ShopLinks PH is the online storefront of RDahunan I.T. Services in Lapu-Lapu City, Cebu, Philippines. RDahunan I.T. Services operates the site and is the personal information controller responsible for the personal information described in this policy when you browse, contact us, create an optional account, place an order, or join the partner program. This page is our privacy notice under the Data Privacy Act of 2012 (Republic Act No. 10173).
1. Information we handle
Orders and digital delivery
When you buy a digital product, we receive the name and email address entered at checkout, the product and amount, payment status and provider identifiers, delivery status, and order timestamps. We use this information to process the order, send access, provide support, prevent duplicate delivery, and maintain business records.
Payment providers process wallet or card credentials on their systems. ShopLinks PH does not receive or store your full card number, wallet password, PIN, or one-time password.
Optional customer accounts
If you create an account, we store the account details required for authentication (your name, email address, and a one-way hash of your password, never the password itself) and the information needed to show eligible purchases in your library. When you sign up we also record which version of the Terms of Service and this Privacy Policy you accepted, and when. Guest checkout remains available. Administrative accounts, customer accounts, and partner accounts use secure session data needed to keep users signed in. Each session record stores the IP address and browser user agent seen at sign-in for the lifetime of that session, so you can recognize your own sessions and we can detect account misuse.
If you turn on two-factor authentication, we store the secret that links your authenticator app and your backup codes, both encrypted, until you turn it off or your account is deleted.
Messages and support
The contact form collects your name, email address, selected topic, and message. If you ask about an order, we may associate the message with order information after verifying the request.
If you open a support ticket while signed in (from My account or the partner dashboard), we keep it with your account: the topic, any order you choose, your messages and our replies, so you can follow the conversation. Tickets follow the same retention period as contact messages.
Partner program
If you join the partner program, we handle:
- Your profile: your display name, the channel where you promote, your referral code, your commission rate, and your account status.
- The signed partner agreement: your full legal name, your signature image, the time you signed, your verified email address, and the IP address and device (browser and system) used. These are printed in a PDF of the agreement that is sealed against changes, stored encrypted, emailed to you, and downloadable from your partner account.
- Payout details: your payout method (GCash, Maya, or bank), account number, and account holder name. Every change needs a code from your authenticator app, and we email you when they change. If Philippine law requires us to withhold tax on commissions, we will also ask for your TIN before a payout.
- Activity: clicks on your links (counted with a daily one-way hash of the IP address and browser, so the raw values are not kept, plus the website the click came from), the links you used, the orders referred to you with their amount, status, and commission, any hold on a commission, and the payouts made to you.
- Your partner store: the store name, short intro, and product picks you choose. These are public on your store page at /store/your-code, together with a note that you may earn a commission. You can change them or switch your store off at any time.
We use this information to form and run the agreement, attribute and pay commission, prevent fraud and self-referral, keep you informed (agreement copies, security notices, payout notices), and meet our tax and record-keeping obligations.
If you buy through a partner's link, store, or code: your order records which partner and link referred you. The partner sees the product, amount, date, and status of the order, but never your name, email address, or payment details.
Free PDF tools (ShopLinks PDF)
The free tools at /tools run inside your browser. The files you choose, the passwords you type to open them, the signatures you draw and the text you enter are processed on your own phone or computer and are not sent to ShopLinks PH or anyone else. They are gone when you close the page. If you tap “Send it for signing” on a result, that PDF is kept in your browser's own storage on your device for up to two hours so you can upload it to ShopLinks Sign after signing in; nothing is sent until you tap Upload. We only count that a tool finished a job or that this button was tapped, as part of the anonymous daily totals described below, never file names, contents or passwords.
ShopLinks Sign and ShopLinks PDF Pro
ShopLinks Sign works differently from the free tools: to send a document to other people for signing, the PDF is uploaded and stored so they can open it. We store each document encrypted, and only the sender and the people they send it to can open it. For each document we keep its title and optional message, the names and email addresses of the people the sender adds, where the fields are on the pages, what each signer fills in, their signature and initials images, and a signing record: when each link was sent and opened, the one-time email code check, when each person signed or declined, and the IP address and browser used for each step. That record is printed on the certificate attached to the signed PDF that everyone receives.
