Privacy Policy

B Active
Website: https://bactiveph.com/

Effective date: 8 June 2026
Last updated: 4 September 2026

1. Who we are

B Active (“we,” “us,” or “our“) sells women’s pickleball apparel and activewear online at https://bactiveph.com/ (the “Site“).

B Active is the Personal Information Controller (PIC) responsible for your personal data under the Data Privacy Act.

Business and PIC: B Active
Registered address: Unit No. C07, Lombardy Bldg., Palmetto Place, Purok 16, Gem Village, Ma-a, Talomo District, 8000 City of Davao, Davao del Sur, Philippines
Email: [email protected]
Phone: 0968 689 9110

This Privacy Policy explains what personal data we collect when you visit the Site, create an account, shop with us, or contact us; how and why we use it; who we share it with; how long we keep it; how we protect it; and the rights you have over it.

This Policy works together with our Terms & Conditions at https://bactiveph.com/terms/. Where this Policy uses a defined term that also appears in our Terms, it has the same meaning unless stated otherwise.

2. Key terms

Personal data / personal information: any information from which your identity is apparent or can reasonably and directly be ascertained, or when put together with other information would directly and certainly identify you (for example, your name, address, email, or phone number).
Sensitive personal information: special categories of data under the Data Privacy Act, such as information about your health, race, ethnic origin, religious or political beliefs, marital status, age, government-issued ID numbers, and similar. B Active does not require or intentionally collect sensitive personal information. Please do not send us sensitive personal information unless we specifically ask for it.
Processing: any operation performed on personal data, such as collection, recording, storage, use, sharing, or deletion.
Personal Information Processor (PIP): a third party we engage to process personal data on our behalf and under our instructions (for example, our hosting provider or email platform).
Data subject: the individual whose personal data is processed. That’s you.
NPC: the National Privacy Commission of the Philippines.

3. The personal data we collect

We only collect what we need to run the Site, fulfil your orders, and serve you as a customer. Depending on how you use the Site, we may collect:

a. Account information. When you create an account at “My account,” we collect your name, email address, password (stored in encrypted/hashed form), and any details you choose to add, such as a phone number or saved addresses.

b. Order and transaction information. When you place an order, we collect your billing and shipping name, delivery address, contact number, email, the items you bought, order value, and order history.

c. Payment information. We accept QRPh, Maya, ShopeePay and GrabPay through PayMongo, and Cash on Delivery (COD) for eligible orders. COD eligibility and fees are shown at checkout. Online payments are processed by our third-party payment provider (PayMongo). We do not store your payment credentials on our servers. We may receive limited information from the payment provider, such as a confirmation of payment and the payment method type. For COD, we collect the delivery details needed to complete the cash transaction.

d. Delivery information. To ship your order nationwide, we share the recipient’s name, address, and contact number with our couriers (currently J&T Express and LBC Express) and receive delivery-status updates in return.

e. Marketing and communications. If you join our mailing list (“Join the club”), we collect your email (and any name you provide) so we can send you offers, new-drop announcements, and Davao court-day updates. If you contact us through the contact form, email, or social media, we collect the information you provide and our correspondence.

f. Reviews and user content. If you submit a product review, comment, or other content, we collect that content and the name or display name you post it under.

g. Browsing and device information (collected automatically). When you use the Site, we and our service providers automatically collect technical data such as your IP address, browser type, device type, operating system, referring pages, the pages you view, and how you interact with the Site. We collect this using cookies and similar technologies; see Section 6 (Cookies).

We do not knowingly collect more data than necessary, and we do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

4. How we collect your data

Directly from you: when you create an account, place an order, sign up for our mailing list, leave a review, or contact us.
Automatically: through cookies and similar technologies as you browse the Site (see Section 6).
From third parties: such as our payment provider (payment confirmation), our couriers (delivery status), and social media or advertising platforms (for example, if you interact with our ads or pages on Facebook, Instagram, Threads, or TikTok).

