Privacy Policy

Overview

KCMPS ("we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, where it's stored, and your rights under Philippine law.

Important: This is an informational summary, not legal advice. We recommend you have legal counsel review this policy to ensure compliance with your specific circumstances.

What We Collect

When you use KCMPS's website or place an order, we collect:

• Account information: Your given name, family name, email address, and password (via AWS Cognito)
• Order information: Delivery address, phone number, and order history
• Payment information: GCash payment reference number and your payment proof screenshot
• Design files: Custom design files you upload for printing or design services
• Support correspondence: Messages, notes, and files related to your orders or support requests

Why We Collect It

We collect this information to:

• Fulfill and manage your orders
• Verify payment and prevent fraud
• Send you order updates and important notifications
• Provide customer support and respond to inquiries
• Improve our services

Where Your Data Lives

Your personal information is stored on Amazon Web Services (AWS) infrastructure in the Asia Pacific (Singapore) ap-southeast-1 region, including:

• DynamoDB: Order records, account data, and correspondence logs
• S3: Uploaded design files and payment proof screenshots
• Cognito: Authentication credentials and user identity
• SES (Simple Email Service): Order and support emails, with a backup copy sent to our shared inbox

All data transfers use encrypted HTTPS connections.

Data Retention

• Payment evidence (proof screenshots, GCash references): Kept indefinitely as financial records, per Philippine accounting law
• Design files: Retained for the duration of your order and support period; infected files (detected by AWS GuardDuty malware scanning) are automatically deleted and you're notified
• Order history: Kept for customer service and dispute resolution
• Account data: Retained while your account is active; you may request erasure subject to legal record-keeping requirements

Who Can See Your Data

Your data is not sold, shared, or disclosed to third parties for marketing purposes.

Your information is accessed only by:

• KCMPS staff: Role-gated access (production, sales, and administrative staff) to fulfill and support your orders
• Necessary service providers: AWS (infrastructure), GCash (payment processing), and courier partners (Grab/Lalamove) when you choose courier delivery for pickup or address information only
• Legal requests: If required by law or court order

Malware scanning: Uploaded files are automatically scanned by AWS GuardDuty for malware. Infected files are deleted and you're notified; staff are never exposed to potentially dangerous files.

Your Rights Under Philippine Law

The Philippine Data Privacy Act of 2012 (Republic Act 10173) grants you the following rights:

• Right to access: You can request a copy of your personal information that we hold
• Right to correction: You can request that inaccurate or incomplete data be corrected
• Right to erasure: You can request deletion of your data, subject to legal obligations (e.g., financial records must be retained per law)
• Right to object: You can object to certain processing of your data
• Right to lodge a complaint: You can file a complaint with the National Privacy Commission (NPC) if you believe your privacy rights have been violated

To exercise any of these rights, contact us at info@kcmps.com.

Data Controller

KCMPS acts as the personal information controller under the Data Privacy Act, meaning we determine how and why your data is collected and used.

Security

We use industry-standard practices to protect your data, including:

• HTTPS encryption for all data in transit
• AWS security features (DynamoDB encryption, S3 access controls)
• Automatic malware scanning of uploaded files
• Role-based access control for staff

No method is 100% secure, but we take reasonable precautions.

Changes to This Policy

We may update this privacy policy from time to time. We'll notify you of significant changes via email or by posting the new policy on our website.

Contact

If you have questions about this privacy policy or how we handle your data, contact us at:

KCMPS
Email: info@kcmps.com
Manila, Philippines