DATA PRIVACY POLICY OF COSMIC.COM.PH

Effective Date: January 1, 2023

Cosmic.com.ph ("Company") is committed to protecting the privacy of individuals whose personal data is processed by the Company. This Data Privacy Policy ("Policy") sets out the policies and procedures for the collection, use, processing, storage, retention, and disposal of personal data on the Company's website.

1. Definitions

a. "Personal data" refers to any information relating to an identified or identifiable natural person, including but not limited to name, address, contact details, date of birth, and identification documents.

b. "Processing" refers to any operation or set of operations performed on personal data, such as collection, recording, organization, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, blocking, erasure, or destruction.

c. "Data subject" refers to the natural person to whom the personal data relates.

2. Collection of Personal Data

a. The Company collects personal data from data subjects only when necessary for the specific purpose or purposes identified to the data subject.

b. The Company obtains the consent of the data subject prior to the collection, processing, or storage of personal data, except when the processing is necessary for the performance of a contract, compliance with a legal obligation, or protection of the vital interests of the data subject or another person.

c. The Company informs the data subject of the purpose or purposes for which the personal data will be processed, the categories of personal data to be collected, and the recipients or categories of recipients of the personal data.

3. Use and Processing of Personal Data

a. The Company uses personal data only for the specific purpose or purposes identified to the data subject.

b. The Company does not process personal data in a manner incompatible with the purpose or purposes for which it was collected.

c. The Company ensures that personal data is accurate, complete, and up-to-date.

d. The Company implements appropriate technical and organizational measures to ensure the security and confidentiality of personal data.

4. Retention and Disposal of Personal Data

a. The Company retains personal data only for as long as necessary for the fulfillment of the purpose or purposes for which it was collected.

b. The Company disposes of personal data in a secure manner when it is no longer needed for the purpose or purposes for which it was collected.

5. Rights of Data Subjects

a. The data subject has the right to be informed whether personal data relating to him or her are being processed, and if so, the purpose or purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipients to whom the personal data have been or will be disclosed.

b. The data subject has the right to object to the processing of personal data, including the right to object to processing for direct marketing purposes.

c. The data subject has the right to access and request the correction or deletion of personal data.

6. Transfer of Personal Data

a. The Company ensures that any transfer of personal data outside of the Philippines is made in accordance with the requirements of Philippine data protection laws.

b. The Company ensures that any third-party recipient of personal data outside of the Philippines is subject to a comparable level of data protection as required by Philippine data protection laws.

7. Complaints and Remedies

a. The data subject has the right to file a complaint with the National Privacy Commission ("Commission") for any violation of this Policy.

b. The Commission has the power to impose administrative fines on the Company for violations of this Policy.

c. Any person who suffers damage as a result of any violation of this Policy by the Company has the right to seek damages in court.

8. Implementation and Compliance

a. The Company has appointed a Data Protection Officer who is responsible for ensuring compliance with this Policy.

b. The Company conducts regular training and awareness programs for employees and contractors who handle personal data.

c. The Company conducts periodic audits to assess compliance with this Policy.

9. Updates to this Policy

a. The Company reserves the right to update this Policy from time to time.

b. Any changes to this Policy will be posted on the Company's website.

c. The data subject is advised to review this Policy periodically for any updates or changes.

10. Contact Information

a. Any inquiries or concerns regarding this Policy may be directed to the Company's Data Protection Officer.

b. The Data Protection Officer may be contacted at [Insert contact details].

This Policy is effective as of the date set forth above and supersedes any prior policies or statements regarding the collection, use, processing, storage, retention, and disposal of personal data by the Company.