5. Why we use your data, and our legal basis

Under the Data Privacy Act, every use of your personal data must rest on a lawful basis. We rely on the bases below.

To perform our contract with you (fulfilling your order under our Terms & Conditions):

Process and deliver your orders, take payment, and arrange shipping and returns.
Manage your account and provide customer support about your orders.

Because you have given consent:

Send you marketing emails and promotions (you can withdraw consent at any time; see “Your rights” and the unsubscribe link in every marketing email).
Place non-essential cookies, such as analytics and advertising cookies (see Section 6).

Because we have a legitimate interest (kept in balance with your rights and freedoms):

Operate, secure, maintain, and improve the Site and our product range.
Prevent fraud, abuse, and chargebacks, and keep our store and customers safe.
Understand which products and pages are popular so we can serve customers better.
Respond to your enquiries and handle disputes.

To comply with a legal obligation:

Keep transaction, invoicing, and accounting records as required by the Bureau of Internal Revenue (BIR) and other Philippine laws.
Comply with the Consumer Act, the Internet Transactions Act, the Data Privacy Act, and lawful requests from regulators, courts, or law enforcement.

We will not use your personal data for a new purpose that is incompatible with the purpose we collected it for without informing you and, where required, obtaining your consent.

6. Cookies and similar technologies

Our Site runs on WooCommerce/WordPress and uses cookies and similar technologies. Cookies are small files placed on your device. We use:

Strictly necessary cookies: required for the Site to function, including keeping items in your cart, letting you log in, and processing checkout. These cannot be switched off in our systems.
Functional/preference cookies: remember choices you make, such as your region or login state.
Analytics cookies: help us understand how visitors use the Site so we can improve it. We use Google (Google Analytics).
Marketing/advertising cookies: used to measure and deliver relevant ads. We use the Meta Pixel (for Facebook, Instagram, and Threads) and Google.

You can control cookies through your browser settings and through our cookie consent banner on the Site. Blocking some cookies may affect how the Site works. For non-essential cookies (analytics and marketing), we ask for your consent before they are set, and you can change your choice at any time.

7. Who we share your data with

We do not sell your personal data. We share it only as needed to run B Active, and we require those we share it with to protect it. We may share personal data with:

Payment provider: we use PayMongo to process QRPh, Maya, ShopeePay and GrabPay payments securely.
Couriers and logistics partners: J&T Express and LBC Express, to deliver your order and provide tracking.
Technology and hosting providers: our website hosting provider and IT support, and the WooCommerce/WordPress infrastructure that keeps the Site running.
Email marketing platform: we use Mailchimp to send our newsletter and promotional emails.
Analytics and advertising platforms: Meta (Facebook, Instagram, Threads) and Google, where you have consented to the relevant cookies.
Professional advisers: accountants, auditors, and lawyers, where reasonably necessary.
Government authorities: the BIR, NPC, courts, or law enforcement, where we are legally required to disclose, or to establish, exercise, or defend legal claims.
In a business transfer: if B Active is involved in a merger, acquisition, reorganisation, or sale of assets, your data may be transferred as part of that transaction, subject to this Policy.

Where a third party processes personal data on our behalf (a Personal Information Processor), we put an appropriate data processing or outsourcing agreement in place, as required by the Data Privacy Act.

8. Transfers outside the Philippines

Some of our service providers, including our email platform (Mailchimp), and our analytics and advertising platforms (Meta and Google), may store or process personal data on servers located outside the Philippines. Where this happens, we take steps to ensure your personal data continues to receive a level of protection consistent with the Data Privacy Act, for example, through contractual safeguards such as the NPC’s Model Contractual Clauses or equivalent protections. We remain responsible for personal data that we transfer to our processors.

