Privacy policy
D A T A P R I V A C Y N O T I C E
We at Cosmic Chain Inc., a recognized seller of PANDORA, are committed to offering premium jewelry and personalized retail experiences while maintaining the highest standards of data privacy and security. We place utmost importance on the responsible handling of your personal data, in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and related issuances (“Data Privacy Laws”) of the National Privacy Commission (NPC).
The personal data we collect may include:
- Full name
- Residential address
- Contact number
- Date of birth
- Age
- Email address
- Credit or debit card details
- PWD or Senior Citizen ID
- Customer preferences such as jewelry preferences, gift recipient details, purchase history, or loyalty program participation
to ensure a seamless and luxurious experience aligned with Pandora’ s global standards of customer care.
Your personal data is collected through:
- In- store transactions
- Client information forms
- Loyalty registration
- Phone calls
- Emails
- SMS
- Other secure communication channels when you engage with our Pandora products and services.
The legal basis for processing your data include your consent, contractual requirements, legal obligations, and legitimate business interests, including premium customer service and retail operations enhancement.
We primarily use your information to:
- Process purchases
- Personalize styling advice
- Facilitate product care and warranties
- Maintain client records
- Respond to your inquiries
With your consent, we may also use your data to:
- Provide personalized offers
- Exclusive event invitations
- Product launches
- Share curated marketing communications aligned with your preferences
Your personal data may only be disclosed to third parties when absolutely necessary and for specific, legitimate purposes. These may include:
- Logistic providers for secured delivery
- Payment gateways
- Pandora-authorized service centers for product care and repairs
- Government agencies for regulatory compliance
- In every instance, we disclose only the minimum data required and implement strict safeguards to protect your privacy.
Your data is retained for a maximum of five ( 5 ) years from your last interaction with us. Once this period lapses, physical records are securely shredded, and digital records are permanently deleted using industry- standard, non- recoverable methods. Access to your data is strictly limited to select, authorized personnel trained to uphold confidentiality and data protection protocols.
We recognize the risks involved in the processing of personal data such as when systems are exposed to malware, ransomware, and computer viruses or when manual records are accessed without authority.
However, we implement comprehensive physical, technical, and organizational safeguards to secure your personal data and prevent its unauthorized access, misuse, or disclosure.
These include:
- CCTV monitoring
- Encrypted systems
- Secure point- of- sale platforms
- Locked storage facilities
- Employee privacy training
- Advanced system- level security
Automated systems may be used to send you non- intrusive notifications such as purchase confirmations, order updates, service alerts, or exclusive Pandora offers via SMS or email. These systems are designed solely to enhance your customer experience and are never used to make decisions that affect your legal rights or welfare.
As a valued client and data subject, you have the right to be informed about how your data is used; to access, correct, or delete your data; to object to its processing; to withdraw consent at any time; to request data portability; and to file a complaint with the National Privacy Commission if you believe your data privacy rights have been compromised.
If you have concerns about how your personal data is handled, you may raise them with our Data Protection Officer (DPO) so we can address them directly. However, you also retain the right to file a complaint with the NPC if you believe your data privacy rights have been violated.
You may claim compensation upon final determination that you suffered damages due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data, considering any violation of your rights and freedoms as data subject.
We reserve the right to update or revise this privacy notice whenever there are substantial changes. Previous versions of the privacy notice are retained and shall be provided to data subjects upon request.
For any concerns, or if you wish to exercise your rights under the Data Privacy Act, you may contact our Data Protection Officer at:
Email: mysticalchaininc@gmail.com
Contact Number: 09178393939
