Privacy Policy

1 Who we are

Built Different, Pare is an independent Filipino podcast and small merch label run by two people, Beng and Yen, from Baclaran, Parañaque, Metro Manila. We are the personal information controller for everything described here.

Questions, requests, or complaints about your data go to builtdifferentpare@gmail.com. That inbox is read by us, not by a support company.

2 What we collect, and only when you give it

Nothing on this site asks you to sign up to read it, and nothing tracks you unless you say yes to the cookie prompt — see §5. Beyond that, you are anonymous here until you fill in a form. What each form collects:

• Contact form — your first name, mobile number and email address, all required, plus your message and what it's about. Last name if you add it.
• Newsletter sign-up — first name, mobile number and email address, all required. Last name if you add it.
• Drop waitlist — your name, mobile number and email address. Nothing else.
• Guest application — the same as the contact form, plus the answers you type about yourself and what you'd like to talk about.
• Placing an order — full name, email, mobile number, and either a complete shipping address or your choice to collect in store. Then, at the payment step, the receipt screenshot you upload.
• SMS and marketing consent — whether you ticked each box, and when.

A mobile number is required on our forms, but giving it is not permission to text you. The SMS and marketing boxes are separate, unticked by default, and you can submit any form without ticking either. We use the number to reach you about the specific thing you contacted us about — an order, a reply, a drop you asked to be told about. Episode and promotional texts go only to people who ticked the box, and you can stop them any time by replying STOP.

We never see or store your card, bank or e-wallet credentials. Payment happens entirely inside your own GCash, Maya or bank app. What reaches us is the screenshot you send us, which is how we match your payment to your order by hand.

3 Why we hold it

• To answer you. If you send a message, we need somewhere to reply.
• To fulfil an order. Confirming payment, producing the item, shipping it, and telling you when it moves.
• To send what you asked for. Episode and drop alerts, but only to people who ticked the box.
• To keep the site standing up. Rate limiting and spam filtering on the forms.

Our legal bases under RA 10173 are your consent (messages, marketing), performing a contract with you (orders), and our legitimate interest in preventing abuse of the forms.

We do not sell, rent or trade your personal information to anyone, for any amount, ever.

4 Who processes it for us

These are the only services that touch your data, and each one only gets the part it needs to do its job.

• GoHighLevel — our CRM. Holds your contact record, your message and your order details so we can reply and fulfil. United States.
• Vercel — hosts the site and runs the small server functions behind the forms. Standard server logs including IP address. United States, served from Singapore.
• Upstash — a small database holding the order counter and the rate-limit counters. Stores a hashed form of your IP address for the rate limiter, never your name or your message.
• Spotify for Creators — hosts the episode audio the player streams.
• YouTube — the episode videos are embedded in privacy-enhanced (youtube-nocookie) mode, so YouTube does not set advertising cookies unless you press play.
• Google Analytics (GA4) — only if you accept analytics cookies (§5). Sees which pages you visited, roughly where from, and what device you're on — never your name, email or anything you typed into a form. United States.
• Meta (Facebook/Instagram) Pixel — only if you accept analytics cookies (§5). Tells us how many people who see our ads on Facebook or Instagram go on to buy something or send a message, and lets Meta show our ads to people who look like our existing visitors. If you're logged into Facebook or Instagram in the same browser, it can associate your visit with that account. United States.

Some of these are outside the Philippines. Where that happens, the transfer is covered by each provider's own data processing terms, and by your consent to use a service we've told you is hosted abroad.

We will also disclose information if a Philippine law, court order or lawful government request requires it — and we will tell you if we are allowed to.

5 Cookies and what runs in your browser

Analytics and ad cookies are off by default, and nothing about your visit reaches Google or Meta until you click Accept on the prompt that appears the first time you land here. Decline it, ignore it, or never see it because you're browsing with cookies blocked — either way, nothing loads and nothing is sent. You can change your mind any time from Cookie Preferences in the footer of every page, which reopens the same prompt.

If you accept, two things start running:

• Google Analytics (GA4) sets _ga and _ga_<container id>, first-party cookies holding a random ID that lets Google count you as one visitor across pages. Expires after 2 years or when you decline.
• Meta Pixel sets _fbp, a first-party cookie Meta uses to connect your visit to ad performance on Facebook and Instagram. Expires after 90 days or when you decline.

Neither is required for the site to work. Declining changes nothing about browsing, buying, or reaching us — see §4 for exactly what each one can and can't see about you.

What the site keeps regardless, on your own device, in local storage — it never leaves your browser and we cannot read it:

• bdp-theme — whether you chose light or dark.
• bdp-cart-v1 — what's in your cart, so it survives a reload.
• bdp-popup-seen — so the newsletter pop-up doesn't ask twice.
• bdp-dock-dismissed — whether you closed the episode player, for this tab only.
• bdp-consent-v1 — your Accept/Decline answer to the cookie prompt above, and when you gave it.

Clearing your site data removes all of it, including your cookie choice — you'll be asked again next visit. Nothing breaks except your cart.

6 How long we keep it

• Order records — five years from the order date. Philippine tax and business records rules require this, so we cannot delete these on request until the period is up.
• Receipt screenshots — until the order is delivered and the return window has closed, then deleted.
• Contact messages — two years, or sooner if you ask.
• Marketing list — until you unsubscribe, then removed within 30 days.

7 Your rights

Under the Data Privacy Act you can ask us to:

• Show you everything we hold about you.
• Correct anything that's wrong.
• Delete it — except order records inside the five-year retention period above.
• Object to us using it for marketing. Always granted, immediately.
• Give you a copy in a portable format you can take elsewhere.
• Be told if there's ever a breach that puts you at real risk. We'd notify you and the National Privacy Commission within 72 hours of discovering it.

Email builtdifferentpare@gmail.com and we'll action it within 15 working days. There's no charge.

To stop marketing texts, reply STOP to any message. To stop emails, use the unsubscribe link at the bottom of any of them. Neither affects order updates for something you've already bought — those aren't marketing.

If you think we've mishandled your data and we haven't fixed it, you can complain to the National Privacy Commission at privacy.gov.ph.

8 Children

This site isn't aimed at children under 13 and we don't knowingly collect anything from them. If you're a parent or guardian and think we have, email us and we'll delete it.

9 Changes

If this policy changes we update the date at the top. If a change actually affects how we handle something you've already given us, we'll email everyone on the list rather than quietly editing the page.