MINT10HOBBY TOYS RETAILING (Sole Proprietorship, DTI Business Name No. 7771494), trading as Mint10Hobby, is the personal information controller for mint10hobby.com. This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the rights you hold under Republic Act No. 10173, the Data Privacy Act of 2012, and its implementing rules and regulations.
1. Who we are
| Personal information controller | MINT10HOBBY TOYS RETAILING |
|---|---|
| Registered address | 35 Purok 5, Irisan, Baguio City, 2600 Benguet, Cordillera Administrative Region, Philippines |
| Data Protection Officer | Kenneth Chris Salda Go — privacy@mint10hobby.com |
| Website | https://mint10hobby.com |
2. What we collect
Information from your social sign-in
Accounts are created through Facebook Login or Google Sign-In. When you authorise the connection we receive only the fields you approve, which are:
- Your name or display name as it appears on that provider.
- Your email address, where you have granted the email permission.
- Your public profile picture URL.
- The provider's unique identifier for your account, which we store so we can recognise you on your next sign-in.
We do not receive your password. We do not post to your Facebook or Google account, we do not read your friends list, your posts, your messages, or your contacts, and we do not request permissions beyond basic profile and email.
Information you give us
- Username, display name, and profile details you choose.
- Shipping and billing addresses, including barangay-level detail, and contact numbers.
- Proof-of-payment screenshots and payment reference numbers.
- Shop details if you sell: shop name, handle, description, logo, policies, and payout details.
- Listings, photographs, showcase entries, community posts, comments, and support messages.
Information generated by your activity
- Orders, invoices, bids, draft slots, wishlists, break slots, and event results.
- Store credit and ledger entries.
- Moderation records, reports you file, and actions taken on your content.
Information collected automatically
- IP address, browser and device type, operating system, and referring page.
- Pages viewed, timestamps, and session identifiers.
- Sign-in times and security events such as session revocations.
3. Facebook and Google sign-in
We use Facebook Login and Google Sign-In only to authenticate you and to create or link your Mint10Hobby account. The provider identifier is matched against our records in this order: an existing account with that provider identifier is signed in; otherwise an existing account with the same verified email address is linked to the provider; otherwise a new collector account is created.
Because the provider has already verified your email address, we mark it verified on our side and do not send a separate verification message. You can disconnect Mint10Hobby at any time from your Facebook settings under Settings & Privacy → Settings → Apps and Websites, or from your Google Account under Security → Your connections to third-party apps. Disconnecting stops future sign-ins; to also remove the data we already hold, follow Delete My Data.
4. Why we use it
- To create and secure your account and recognise you when you return.
- To display listings, process orders, confirm payments, and arrange delivery.
- To run auctions, drafts, breaks, and fire sales, and to publish results to participants.
- To calculate commissions and seller payouts.
- To moderate content, detect fraud and counterfeits, and enforce our Terms.
- To answer support requests and handle disputes and returns.
- To send transactional messages about your orders, events, and account.
- To keep the records our tax and business registrations require.
- To understand aggregate usage and improve the Platform.
We do not sell your personal data, and we do not share it with advertisers for their own marketing.
5. Legal bases
- Contract — processing needed to give you the account, order, or event you asked for.
- Consent — the social sign-in connection, optional marketing messages, and any optional profile details. Consent can be withdrawn at any time.
- Legal obligation — tax, accounting, and record-keeping duties under Philippine law.
- Legitimate interests — fraud prevention, platform security, moderation, and service improvement, balanced against your rights.
6. Who we share it with
- Sellers and partner shops — the name, delivery address, and contact number needed to fulfil an order you placed with them, and nothing more. Sellers see anonymised demand data only before checkout, never another shop's orders.
- Couriers and logistics providers — recipient name, address, and contact number.
- Payment providers — GCash, Maya, and banks, where the payment method requires it.
- Infrastructure providers — hosting, storage, and email delivery, under confidentiality obligations.
- Authorities — where we are legally required to disclose, or to establish, exercise, or defend legal claims.
Publicly visible by design: your username or display name, profile picture, badges and founder number, public showcases, community posts and comments, and shop pages if you sell. Your email address, phone number, and full address are never shown publicly.
7. How long we keep it
- Account records — while your account is open, then deleted or anonymised within 30 days of a verified deletion request.
- Transaction, invoice, and tax records — retained for the period required by the Bureau of Internal Revenue and Philippine accounting rules, currently ten (10) years, even after account closure. These records are locked down and used only for legal and audit purposes.
- Moderation and fraud records — up to two (2) years after the event, to protect other members from repeat offenders.
- Server and security logs — up to twelve (12) months.
8. Security
We apply organisational, physical, and technical measures proportionate to the risk: encrypted connections (HTTPS), role-based access control with fail-closed scoping, server-side authorisation on every action, hashed credentials for staff accounts, session revocation on account action, audit logging of administrative and financial operations, and regular backups. No system is perfectly secure. If a breach occurs that is likely to give rise to a real risk of serious harm, we will notify affected users and the National Privacy Commission as required by law.
9. Your rights
Under the Data Privacy Act of 2012 you have the right to:
- Be informed about how your data is processed.
- Access the data we hold about you.
- Object to processing, including direct marketing.
- Rectify inaccurate or incomplete data.
- Erasure or blocking where processing is unlawful, unnecessary, or withdrawn from consent.
- Data portability — receive your data in a structured, commonly used electronic format.
- Damages for violations of your rights.
- Lodge a complaint with the National Privacy Commission.
To exercise any of these, email privacy@mint10hobby.com from the address on your account. We respond within fifteen (15) working days and may ask you to verify your identity first.
10. Deleting your data
Full instructions, including the Facebook-specific route, are on our Delete My Data page.
11. Cookies
We use only the cookies the Platform needs to function — session, security, and your light or dark theme preference. See our Cookie Policy.
12. Children
The Platform is not directed at children under 13 and we do not knowingly collect their personal data. Users aged 13 to 17 require parental or guardian consent and supervision. If you believe a child has given us personal data, contact privacy@mint10hobby.com and we will delete it.
13. Transfers outside the Philippines
Some of our infrastructure and communication providers process data outside the Philippines. Where that happens we remain accountable for your data and require contractual protections consistent with the Data Privacy Act.
14. Contact and complaints
Data Protection Officer
Kenneth Chris Salda Go — MINT10HOBBY TOYS RETAILING
35 Purok 5, Irisan, Baguio City, 2600 Benguet, Cordillera Administrative Region, Philippines
Email: privacy@mint10hobby.com
Telephone: +63 917 000 0000
If you are not satisfied with our response you may complain to the National Privacy Commission, 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila, Philippines — privacy.gov.ph.
This policy may be updated as the Platform develops. Material changes are posted here with a new effective date. Last updated 7 September 2026.