The Vow Edit Privacy Notice
Last updated: 8 June 2026
Effective date: 8 June 2026
This Privacy Notice explains how The Vow Edit (“The Vow Edit”, “we”, “us”) collects, uses, stores, shares, and protects personal data when wedding suppliers apply for or are listed in our directory at thevowedit.ph. We are committed to handling your personal data in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 (the “DPA”), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (the “NPC”).
If you have any questions about this notice or how your data is handled, contact our Data Protection Officer using the details in the “How to contact us” section below.
1. Who we are
The Vow Edit operates thevowedit.ph, an online directory of wedding suppliers serving Cebu, Philippines.
- Operator / Personal Information Controller: Martin Casey (sole trader), operating thevowedit.ph
- Business registration: Australian Business Number (ABN) 84 263 783 878 — registered as an Individual / Sole Trader in Australia
- Data Protection Officer (DPO): Martin Casey
- DPO contact: privacy@thevowedit.ph
We are the Personal Information Controller responsible for the personal data described in this notice. We remain accountable for that data even where we use third parties to process it on our behalf.
2. What personal data we collect
When you apply for a founding listing
When you submit the application form on thevowedit.ph, we collect the information you provide:
- Business name
- Category (e.g. photography, catering, venues)
- Area served (e.g. Cebu City, Mandaue, Lapu-Lapu / Mactan)
- Contact name
- Email address
- Mobile number
- Website or social media link (optional)
- Price range (optional)
We also record, automatically and on the server, a small amount of information tied to your submission:
- Whether you gave consent, and the date and time that consent was recorded
- The date and time your application was received
- The internal status of your application (e.g. pending review)
We do not intentionally collect sensitive personal information (as defined under the DPA, such as data about health, religion, or government-issued identifiers) through this form. Please do not include such information in the free-text fields.
Note for sole proprietors and freelancers: where your business contact details are also your personal details (for example, a personal mobile number or name), we treat that information as personal data protected under the DPA.
3. How we use your personal data, and our lawful basis
We process your personal data for the following purposes:
| Purpose | Lawful basis under the DPA |
|---|---|
| To review your application and decide whether to create or activate your listing | Your consent, given when you submit the form |
| To contact you about your founding listing before and after launch | Your consent, and our legitimate business interest in onboarding suppliers |
| To create and display your listing in the directory so couples can find you | Your consent |
| To respond to your enquiries and provide support | Performance of our service to you |
| To keep records, secure our systems, and comply with legal obligations | Compliance with legal obligations and our legitimate interests |
Your consent is recorded at the point of submission. You may withdraw consent at any time (see “Your rights” below); withdrawal does not affect the lawfulness of processing carried out before withdrawal.
We will not use your personal data for purposes incompatible with those above without informing you and, where required, obtaining your consent.
4. Who we share your personal data with
We do not sell your personal data. We share it only with the service providers who help us operate The Vow Edit, and only as needed:
- Supabase — our database provider, which stores your application and listing data on our behalf. Our Supabase database is hosted in Australia (Sydney, ap-southeast-2).
- Resend — our email service provider, used to send us a notification when an application is received.
- Google (Gmail) — we receive and read application notifications in a Gmail inbox, so your application details are also present there.
These providers act as our Personal Information Processors. They are authorised to process your data only on our instructions and for the purposes described in this notice.
Your personal data is stored and processed outside the Philippines. As a supplier in the Philippines, the data you submit is stored in Australia (our Supabase database in Sydney) and accessed by the operator, who is based in Australia; email is handled by Resend, which stores email metadata, logs, and account data in the United States, regardless of sending region. These are cross-border transfers, and we take reasonable steps to ensure your data continues to receive an adequate level of protection, consistent with the DPA.
We may also disclose personal data where required by law, by a court, or by a competent government authority, or to protect our rights, users, or the public.
5. How long we keep your personal data
We keep your personal data only for as long as necessary for the purposes set out in this notice.
- If your application leads to an active listing, we retain your data for as long as the listing is active and for a reasonable period afterwards.
- If your application does not result in a listing, we retain it for up to 6 months and then securely delete it, unless we are required to keep it longer for legal reasons.
When personal data is no longer needed, we securely dispose of it.
6. How we protect your personal data
We apply organisational and technical measures appropriate to the risk, including:
- Storing application data in a database with access controls that prevent the public from reading, editing, or listing applicant records.
- Restricting administrative access to authorised personnel only.
- Transmitting data over encrypted connections.
- Limiting the personal data we collect to what is necessary.
No system can be guaranteed completely secure, but we work to protect your data and to address any incidents in line with our obligations under the DPA, including notifying you and the NPC where required.
7. Your rights
Under the Data Privacy Act, you have the right to:
- Be informed about how your personal data is processed (this notice).
- Access the personal data we hold about you.
- Object to or withdraw consent for the processing of your personal data.
- Rectify inaccurate or incomplete data.
- Erase or block your data where it is incomplete, outdated, false, unlawfully obtained, or no longer necessary — this includes asking us to remove your listing at any time.
- Data portability — to obtain a copy of your data in an electronic format.
- Be indemnified for damages arising from inaccurate, incomplete, outdated, false, or unlawfully obtained personal data.
- Lodge a complaint with the National Privacy Commission.
To exercise any of these rights, contact our DPO using the details below. We will respond within a reasonable period as required by law. We may need to verify your identity before acting on a request.
8. Changes to this notice
We may update this Privacy Notice from time to time. When we do, we will revise the “Last updated” date above and, where the changes are significant, take reasonable steps to inform you.
9. How to contact us
For any questions, requests, or concerns about your personal data or this notice, contact our Data Protection Officer:
- DPO: Martin Casey
- Email: privacy@thevowedit.ph
You also have the right to lodge a complaint with the National Privacy Commission (privacy.gov.ph) if you believe your data privacy rights have been violated.
This notice is provided for transparency about The Vow Edit’s data practices. It is not legal advice and should be reviewed by a qualified Philippine data-privacy professional before publication.