Legal
Privacy Policy & Terms of Use
How we handle the information you give us, and the rules that apply to this website. Written to be read, not to be skipped.
1. Who we are
MAKSAMIYA Medical Supplies & Equipment Trading is the Personal Information Controller (PIC) for the information collected through this website, as that term is used in the Data Privacy Act of 2012 (Republic Act No. 10173).
- Registered business name: MAKSAMIYA Medical Supplies & Equipment Trading
- DTI / SEC registration no.: [____]
- FDA License to Operate no.: [LTO No. ____]
- Business address: [Unit / Building No., Street, Barangay, City, Province, ZIP]
- Contact: [0917 000 0000] · [hello@yourdomain.com]
When this policy says “we,” “us” or “our,” it means this business. When it says “you,” it means the person whose information we hold, the data subject.
2. What we collect
We deliberately collect as little as possible. Through this website we may collect:
- Information you type into a form: your full name, mobile number, email address (optional), the product category you are asking about, your preferred contact time, and whatever you write in the message box.
- Information from messages you send us: if you contact us by SMS, Messenger or Viber, we receive whatever that platform shows us: typically your display name, your number or profile, and your message.
- Basic technical information: your IP address, browser type, device type, the pages you viewed and the date and time, collected automatically by our hosting provider and by analytics, if enabled.
What we ask you not to send. Please do not include diagnoses, prescriptions, medical records, laboratory or imaging results, or any other health information in our forms or messages. We do not need it to quote you a device, and we do not want to hold it. If you send such information anyway, we will use it only to answer your inquiry and will delete it once your request is closed.
3. Why we collect it
We use your information only for these purposes:
- To reply to your inquiry and prepare a quotation.
- To arrange delivery, installation, demonstration or after-sales service.
- To issue receipts, delivery documents and warranty records, and to keep the records required of us by the BIR, the FDA and other regulators.
- To process the Senior Citizen or PWD discount when you claim it, which requires us by law to record your name and ID number.
- To send you product updates and promotions, but only if you separately ticked the optional marketing box.
We do not use your information to build health profiles, and we do not send messages that reference any medical condition.
4. Our legal basis
Under Sections 12 and 13 of RA 10173, we rely on:
- Your consent: for responding to your inquiry, and separately for marketing.
- Performance of a contract: where you have placed an order, so we can deliver, install and service it.
- Legal obligation: tax, sales, warranty and regulatory record-keeping, including Senior Citizen and PWD discount records.
- Legitimate interests: keeping the website secure and preventing fraud, balanced against your rights and freedoms.
5. Your consent
Every form on this website has a consent checkbox that is unticked by default. You must tick it yourself before the form can be submitted. Marketing consent is a separate, optional checkbox. You can get a quotation without ever agreeing to receive promotions, and declining marketing will not affect the service you receive.
We keep a record of when consent was given and what it covered, in line with NPC Circular No. 2023-04. You may withdraw consent at any time by contacting our Data Protection Officer, or by replying STOP to any marketing SMS. Withdrawal does not affect processing already carried out, or records we are legally required to keep.
6. Who we share it with
We do not sell, rent or trade your personal information. We share it only with service providers who process it on our instructions, and with authorities where the law requires it:
- Hostinger International Ltd.: website hosting and form delivery.
- HighLevel Inc. (GoHighLevel): our customer-inquiry system, which stores your contact details and sends confirmations, appointment reminders and follow-ups.
- SMS, email and messaging providers: to deliver the messages you asked for, including [your SMS provider], Meta Platforms (Messenger) and Rakuten Viber.
- Google LLC: for the embedded map and, if enabled, website analytics.
- Couriers and delivery partners: your name, address and phone number only, and only when we are delivering to you.
- Government agencies: the BIR, FDA, DTI, the National Privacy Commission, or a court, where disclosure is legally required.
7. Cross-border transfer
Some of the providers above store data on servers outside the Philippines. In particular, our website is hosted by Hostinger on servers located in [data centre location, e.g. Singapore / Lithuania], and our inquiry system GoHighLevel stores data in the United States.
This means your information will be transferred to, and processed in, countries whose data protection laws may differ from Philippine law. We remain accountable for it. We use providers that offer contractual data protection commitments, and we require them to process your information only on our instructions and to apply appropriate security measures, consistent with Sections 21 and 44 of RA 10173.
8. How long we keep it
- Inquiries that do not lead to a purchase: up to two (2) years from your last contact with us, then deleted.
- Sales, delivery and warranty records: ten (10) years, as required for tax and accounting records under Philippine law.
- Senior Citizen and PWD discount records: for the period required by RA 9994 and RA 10754 and their implementing rules.
- Marketing contact lists: until you withdraw consent or opt out, after which we retain only the minimum record needed to honour your opt-out.
When a retention period ends, records are securely deleted or anonymised.
9. How we protect it
- The entire website is served over HTTPS, so anything you submit is encrypted in transit.
