PRIVACY POLICY

Serbyu (the "App") and the related website and services (collectively, the "Platform") are operated by SERBYU CORP., a company organized and existing under the laws of the Republic of the Philippines, with principal office at Block 5 Lot11 2nd Floor, Baltazar Apartment, Mangoville Subdivision Salitran IV , City Of Dasmariñas, Cavite ("we", "us", or "our").

We are committed to protecting your privacy and ensuring the lawful, fair, and transparent processing of your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use the Platform, and describes your rights as a data subject. 

This Privacy Policy is intended to comply with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (the "DPA"), its Implementing Rules and Regulations ("IRR"), and relevant issuances of the National Privacy Commission ("NPC") of the Philippines.

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree, please do not use the Platform.

Effective Date: January 15, 2026

  1. APPLICABILITY AND DEFINITIONS

    1. Applicability. This Privacy Policy applies to all users of the Platform, including buyers, sellers, advertisers, and visitors who browse listings, create accounts, post ads, or communicate with other users through the Platform.

    2. Personal Data. "Personal data" refers to any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual.

    3. Sensitive Personal Information. "Sensitive personal information" includes, among others, data about an individual's race, ethnic origin, marital status, age, religious, philosophical or political affiliations, health, education, genetic or sexual life, offenses, government-issued identifiers, and other information classified as such under the DPA and its IRR.

    4. Data Subject. "Data subject" refers to any individual whose personal data is processed, including users of the Platform.

    5. Personal Information Controller (PIC). We act as a Personal Information Controller ("PIC") when we determine the purposes and means of processing your personal data collected through the Platform.

    6. Personal Information Processor (PIP). We may engage third parties as Personal Information Processors ("PIP") to process personal data on our behalf and in accordance with our written instructions.

  2. PERSONAL DATA WE COLLECT

We collect the following types of personal data, depending on how you interact with the Platform:

  1. Data You Provide Directly.

  • Account Information: full name, username, email address, mobile number, password (stored in hashed form), and other registration details.

  • Profile and Listing Information: photographs, location (city/region), description of items or services, pricing, and any other information you choose to include in your listings or profile.

  • Communications: messages you send through in-app chat or contact forms, inquiries to other users, feedback, and other communications with us or with other users through the Platform.

  • Verification Information (if applicable): government-issued ID details, proof of address, or other documents you voluntarily submit for account verification, dispute resolution, or compliance purposes.

  1. Data We Collect Automatically.

  • Device and Technical Information: IP address, browser type, device identifiers, operating system, app version, and language settings.

  • Usage and Log Data: date and time of access, pages and screens viewed, features used, clicks, searches, and referring/exit pages.

  • Location Data: approximate or precise location information if you enable location services on your device or when you include your location in listings.

  1. Data from Third Parties. We may receive personal data from:

  • Payment, e-money, or financial service providers in connection with payments, refunds, or chargebacks (if applicable);

  • Identity verification, fraud prevention, or credit scoring providers (where used);

  • Analytics and advertising partners that help us understand usage or deliver relevant content or ads.

  1. Data About Other Persons. If you provide personal data about other individuals (for example, when including another person's contact details in a listing), you represent and warrant that you have obtained their prior consent or have another lawful basis to share such data with us.


  1. LAWFUL BASES FOR PROCESSING

We process your personal data only when there is a lawful basis under the DPA and its IRR. Depending on the context, we may rely on one or more of the following legal bases:

  1. Consent. When required, we will obtain your prior, informed, freely given, and evidenced consent before processing your personal data for specific purposes (for example, for direct marketing, non-essential cookies, or optional features). You may withdraw your consent at any time, subject to applicable law and our contractual rights.

  2. Contractual Necessity. We process your personal data when it is necessary to enter into or perform our contract with you, such as creating and maintaining your account, enabling you to post listings, respond to inquiries, or complete transactions through the Platform.

  3. Legal Obligations. We process personal data when necessary to comply with laws and regulations, such as anti-money laundering rules, consumer protection, tax, accounting, and law enforcement requests.

  4. Legitimate Interests. We may process personal data where necessary for our legitimate interests or those of a third party, provided that such interests are not overridden by your fundamental rights and freedoms. These interests may include fraud detection and prevention, ensuring the security of the Platform, improving our services, and enforcing our terms and policies.

  5. Vital Interests and Public Order. In limited cases, we may process personal data to protect the life and health of a data subject, or to comply with requirements of public order, public safety, or national security as allowed by law.


  1. HOW WE USE YOUR PERSONAL DATA

We use your personal data for the following purposes:

  1. To Operate and Provide the Platform. To create and manage your account, enable you to post and manage listings, facilitate communication between buyers and sellers, respond to your inquiries, and provide customer support.

  2. To Personalize Your Experience. To show relevant listings, categories, or recommendations, and to remember your preferences and settings.

  3. To Process Payments and Transactions (if applicable). To process payments, refunds, dispute claims, and other transaction-related activities through our payment partners or financial service providers.

  4. To Improve and Develop the Platform. To analyze usage trends, monitor performance, perform troubleshooting, conduct surveys, develop new features, and enhance user experience.

  5. To Prevent Fraud and Ensure Security. To monitor suspicious activities, verify identities (where applicable), detect and prevent fraud or abuse, enforce our Terms of Use, and protect the rights, property, and safety of our users and third parties.

  6. To Communicate with You. To send you service-related announcements, updates, security alerts, and administrative messages.

  7. Marketing and Promotions. With your consent or as otherwise allowed by law, to send you marketing communications, newsletters, offers, promotions, and recommendations about our services or partner offerings. You may opt out of marketing communications at any time.