We keep the SHA-256 fingerprint of each signed PDF so anyone holding a copy can check it at /sign/verify. The check is done with the fingerprint only; it shows the completion date and the number of signers, nothing else.
If you send a document, you confirm that you may share it and the signers' contact details with us for this purpose. People who receive a signing link are told who sent it. We use their details only to run the signing, send the emails it needs and keep the record, never for marketing. A ShopLinks PDF Pro pass is an order like any other (see Orders above), linked to your account so Pro can be turned on, and we email you before it ends.
Privacy-first site measurement
We use first-party, anonymous daily aggregate events to understand activity such as page views and product interactions. These aggregates do not store cookies, account or user IDs, email addresses, or raw IP addresses, and they are not used to build advertising profiles. If you arrive through a tagged ShopLinks link (for example one we posted on Facebook), we also count which kind of link it was; the tag is kept only in your browser tab, is never linked to you, and is removed from the address bar.
Security and technical data
Every request to the site passes through Cloudflare, which protects it against attacks and delivers it faster, and then reaches our own server. Both may temporarily process standard request information, such as an IP address, user agent, requested path, and timestamp, to deliver the site, apply rate limits, investigate abuse, and diagnose errors. We do not add this technical data to the anonymous aggregate analytics described above.
2. Why we use information and our legal basis
The Data Privacy Act of 2012 requires us to have a lawful basis for each use. These are the purposes and the basis we rely on for each:
- Performing a contract with you: creating, verifying, fulfilling, and supporting orders; delivering files and access links; running ShopLinks Sign for senders and the people they invite to sign; providing optional accounts and purchase-library access; forming and running the partner agreement, showing your partner store, and paying commission.
- Complying with a legal obligation: keeping accounting, tax, and business records required by Philippine law, including commission and payout records and, where required, withholding-tax records.
- Our legitimate interests: protecting the service from spam, fraud, self-referral, and technical abuse; rate limiting; keeping the signing record that proves an agreement; investigating security incidents; and improving content and store usability using anonymous aggregate activity. We balance these interests against your rights and keep the data involved to a minimum.
- Your consent: where we ask for it for something optional, such as remembering a device so it skips the two-factor code. You can withdraw consent at any time; we will stop the related processing, although this does not affect what was already done lawfully before you withdrew.
3. Services that help operate the site
We use service providers only where needed to run the store:
- Payments and payouts: PayMongo (and HitPay where shown at checkout) process payments. Partner payouts are sent through PayMongo or directly by GCash, Maya, or bank transfer, so the partner's name, account number, and the amount go to PayMongo and to the receiving bank or e-wallet.
- Network and security: Cloudflare (all site traffic, DNS, and attack protection) and our own server for hosting and the database.
- Email: Google Workspace delivers transactional email, such as order, account, agreement, and payout emails.
- Storage: Cloudflare R2 holds encrypted ShopLinks Sign documents and signed partner agreements, and backups.
- Marketplaces opened by partner-pick links (Shopee, Lazada, TikTok Shop) handle your visit under their own policies.
Each external service processes information under its own terms and privacy policy.
The application data store is PostgreSQL on infrastructure we manage. Public and private media may be stored on our application infrastructure or a configured object-storage service. The specific infrastructure can change without changing the purposes described in this policy.
Some processors are located outside the Philippines: transactional email is delivered through Google Workspace, and network protection and object storage are provided by Cloudflare. Where personal information leaves the country, we rely on the provider's contractual commitments to protect it to a standard comparable to Philippine law.
4. Sharing and selling
We do not sell personal information or share it for cross-site behavioral advertising. We disclose information to service providers when necessary to process payment, deliver an order, host the service, send email, protect the site, or comply with a lawful request.
When you follow a partner-pick link to a marketplace, you leave ShopLinks PH. The marketplace or seller may receive referral information and then handles your activity under its own policy.
A partner's store name, intro, and picks are public by design. Partners never receive buyers' personal information from us.
