OrderBigas is a single-store rice ordering and delivery service in the Philippines. For anything in this policy — including requests about your data — email us at support@orderbigas.ph.
Your account details (email, name, phone). Your delivery address (province, city, barangay, street details, notes) and your map pin — the precise GPS location of your delivery spot. Your order history. Delivery-proof photos taken by the driver when your order arrives. Notifications we send you. Coupon and referral activity. On this device only: the contents of your cart.
To deliver orders to the right place and contact you about them. To send order status notifications. To run coupons and referrals fairly (redemption limits are enforced per customer). To plan which barangays to serve next, using aggregated signup demand. To keep sales records for tax and accounting.
We process your data to perform our contract with you (taking and delivering orders), for legitimate interests (service planning, preventing coupon abuse), and with your consent where required (creating an account).
Your delivery driver sees your name, phone, address, and pin for your order. Our service providers host the data on our behalf: Supabase (database, sign-in, file storage) and Vercel (website hosting). We never sell your data and never share it for advertising.
Until you delete your account. Deleting your account (Account → Storage and Data) permanently removes your profile, addresses, notifications, coupons, and delivery photos. Order records are kept anonymized — no name, no address, no photos — for accounting and tax purposes. Deleted data also leaves our providers' backups when their backup retention window lapses.
Under the Data Privacy Act of 2012 you can access, correct, download, and delete your data, and object to processing. Self-service: Account → Storage and Data lets you download everything as a file or delete your account. You can also email support@orderbigas.ph. If you believe we mishandled your data, you may complain to the National Privacy Commission (privacy.gov.ph).
Every database table has row-level access rules, delivery photos live in a private bucket served through short-lived signed links, and all connections are encrypted.
The service is intended for users 18 and over, or with a guardian handling the account.
We post any updates on this page with a new effective date.
See also our Terms of Service.