SudsGO Privacy Policy

Overview

This Privacy Policy explains how SUDS PREMIER FRANCHISING CORP ("SudsGO," "we," "us," or "our"), operating self-service laundromats, collects, uses, stores, shares, and protects your personal information when you use the SudsGO mobile application (the "App") and related services, including paying for laundry machine cycles by phone and earning and redeeming reward points.

Legal Framework

We respect your privacy and process personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

By creating an account or using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the App.

1 Who We Are and How to Contact Us

Personal Information Controller: SUDS PREMIER FRANCHISING CORP

Address

174 C. RAYMUNDO AVENUE, MAYBUNGA, PASIG CITY

Privacy Email

care@suds.com.ph

Phone Hotline

+63 998 843 2388

For any question, request, or complaint about your personal data, contact our DPO using the details above.

2 Information We Collect

2.1 Information you provide to us

Account information: your name, email address, and mobile number, which we ask for when you sign up or log in.
Verification information: one-time passwords (OTP) or verification codes sent to your email or mobile number to confirm it belongs to you.
Support communications: messages, feedback, or complaints you send us, and any information included in them.

2.2 Information generated when you use the App

Transaction information: the branch, machine number, cycle or load type selected, amount paid, date and time, payment status, and receipts or reference numbers.
Rewards information: points earned, redeemed, and your points balance and history.
Usage information: app features used, screens viewed, and error or crash logs.
Device information: device model, operating system version, app version, language, unique app or advertising identifiers, and IP address.

2.3 Payment information

Payments made through the App are processed by third-party payment providers (for example, e-wallets, banks, or card processors). We do not store your full card number, CVV, e-wallet PIN, or online banking credentials. We receive only limited information such as the payment status, transaction reference, amount, and (where provided) the last digits of the payment method or a token.

2.4 Information from your device (with your permission)

Depending on how you use the App, we may request:

Camera To scan the QR code on a machine or kiosk. Images are used only to read the code and are not stored.

Notifications To send you payment confirmations, cycle status, and reward updates.

Network Access To communicate with our servers and the machines.

You can change these permissions at any time in your device settings. Some features may not work if you turn them off.

2.5 What we do not collect We do not knowingly collect sensitive personal information (such as government-issued ID numbers, health information, or biometric data) through the App. Please do not send us such information.

3 How We Use Your Information and Our Legal Basis

Purpose	Examples	Legal Basis
Provide the service	Create and manage your account; process payments; start the selected machine cycle; send receipts and confirmations	Performance of a contract; your consent
Run the rewards program	Credit points for eligible transactions; allow redemption; maintain your balance and history	Performance of a contract; your consent
Security and fraud prevention	Verify your identity with OTP; detect duplicate, unauthorized, or suspicious transactions and abuse of points	Legitimate interests; legal obligation
Customer support	Respond to inquiries, refunds, machine malfunctions, and disputes	Performance of a contract; legitimate interests
Improve the App and our branches	Analyze usage and machine demand; fix bugs; improve features and service	Legitimate interests
Service messages	Notifications about transactions, account, policy changes	Performance of a contract; legitimate interests
Promotions (optional)	Offers, vouchers, and announcements about SudsGO	Your consent, which you may withdraw at any time
Legal and accounting	Bookkeeping, tax compliance, responding to lawful requests	Legal obligation

We will not use your personal data for purposes that are incompatible with those above without informing you and, where required, obtaining your consent.

4 Sharing of Your Information

We do not sell your personal information. We share it only as described below:

Payment providers: to process your payments and refunds.
Service providers (personal information processors): companies that help us operate the App, such as cloud hosting and database services, authentication and OTP/SMS/email delivery, analytics, crash reporting, and push notifications. They may process data only on our instructions and under confidentiality and security obligations.
Our franchise owners or branch operators: where a branch is operated by a franchisee, limited transaction information for that branch (such as machine usage and amounts) may be shared for operations, accounting, and customer support.
Legal and regulatory reasons: government agencies, courts, or law enforcement when required by law, subpoena, or valid legal process, or to protect our rights, safety, or property.
Business transfers: if we merge with, are acquired by, or sell assets to another business, your data may be transferred, and we will require the recipient to honor this Policy or notify you of changes.
With your consent: in any other situation where you have agreed to the sharing.