5. Cookies and similar technologies
The site stores only what it needs to work. This is the complete list:
| Name | Purpose | Lifetime |
|---|---|---|
| Session cookie (Better Auth) | Keeps you signed in to a customer, partner, or admin account. | Session lifetime; up to 7 days with “remember me”. |
sl_aff | Remembers which partner referred you so their commission can be attributed. HttpOnly; contains only the partner's referral code and the ID of the link you clicked. | 30 days |
| Two-factor sign-in cookies (Better Auth) | Holds the second sign-in step while you enter your code; if you tick “Don't ask again on this device”, remembers this device so it skips the code. | 10 minutes; 30 days for a remembered device |
Cloudflare security cookie (such as __cf_bm or cf_clearance) | Set by Cloudflare only when it needs to tell people from bots or after a security check. Strictly necessary for protecting the site. | Up to 30 minutes, or as set by the check |
| sessionStorage visit flag | Counts a visit once per tab session for the anonymous aggregate analytics. Never leaves your browser. | Until the tab is closed |
| Service-worker cache | Keeps offline copies of public pages and of the PDF tools' program files so the site still opens on a weak connection. Your own files are never stored in it. | Until replaced or cleared |
None of these are used for advertising or cross-site tracking, so no consent banner is shown; you can clear them in your browser at any time.
6. Retention
We keep personal information only as long as the purpose requires. Our standard periods are:
- Orders, entitlements, and the payment ledger: as long as Philippine tax law requires us to keep accounting records (currently 5 years under the Ease of Paying Taxes Act, RA 11976), and no longer than 10 years.
- Contact messages and support tickets: 24 months after the last reply.
- Affiliate click records: 13 months.
- Expired sign-in sessions: 30 days.
- ShopLinks Sign documents: drafts 30 days after upload; cancelled, declined or expired requests 30 days after they close; signed documents 30 days after completion on the free plan, or while the sender's Pro access lasts plus 30 days. The file, signature images and signing record are then deleted for good. Senders can delete a document sooner (a request still out for signing must be cancelled first). Copies already emailed to signers stay in their inboxes.
- Partner profiles, commission and payout records: 5 years after the last payout.
- Signed partner agreements (the sealed PDF and its signing record): while the partner account is active, then 10 years after it ends, the period for bringing claims on a written contract (Civil Code, Article 1144).
- Payout details: until you change them or your partner account ends; the confirmation emails stay in your inbox.
- Partner store content: until you change it or your partner account ends.
- Two-factor data: until you turn two-factor authentication off or your account is deleted.
- Sign-up consent record (the Terms and Privacy versions you accepted and when): as long as the account exists.
- Customer accounts: while the account is active, then as needed for the associated order records above.
Security logs are rotated according to operational needs. Where a legal hold or an open dispute requires it, we may keep specific records longer.
7. Your choices and rights
Under the Data Privacy Act of 2012 you have the right to be informed about how your information is used, to access it, to have it corrected, to object to certain processing, to request deletion or blocking where retention is not required, to receive a copy of your data in a portable electronic format, to withdraw consent you have given, and to be indemnified for damages caused by inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal information. You may also lodge a complaint with the National Privacy Commission at privacy.gov.ph.
We may ask for enough information to verify that a request relates to you. Please do not include passwords, PINs, or full payment credentials in any request.
Data Protection Officer
Reynard B. Dahunan, Certified Data Protection Officer, RDahunan I.T. Services, Lapu-Lapu City, Cebu 6015, Philippines — dpo@rdahunanitservices.com (subject “Privacy request”) or +63 991 209 4757. You can also use the contact form. We acknowledge requests within 5 business days and respond within 30 days.
8. Security and breach notification
We use HTTPS, access controls, private delivery links, and other technical and organizational safeguards appropriate to the service. No online system can guarantee absolute security, so contact us promptly if you believe an account, order link, or message has been exposed.
If a personal data breach is likely to cause serious harm, we will notify the National Privacy Commission and affected individuals within 72 hours of discovery, as required by NPC rules.
9. Children
The store is not designed for children under 18 without a parent or guardian's consent, and we do not knowingly request personal information from them. The partner program is for adults only: you must be 18 or older to join. A parent or guardian who believes a child submitted information can contact us to request review and deletion where appropriate.
10. Changes and contact
We may update this policy as the store or its providers change. The date at the top identifies the current version. Questions can be sent through our contact page.