizal, Philippines
Email: gee@arkdesignsmz.com
We are a small studio. Enquiries about your data are handled directly by the owner rather than a department.
What we collect
- Contact and order details — your name, email address, mobile number, billing and delivery address, and what you ordered.
- Payment confirmation — the fact and method of payment, and the last digits of a card. We never see or store your full card number, PIN, or GCash or Maya credentials. Those go directly to the payment processor.
- Content you send us for printing — names, dates, photographs, logos, guest lists and artwork. Where a guest list or a set of names is involved, that is other people's personal information and we treat it with the same care as your own.
- Messages — what you write to us by email, Messenger, Instagram or the contact form, and our replies.
- Account details — if you create one, your username and password (stored encrypted by Shopify).
- Usage data — pages viewed, items added to cart, device and browser type, and IP address, collected through cookies and similar technologies.
We do not knowingly collect sensitive personal information as defined by the Data Privacy Act, and we ask that you do not send it to us. Please do not include government ID numbers in a message.
Why we hold it, and on what basis
| Purpose | Lawful basis |
|---|---|
| Taking, making, proofing and delivering your order | Performance of our contract with you |
| Answering your messages and handling returns | Performance of our contract; legitimate interests |
| Issuing invoices and keeping sales records | Legal obligation (BIR) |
| Preventing fraud and securing the site | Legitimate interests |
| Newsletters and promotional messages | Your consent, withdrawable at any time |
Marketing is opt-in. Every newsletter carries an unsubscribe link, and unsubscribing does not stop us sending the messages we must send about an order you have placed.
Who else sees it
We share the minimum needed, with:
- Shopify Inc. — our e-commerce platform and checkout provider
- Payment processors — for GCash, Maya and card payments
- Couriers — J&T Express, LBC, Ninja Van, Flash Express, Lalamove, Grab and similar, who need the recipient's name, address and mobile number to deliver
- Meta Platforms — where you contact us through Facebook or Instagram, that conversation sits on their systems under their own policies
- Trade printing partners — for foil, embossing and wax seal work on Covenant suites, who receive only the artwork and quantities required
- Government authorities — where we are legally required to disclose, such as to the BIR or in response to a lawful order
We do not sell your personal information, and we do not rent or trade our customer list.
Information sent outside the Philippines
Shopify and some of our service providers store data on servers outside the Philippines. Where that happens we rely on their contractual commitments to protect your information to a standard consistent with the Data Privacy Act. By ordering, you understand your information may be processed abroad for these purposes.
How long we keep it
- Order and sales records — ten years, as BIR record-keeping rules require.
- Artwork and proof files — up to two years after your order, so reorders do not have to start from scratch. Ask us and we will delete yours sooner.
- Messages — up to two years.
- Newsletter subscription — until you unsubscribe.
How we protect it
Checkout and this whole site run over encrypted connections. Access to order data is limited to the owner and to the platforms named above. No system is perfectly secure, and we will not pretend otherwise — but if a breach occurs that is likely to put your rights at serious risk, we will notify the National Privacy Commission and the people affected within 72 hours of learning of it, as the law requires.
Your rights under the Data Privacy Act
You have the right to:
- Be informed that your personal information is being collected and processed
- Access the information we hold about you
- Object to processing, including direct marketing
- Rectify anything inaccurate or incomplete
- Erasure or blocking — have your information removed or withdrawn from our systems where the law allows
- Data portability — receive a copy in an electronic format
- Damages — be indemnified for harm caused by inaccurate, unlawfully obtained or unauthorised use of your information
- Lodge a complaint with the National Privacy Commission
To exercise any of these, email gee@arkdesignsmz.com. We may ask you to confirm your identity first, and we will respond within a reasonable period. Some requests we cannot fully grant — we cannot delete sales records the BIR requires us to keep — and where that is the case we will tell you why.
Cookies
This site uses cookies to keep your cart working, remember your preferences and understand how the site is used. You can block or delete cookies in your browser settings, though some parts of the site may then not work properly. Shopify's cookie list is published at shopify.com/legal/cookies.
Children
This store is not directed at children, and we do not knowingly collect information from anyone under 18. If you are a parent or guardian and believe your child has sent us personal information, contact us and we will delete it.
Complaints
Please raise any concern with us first — email gee@arkdesignsmz.com. If you are not satisfied with how we have handled it, you may complain to the National Privacy Commission, 5th Floor Delegation Building, PICC Complex, Pasay City, Metro Manila — privacy.gov.ph, complaints@privacy.gov.ph.
Changes
We may update this policy. The current version always appears on this page with its revision date, and material changes will be announced on the site.
Arkdesigns MZ Digital Printing Services
Binangonan, Rizal, Philippines
DTI Business Name No. 5248938 · Business Permit No. 7136 · BIR Registered CRT-040000000-3775
Last updated: 1 September 2026