We may also share aggregated or de-identified information that cannot reasonably identify you.

5 Data Retention

Account info: active duration, + up to 12 months post-deletion for dispute handling.
Transaction records: 10 years as required by PH tax & accounting laws.
Rewards data: while account is active (unredeemed points forfeited upon deletion).
Support records: 2 years post-resolution.
Logs & analytics: 12 to 24 months.

6 Data Security

We use reasonable organizational, physical, and technical measures including:

Encryption in transit (HTTPS/TLS)

Role-based data access controls

Secure OTP verification

If a personal data breach occurs likely to result in serious harm, we will notify you and the NPC as required by law.

7 Cookies, Analytics, and Similar Technologies

The App may use device identifiers and SDKs from third-party providers (such as analytics and crash reporting tools) to understand how the App is used and to keep it stable and secure. If you wish to limit tracking, you can reset your device's advertising identifier or adjust privacy settings in your device.

8 Your Rights

Under the Data Privacy Act, you have the right to:

Be informed about how your personal data is processed.
Access the personal data we hold about you.
Object to processing, including for direct marketing, or withdraw your consent.
Rectify inaccurate or incomplete data.
Erase or block your data, in certain circumstances, such as when it is no longer necessary or is unlawfully processed.
Data portability: obtain a copy of your data in a commonly used electronic format, where applicable.
Be indemnified for damages caused by inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your data.
File a complaint with the National Privacy Commission (NPC).

To exercise your rights, contact our DPO at care@suds.com.ph. National Privacy Commission website: www.privacy.gov.ph

9 Account and Data Deletion

You may request deletion of your account and associated personal data at any time by:

Option 1: In-App

Using the "Delete Account" option in the App (Settings > Account).

Option 2: Email

Emailing care@suds.com.ph from your registered address with subject "Delete My SudsGO Account."

What happens when you delete your account:

Your name, email, mobile number, and profile data will be deleted or anonymized, except for data required for tax and accounting.
Any unused reward points and promotional credits will be forfeited and cannot be restored.
Deletion is generally completed within 30 days of verification of your request.

10. Rewards Points and Your Data

Points are tied to your account and are tracked using your account and transaction data. Points have no cash value, are non-transferable, and are subject to the SudsGO Rewards Terms. We may adjust, suspend, or cancel points or accounts we reasonably believe to be obtained through fraud, abuse, or error.

11. Children's Privacy

The App is intended for users who are 18 years old or older, or who have the consent of a parent or legal guardian. We do not knowingly collect personal data from children without verifiable parental consent. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Transfers Outside the Philippines

Some of our service providers (such as cloud hosting and messaging providers) may store or process data on servers outside the Philippines. When this happens, we take steps to ensure your data remains protected by appropriate safeguards in line with the Data Privacy Act.

13. Third-Party Links and Services

The App may contain links to or integrations with third-party services (such as payment platforms). Their privacy practices are governed by their own policies, and we encourage you to read them.

14. Changes to This Privacy Policy

We may update this Policy from time to time. We will post the updated version in the App and revise the "Last updated" date. For material changes, we will notify you through the App or by email. Continued use of the App after the effective date means you accept the updated Policy.

15. Contact Us

For questions, concerns, or to exercise your rights:

Entity SUDS PREMIER FRANCHISING CORP

Email DPO care@suds.com.ph

Phone Hotline +63 998 843 2388

Regulator www.privacy.gov.ph

16. Consent

By tapping "I Agree" during sign-up or by continuing to use the App, you confirm that you have read and understood this Privacy Policy and voluntarily consent to the collection, use, storage, and sharing of your personal data as described above.