Privacy Policy

WaterHub Online ("WaterHub," "we," "us," or "our") operates the website waterhub.online — an online directory and ordering platform connecting customers with water refilling stations across the Philippines.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights as a data subject under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

By using WaterHub, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of the platform.

We collect personal information in two ways: information you provide directly, and information collected automatically when you use our platform.

We use your personal information only for the purposes for which it was collected and only to the extent necessary to fulfill those purposes:

• Order fulfillment — to process, confirm, and deliver your water orders to the correct address.
• Account management — to create and maintain your customer or station owner account.
• Directory listing — to display your station's business name, contact number, and location on the public directory (station owners only, with your explicit consent).
• Notifications — to send order status updates, delivery confirmations, and service alerts via SMS or in-app notifications.
• Customer support — to respond to your inquiries, complaints, and support requests.
• Platform improvement — to analyze usage patterns and improve the performance and features of WaterHub.
• Legal compliance — to comply with applicable Philippine laws and regulations.

We will never use your personal data for purposes incompatible with the above without obtaining your separate, explicit consent.

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following limited circumstances:

• Water refilling stations — when you place an order, your name, delivery address, and contact number are shared with the station fulfilling that order.
• Delivery riders — riders assigned to your delivery are given your name, delivery address, and contact number for the purpose of completing the delivery.
• Service providers — third-party technology providers who help us operate the platform (e.g., email delivery, SMS notifications) under strict confidentiality agreements.
• Legal authorities — when required by law, court order, or lawful request by government authorities in the Philippines.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable Philippine laws:

• Active accounts — data is retained for as long as your account remains active.
• Order records — retained for a minimum of 5 years to comply with BIR recordkeeping requirements.
• Deleted accounts — personal data is anonymized or permanently deleted within 30 days of account deletion, except where legal retention is required.
• Station directory data — removed from the public directory within 7 business days of a station owner's removal request.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights regarding your personal information held by WaterHub:

• Right to be Informed — you have the right to know what personal data we collect and how it is used.
• Right to Access — you may request a copy of the personal data we hold about you at any time.
• Right to Correction — you may request correction of inaccurate or incomplete personal data.
• Right to Erasure — you may request deletion of your personal data, subject to legal retention requirements.
• Right to Object — you may object to the processing of your personal data in certain circumstances.
• Right to Data Portability — you may request a copy of your data in a structured, commonly used format.
• Right to Lodge a Complaint — you may file a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe your rights have been violated.

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• HTTPS / SSL encryption — all data transmitted between your browser and our servers is encrypted using TLS.
• Password hashing — account passwords are never stored in plain text; they are hashed using industry-standard algorithms.
• Access controls — only authorized personnel have access to personal data, on a strict need-to-know basis.
• Session security — user sessions are time-limited and secured against common web vulnerabilities.

While we take reasonable precautions, no system is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify affected users and the NPC in accordance with RA 10173.

WaterHub uses cookies and similar technologies to ensure the platform functions correctly and to improve your experience:

• Session cookies — required for login and keeping you authenticated while browsing. These are deleted when you close your browser.
• Preference cookies — remember your location and search preferences to show you relevant stations.
• Analytics cookies — help us understand how visitors use the site so we can improve it. No personally identifiable information is included.

You can disable cookies in your browser settings. Note that disabling cookies may affect certain features of the platform, such as staying logged in.

WaterHub is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data without parental consent, we will delete that data promptly.

If you are a parent or guardian and believe your child has provided personal information to WaterHub, please contact us at admin@waterhub.online.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable laws. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Post a notice on our website homepage for at least 30 days.
• Send an email notification to registered users for significant changes.

Your continued use of WaterHub after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Privacy Officer:

You may also file a complaint with the National Privacy Commission if you believe your data privacy rights have been violated: