Back to site

Privacy notice

Last updated October 23, 2026

StarShop is a pasabuy run by two friends. This page explains what we collect when you use starshop.live and your invoice link, why, and what you can ask us to do. It follows the Data Privacy Act of 2012 (RA 10173).

What we collect

• Your name as it appears on Facebook, and your contact number if you give it.
• Your order form: name, contact number, an optional Facebook profile link, province, city or municipality, barangay, complete address and an optional landmark.
• Public comments you write containing “mine” on our Facebook Page, with the Facebook ID Facebook gives us for you, so we can record your order. We keep them for up to 30 days.
• If you tap Connect on Messenger on your invoice, your Messenger ID is saved against that invoice. We do not store your private messages.
• Whether you chose to get a text message when we go live (and the contact number you gave us).
• Your payment details: the amount, the account you paid, your note, and the receipt or screenshot you upload.
• A scrambled (hashed) version of your internet address, only to limit spam and abuse. We cannot read it back.

Visitor statistics

We use Cloudflare Web Analytics to count visits to starshop.live and see which pages are used. It does not use cookies or follow you across other sites, and we cannot see who you are from it.

Why we use it

• To make your invoice, match your payment, and keep your balance up to date.
• To check, pack and ship your items to your address.
• To avoid duplicate invoices and to answer your messages on our Page.

We do not sell your details, show ads, or use them to track you across other sites.

Who sees it

• The two owners and the people who help run StarShop, through a locked admin page.
• Our courier (LBC, J&T, DHL, FedEx, UPS or Dragon Courier), only your name, contact number and address, so your parcel can be delivered.
• Our website host, Cloudflare, which stores the site and its database for us.

How long we keep it

• Receipt and screenshot images are deleted 45 days after your invoice is paid in full.
• Order and invoice records are kept for our bookkeeping and to settle any questions about an order.
• You can ask us to delete your records sooner, unless we still need them for an open order or for the law.

Your choices

You may ask to see, correct or delete the details we hold about you, or object to how we use them. Message our Facebook Page and we will reply. If you are not satisfied, you may complain to the National Privacy Commission (privacy.gov.ph).

Changes

If we change this notice we will update the date above.