- Access to inquiry records is limited to staff who need it, under individual accounts.
- Physical records kept in store are stored in a locked cabinet.
- We review our processors' security commitments before using them.
No system is perfectly secure. If a breach occurs that is likely to put you at serious risk, we will notify you and the National Privacy Commission within 72 hours of becoming aware of it, as required by law.
10. Your rights as a data subject
Under RA 10173 you have the right to:
- Be informed: know that we hold your data and how we use it.
- Access: get a copy of the information we hold about you.
- Object: stop processing based on consent or legitimate interest, including all marketing.
- Rectify: have inaccurate or incomplete information corrected.
- Erasure or blocking: have your data removed where it is unlawfully obtained, no longer necessary, or you have withdrawn consent.
- Data portability: receive your data in a commonly used electronic format.
- Damages: be indemnified for damage caused by inaccurate, unlawfully obtained or unauthorised use of your information.
- File a complaint: with the National Privacy Commission.
To exercise any of these, contact our Data Protection Officer below. We will respond within fifteen (15) working days. We may ask you to confirm your identity first, so we do not disclose your information to someone else.
11. Cookies
This website uses a small number of cookies and similar technologies:
- Strictly necessary: needed for the site to load and for forms to work securely. These cannot be switched off.
- Analytics (if enabled): help us understand which pages people find useful. These are set only where permitted and can be blocked in your browser.
- Third-party: the embedded Google Map may set cookies under Google's own policy.
You can delete or block cookies through your browser settings. Blocking strictly necessary cookies may stop parts of the site from working.
12. Children
This website is intended for adults. We do not knowingly collect information from anyone under 18. If a parent or guardian believes a child has submitted information to us, please contact our Data Protection Officer and we will delete it.
13. Changes to this policy
We may update this policy as our services, providers or the law change. The effective date at the top always reflects the current version. Material changes will be announced on this page, and where the change affects processing you previously consented to, we will ask for your consent again.
14. Contact our Data Protection Officer
If you are not satisfied with our response, you may file a complaint with the National Privacy Commission, 5th Floor Delegation Building, PICC Complex, Pasay City, at privacy.gov.ph.
15. Terms of Use
15.1 What this website is
This website provides information about MAKSAMIYA Medical Supplies & Equipment Trading and lets you send us an inquiry. It is not an online store. No payment is processed and no product is sold, dispensed or shipped through this website. Every order is confirmed through a written quotation and completed in store or on delivery.
15.2 We are not a pharmacy
We are a retailer and distributor of medical devices, equipment and consumables. We do not sell, dispense, advertise or deliver prescription or over-the-counter medicines. Nothing on this website should be read as an offer to supply any medicine.
15.3 Product information is not medical advice
Descriptions of devices and categories are general information about equipment. They are not a diagnosis, a treatment recommendation, or a claim that any product will cure, treat or prevent any condition. Always follow the manufacturer's instructions for use, and consult your physician or a licensed health professional about your care. In an emergency, call your local emergency number or go to the nearest hospital.
15.4 Pricing, availability and quotations
Product categories and items shown are indicative of what we typically carry. Stock levels, specifications and prices change without notice, and are binding only when stated in a written quotation we have issued. A quotation is valid for the period stated on it.
15.5 Warranty, returns and replacements
Products are covered by the manufacturer's warranty, the terms of which are provided with the item. Defective, damaged or non-conforming items may be returned or replaced in accordance with the Consumer Act of the Philippines (RA 7394) and the applicable warranty. Please keep your official receipt, as it is required for any warranty claim. Contact us as soon as you notice a problem and we will coordinate the repair, replacement or refund you are entitled to.
15.6 Senior Citizen and PWD discount
We honour the 20% discount and VAT exemption on qualified medical supplies, accessories and equipment for Senior Citizens and Persons with Disability under RA 9994 and RA 10754 and their implementing rules. A valid ID and purchase booklet must be presented at the time of purchase, and we are required to record the details in the booklet and in our sales records.
15.7 Intellectual property
The MAKSAMIYA name, logo, text, images and layout on this website are our property or used with permission, and may not be copied or reproduced without our written consent. Brand names and trademarks of the products we distribute belong to their respective owners.
15.8 Third-party links
This website links to third-party sites, including the FDA Verification Portal and Google Maps. We do not control those sites and are not responsible for their content or their privacy practices.
15.9 Limitation of liability
We take care to keep this website accurate and available, but we do not guarantee that it will be error-free or uninterrupted. To the extent permitted by Philippine law, we are not liable for indirect or consequential loss arising from use of this website. Nothing here limits any right you have under the Consumer Act of the Philippines or any other law that cannot be waived.
15.10 Governing law
These terms are governed by the laws of the Republic of the Philippines. Any dispute shall be brought before the courts of [City / Province].
Questions about any of this?
Email our Data Protection Officer at [dpo@yourdomain.com], or send us a message. We would rather explain it than have you wonder.
