Bebang Halo-Halo Stores

Privacy Policy

How we handle your information

Last updated 5 September 2026. This policy is issued by Bebang Enterprise Inc. and applies to every Bebang website, form and app listed below.

1. Who we are

Bebang Enterprise Inc. ("Bebang", "we", "us") operates the Bebang Halo-Halo brand in the Philippines. We are the personal information controller for the data described in this policy under Republic Act No. 10173, the Data Privacy Act of 2012, and its implementing rules.

2. Where this policy applies

• bebang.ph, including the store locator, the ordering bridge page, the bulk-order and partner order forms, and any other page on this domain;
• my.bebang.ph and hq.bebang.ph, our internal operations, HR and store-management systems used by employees, store partners and suppliers;
• sign.bebang.ph, our electronic document-signing service;
• our official pages and accounts on Facebook, Instagram, TikTok and Messenger, to the extent we receive data through them;
• any other website or app that links to this policy.

Orders placed through GrabFood or foodpanda are handled by those platforms under their own privacy policies. We receive only the order details needed to prepare and hand over your order.

3. What we collect

• Information you give us: name, mobile number, email address, delivery or branch details and order notes when you place a bulk or partner order, send us a message, sign a document, apply for a job or join a programme with us.
• Information about your visit: pages viewed, buttons tapped (for example the Grab, foodpanda or "get directions" buttons), device and browser type, approximate location from your IP address, and referral source, collected through cookies and similar technologies.
• Information from our systems: if you are an employee, store partner or supplier, the account and transaction records needed to run the business, including attendance, payroll, purchasing and store performance data, subject to the notices issued to you directly.

We do not sell personal information. Our public websites have no shopping cart and do not collect payment card details.

4. Why we use it

• to prepare, deliver and support your orders and requests;
• to run our stores, commissary, logistics, HR and finance operations;
• to understand how our websites are used and improve them;
• to measure and improve our advertising, including showing Bebang ads to people who have visited our sites and measuring whether an ad led to a tap on an ordering button;
• to comply with law, resolve disputes and enforce our agreements.

We rely on your consent, the performance of a contract with you, our legitimate interests in running and promoting the business, and our legal obligations, as the case requires.

5. Cookies, analytics and advertising

Our websites use Google Tag Manager, Google Analytics and the Meta Pixel together with Meta's Conversions API. These tools set cookies or similar identifiers and record events such as page views and button taps. Meta and Google receive this data under their own terms. We do not send names, phone numbers or email addresses from our public websites to these tools.

You can control cookies in your browser settings, opt out of Google Analytics through Google's browser add-on, and manage advertising preferences in your Facebook and Instagram settings. Some pages may not work as intended with cookies disabled.

6. Who we share it with

• Service providers that host and run our systems and communications, including Cloudflare, Amazon Web Services, Google, Meta, Supabase and our e-signature and messaging providers, acting on our instructions;
• Delivery platforms (GrabFood, foodpanda) for orders you place through them;
• Store partners and franchisees that operate individual Bebang branches, for orders and requests relating to their branch;
• Government agencies, courts and regulators where required by law;
• a successor business in the event of a merger, acquisition or reorganisation.

Some providers process data outside the Philippines. Where they do, we rely on their contractual commitments and security certifications.

7. How long we keep it

We keep personal information for as long as needed for the purpose it was collected, then for the period required by Philippine tax, labour, corporate and accounting law, after which it is deleted or anonymised. Website analytics data is retained according to the settings of the analytics tools, typically 2 to 26 months.

8. Your rights

Under the Data Privacy Act you have the right to be informed, to access, to correct, to object, to erasure or blocking, to data portability, to file a complaint, and to damages. To exercise any of these rights, contact us using the details below. We will respond within the periods required by the National Privacy Commission. You may also lodge a complaint with the National Privacy Commission at privacy.gov.ph.

9. Security

We use access controls, encryption in transit, audit logs and role-based permissions to protect personal information, and we limit access to people who need it for their work. No system is perfectly secure; if a breach affecting you occurs, we will notify you and the National Privacy Commission as the law requires.

10. Children

Our websites are not directed at children under 18, and we do not knowingly collect their personal information online. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. Material changes will be announced on this page.