9. How long we keep your data

We keep personal data only as long as necessary for the purposes set out in this Policy, and then securely delete or anonymise it. In practice:

Order and transaction records: retained for as long as required by Philippine tax and accounting laws (generally up to ten (10) years under BIR rules), and to handle returns, warranties, and disputes.
Account information: kept while your account is active and for a reasonable period afterwards, unless you ask us to delete it earlier and we are not required to retain it.
Marketing data: kept until you unsubscribe or withdraw consent, after which we remove you from active marketing.
Customer-service correspondence: kept for a reasonable period to resolve your query and for our records.
Cookie and analytics data: kept for the retention periods set by the relevant cookie or platform, which we disclose where reasonably possible.

When the purpose for which data was collected has been served and no legal retention period applies, we dispose of it securely.

10. How we protect your data

We implement reasonable and appropriate organisational, physical, and technical security measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, and destruction, in line with the Data Privacy Act. These include access controls and passwords, encryption in transit (HTTPS/SSL), restricting access to personal data to people who need it, using reputable service providers, and reviewing our security practices.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach occurs that is likely to seriously harm you, we will notify you and the NPC as required by law (within 72 hours of knowledge of the breach, where the breach involves sensitive personal information or information that may enable identity fraud and is likely to give rise to a real risk of serious harm).

11. Your rights as a data subject

Under the Data Privacy Act, you have the following rights over your personal data:

Right to be informed: to know whether and how your personal data is being processed, and the purposes, recipients, and basis for it.
Right to access: to obtain a copy of the personal data we hold about you and information about how we process it.
Right to object: to object to processing, including direct marketing, and to withdraw consent you previously gave.
Right to rectification: to have inaccurate or incomplete personal data corrected.
Right to erasure or blocking: to have your personal data removed or blocked in the circumstances allowed by law (for example, where the data is outdated, false, unlawfully obtained, or no longer necessary).
Right to data portability: to obtain and reuse a copy of personal data you provided to us, in a structured, commonly used, electronic format, where processing is based on consent or contract and done by electronic means.
Right to damages: to be indemnified for damages you suffer due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.
Right to file a complaint: to lodge a complaint with the National Privacy Commission.

These rights may be subject to legal limits and exceptions (for example, where we must keep records to comply with tax law). The rights of a data subject are also transmissible to their lawful heirs and assigns.

How to exercise your rights. Contact us using the details in Section 15. We may ask you to verify your identity before we act on your request, to protect your data. We will respond within a reasonable period and in any event within the timeframes required by law. You can unsubscribe from marketing at any time using the link in any marketing email, without affecting our other communications about your orders.

12. Children’s privacy

The Site and our products are intended for adults. We do not knowingly collect personal data from children under 18 without the consent of a parent or guardian. If you are under 18, please use the Site only with the involvement of a parent or guardian. If you believe a child has provided us personal data without appropriate consent, contact us and we will take steps to delete it.

13. Third-party sites and links

The Site may link to third-party websites and platforms (for example, our couriers’ tracking pages, payment provider, or our Instagram, Facebook, Threads, and TikTok pages). We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing them your personal data.

14. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or the law. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the Site or by email. Your continued use of the Site after an update means you accept the revised Policy.

15. How to contact us

If you have questions about this Policy, want to exercise your rights, or wish to raise a privacy concern, please contact our Data Protection Officer (DPO):

Data Protection Officer: The Manager
Email: [email protected]
Postal address: B Active, Unit No. C07, Lombardy Bldg., Palmetto Place, Purok 16, Gem Village, Ma-a, Talomo District, 8000 City of Davao, Davao del Sur, Philippines
Phone: 0968 689 9110

If you are not satisfied with how we have handled your concern, you may contact the National Privacy Commission:

Website: https://www.privacy.gov.ph
Email: [email protected]
Address: 5th Floor, Philippine International Convention Center, Vicente Sotto Avenue, Pasay City, Metro Manila 1307

16. Governing law

This Privacy Policy is governed by the laws of the Republic of the Philippines, including the Data Privacy Act of 2012 (RA 10173) and its IRR. Any dispute arising from this Policy shall be subject to the exclusive jurisdiction of the proper courts of Davao City, Philippines, without prejudice to your right to file a complaint with the National Privacy Commission.