  8. Legal and Regulatory Compliance. To comply with applicable laws, regulations, lawful orders, or requests from courts, regulators, or law enforcement authorities, and to establish, exercise, or defend legal claims.


  1. COOKIES AND SIMILAR TECHNOLOGIES

    1. Cookies. We may use cookies and similar technologies (such as web beacons, pixels, and local storage) to:

  • remember your settings and preferences;

  • keep you logged in;

  • understand how you use the Platform; and

  • show you relevant content or advertisements.

  1. Types of Cookies. These may include strictly necessary cookies, performance/analytics cookies, and, where used, functionality or advertising cookies.

  2. Your Choices. Most web browsers allow you to manage or delete cookies through their settings. If you disable cookies, some features of the Platform may not function properly. When required, we will obtain your consent before placing non-essential cookies.


  1. SHARING AND DISCLOSURE OF PERSONAL DATA

We do not sell your personal data. We may share your personal data in the following circumstances:

  1. With Other Users. Certain information, such as your chosen display name, listing details, location (e.g., city/region), and contact information you choose to make available, may be visible to other users to facilitate transactions on the Platform.

  2. With Service Providers and PIPs. We may share personal data with trusted third-party service providers acting as Personal Information Processors, such as:

  • hosting and cloud service providers;

  • payment and financial service providers;

  • analytics, marketing, and advertising partners;

  • customer support, identity verification, and fraud prevention providers; and

  • IT, security, and professional advisers.

These providers are bound by contractual obligations to process personal data only in accordance with our instructions and to implement appropriate security measures.

  1. With Affiliates and Business Partners. Where relevant, we may share personal data with our affiliates, subsidiaries, or business partners for purposes consistent with this Privacy Policy.

  2. Legal Disclosures. We may disclose personal data when required by law, regulation, legal process, or enforceable governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud or security issues.

  3. Business Transfers. In connection with any merger, acquisition, sale of company assets, financing, or similar transaction, your personal data may be transferred as part of the transaction, subject to compliance with the DPA and its IRR.

  4. Cross-Border Transfers. If personal data is transferred to another country, we will ensure that the recipient provides a level of data protection that is at least comparable to that provided under Philippine law, or that appropriate safeguards are in place, as required by the DPA and NPC issuances.


  1. DATA SUBJECT RIGHTS

As a data subject, you have the following rights under the DPA, subject to limitations and conditions in the law and its IRR:

  1. Right to Be Informed. You have the right to be informed about the processing of your personal data, including the existence of this Privacy Policy, the purposes for processing, and your rights.

  2. Right to Object. You have the right to object to the processing of your personal data, including for direct marketing, profiling, or automated decision-making, unless processing is based on other lawful criteria.

  3. Right to Access. You have the right to reasonable access to the personal data that we hold about you, including the sources of data, how it is being processed, and the recipients to whom it may have been disclosed.

  4. Right to Rectification. You have the right to dispute and have corrected any inaccurate or incomplete personal data about you.

  5. Right to Erasure or Blocking. You have the right to suspend, withdraw, or order the blocking, removal, or destruction of your personal data when (a) it is no longer necessary for the purposes for which it was collected, (b) you withdraw consent and there is no other legal basis for processing, or (c) it is unlawfully processed, subject to applicable exceptions.

  6. Right to Data Portability (if applicable). You may request that your personal data be provided to you in a structured, commonly used, and machine-readable format for transmission to another personal information controller, where technically feasible.

  7. Right to Damages. You may be entitled to damages if you suffer harm due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data, as determined by competent authorities.

  8. Right to File a Complaint. You have the right to lodge a complaint with the National Privacy Commission if you believe that your data privacy rights have been violated.

To exercise any of your rights, please contact us using the details in Section 11 below. We may need to verify your identity before processing your request and may charge a reasonable fee when allowed by law (for example, for multiple or complex requests). We will respond within the period required by applicable law or NPC issuances.

  1. DATA RETENTION

    1. Retention Period. We retain personal data only for as long as is reasonably necessary to:

  • fulfill the purposes described in this Privacy Policy;

  • comply with legal, regulatory, accounting, or reporting obligations; and

  • establish, exercise, or defend legal claims.

  1. Retention Criteria. We determine appropriate retention periods based on factors such as the nature and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, and our legal obligations.

  2. Deletion or Anonymization. When personal data is no longer necessary for the purposes for which it was collected and no longer required for legal or legitimate business purposes, we will securely delete, anonymize, or aggregate it, subject to technical and legal limitations.


  1. SECURITY MEASURES

We implement reasonable and appropriate organizational, physical, and technical measures to protect personal data against accidental or unlawful destruction, alteration, and disclosure, as well as against any other unlawful processing. These measures may include:

  • access controls and authentication mechanisms;

  • encryption and secure communication protocols;

  • regular security assessments and monitoring;

  • secure data storage and backup procedures; and

  • policies and training for personnel handling personal data.

However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

  1. CHILDREN’S PRIVACY

The Platform is intended for use by individuals who are at least eighteen (18) years old and capable of entering into binding contracts under Philippine law.

We do not knowingly collect personal data from children below eighteen (18) years of age without the consent of their parent or legal guardian. If you believe that a child has provided personal data to us without appropriate consent, please contact us immediately so that we can take appropriate action, including deleting the data where required by law.

  1. CHANGES TO THIS PRIVACY POLICY

We may update or modify this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

When we make material changes, we will notify you through appropriate means, such as a notice on the Platform, email, or in-app notification, and indicate the date of the latest revision at the top of this Privacy Policy.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.