Privacy Policy
Effective October 2, 2026
This policy explains what personal data Lutong Bahay Davao collects when you browse, order and pay, why we need it, and the choices you have.
Who we are
Lutong Bahay Davao is operated by LBD FOOD HUB under MGS & Co. (“we”). We process personal data in line with Republic Act No. 10173, the Data Privacy Act of 2012.
What we collect
When you order we collect your receiver name, mobile number, delivery address and the map location we derive from it, delivery notes and requests, and your chosen schedule.
When you pay we collect the payment method, reference number and the proof of payment (image or PDF) you upload.
If you create an account we collect your email address, name and password (stored by our authentication provider, never in readable form), and your order history.
Messages you send us
If you chat with us in the shop we keep your messages, any name and mobile number you give, and the order number if you write about an order. Our staff read and answer them, and you can see the conversation again on the same device or in your account.
Facebook Messenger
If you message our Facebook Page, Facebook gives us a Page-scoped ID for you, your public Facebook name and profile photo, and the messages you send us. We use them only to answer you and to match your chat to your orders. If you open Messenger from the link on your order, we also receive your order number so we can connect the two.
Our staff read and reply to these messages in our order system. We do not use your Facebook data for advertising and we do not sell or share it. Facebook handles your messages under its own terms and privacy policy.
To have your Messenger data removed, follow the steps on our data deletion page.
How we use it
To price and deliver your order, verify your payment, contact you about your order, keep your account, prevent abuse and fraud, and meet accounting and legal obligations. We do not sell your personal data and do not use it for advertising.
Who processes it for us
We use service providers to run the shop: Supabase (database, authentication and file storage), Vercel (hosting) and Google Maps Platform (address checks and delivery distance, which receive the delivery address you enter). Staff authorized by us can see your order, contact and payment details to fulfil your order. Providers may process data outside the Philippines.
How long we keep it
We keep personal data only as long as reasonably necessary for fulfilment, customer support, accounting, tax, security and dispute purposes, then delete or anonymize it. Order links for guests expire after a short time.
Security
Payment proofs are stored privately and shown only to authorized staff through short-lived links. Access to our systems is restricted and protected with authentication. No system is perfectly secure, so we also limit what we collect.
Your rights
You may ask to be informed about, access, correct or delete your personal data, object to or restrict its processing, and complain to the National Privacy Commission. Email team@lbdfoodhub.com and we will respond within a reasonable time. Some records may be kept where the law requires it.
Cookies and storage
We use only what the shop needs to work: a secure cookie that lets you pay for or claim an order you just placed as a guest, and browser storage for your sign-in session and cart. We do not use advertising or cross-site tracking cookies.
Children
The shop is not directed to children, and we do not knowingly collect their personal data.
Changes
We may update this policy. The effective date above shows the latest version.
Contact
LBD FOOD HUB / MGS & Co. — team@lbdfoodhub.com
