Privacy policy
Supplies Station, Inc. (“Station”) is committed to protect your privacy and ensure that all personal data collected from you are processed pursuant to R.A. 10173 (Data Privacy Act of 2012) and other relevant legislation.
Personal data we process: Depending on your transaction with Station we may collect your full name, contact details, account number, address, signature and loyalty card number. Our CCTV cameras may also capture your image, actuations and whereabouts while you are in our premises.
Purposes of processing: Station, its authorized personnel, or service group processes your personal data for the purpose of providing you with the products and services you avail, assisting you through our customer service, performing data analyses and profiling to improve our services, sending you updates through our marketing activities, complying with regulations and ensuring the security of our premises.
Lawful Bases: We process your personal information based on your consent or to fulfill our contract with you. Further, in certain situations, we may process your personal information when it’s necessary for our legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
Storage: Physical records containing your personal data are securely stored within company premises while digital records containing your personal data are stored in our computers and hosted in a secure server facility in the Philippines or in other countries where we or our business partners have facilities. When we transfer your personal information to other countries, we comply with the requirements of DPA Legislation or relevant regulations.
Data Transfer: We may share your personal information to our parent company, affiliates, and our authorized personnel in relation to the Purposes declared in this Privacy Notice. We may also share your personal data in compliance with applicable laws or when required by a competent court, relevant government office or agency pursuant to DPA legislation and other applicable rules and regulations pertaining to data privacy.
Retention: We will keep your personal information for a maximum period of five (5) years from the transaction date unless certain government regulations (e.g. BIR) require us to keep your data for a longer period. CCTV footages are kept for a maximum period of three (3) months unless it is necessary to preserve and maintain the same for a longer period in line with an investigation or a case.
Risk: Risk is the chance that a harmful incident may happen. In the context of personal data, risk refers to the chance that someone might collect, use, disclose, or access your personal data in an unauthorized manner or in a way that may cause you harm. Nonetheless, we have implemented security measures to minimize, monitor, and control the risk of exposure of your personal information.
How we protect your Personal Data: We implement industry-standard organizational, technical and physical security measures to protect the confidentiality, integrity and availability your personal data. These include, among others, appointing a Data Protection Officer, conducting data privacy training, instituting policies for data protection, storing physical records in a locked and secured place accessible only to authorized personnel, implementing role-based access in our systems, performing periodic reviews of access rights, deploying firewall equipment and similar network devices to protect our systems and network, regularly running vulnerability scans and using only secure channels for transmission.
Disposal: Physical records are shredded for disposal, while electronic files are securely erased. When appropriate, anonymization techniques are performed to permanently remove identifiable information from our records. In all cases, we will make sure that the personal information is destroyed in a way that prevents unauthorized people from accessing, processing, or retrieving it.
Methods used for Automated Access: Station does not employ automated access when processing personal data within its store premises.
Your Data Privacy Rights: You have the right to be informed, to access, update or correct your personal data, withdraw your consent, request the disposal of your personal data subject to regulatory limitations, request a copy of your data in an electronic format, claim damages for violations of your data privacy rights, and raise data privacy concerns. If you intend to exercise any of your data privacy rights, feel free to reach out to our Data Protection Officer through:
The Data Protection Officer
Supplies Station Inc..
SM Retail HQ, JW. Diokno Blvd.
MOA Complex, Pasay City
Email: dpo.supplies@smretail.com
We encourage you to submit your inquiry and/or concerns in writing for proper documentation and tracking. Our response will be within 15 days upon receipt.
How Will You Know if this Privacy Notice Changes?
Supplies Station, Inc. (“Station”) may change this Privacy Notice from time to time without prior notice. Revised versions of this Privacy Notice will be posted on this page, together with an updated effective date.
Last updated on July, 2025
