Privacy Policy

Effective May 10, 2026

Norven respects your privacy. This Policy explains what personal information we collect, how we use it, who we share it with, and your rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

Who Controls Your Data

The data controller is Norven, contactable at norvenph@gmail.com. If you have questions about how your information is handled, write to us at that address.

What We Collect

When you book a session through Norven, we collect:

Identity: name, phone number (including WhatsApp).
Service details: your booking location (address), preferred date and time, type of session, and any notes you provide (pressure preference, sore spots, allergies, etc.).
Health information you disclose: medical conditions, pregnancy, allergies, or other contraindications you tell us about. This is sensitive personal information under RA 10173 and is treated with extra care.
Payment information: handled directly by Stripe, our payment processor. Norven does not see or store your full card details; we only see the last 4 digits and transaction status.
Communications: messages you send us via email, WhatsApp, or our website.
Website usage data: anonymized analytics (page views, device type, country) collected via Netlify hosting logs and any analytics scripts loaded by our site.

How We Use It

We use your information to:

Fulfill your booking — dispatch a therapist, confirm timing, ensure they have the information needed for a safe and effective session.
Process your payment and issue receipts or refunds.
Communicate with you about your booking, follow up after the session, and respond to your questions or complaints.
Improve our service, vet therapists, and refine our matching based on aggregated feedback.
Comply with legal obligations, including tax records and any inquiries from the Department of Health, the National Privacy Commission, or law enforcement.

Who We Share It With

We share your information only with parties who need it to deliver your session:

The therapist assigned to your session receives your first name, contact number, location, time, and any health notes you have provided.
Our wholesale supply partner (the agency dispatching the therapist) receives the same details as the therapist for coordination.
Stripe processes your payment and is subject to its own privacy terms (stripe.com/privacy).
Hosting and infrastructure providers (Netlify, our domain registrar) may process technical data such as IP addresses for the purpose of serving the website.

We do not sell, rent, or trade your personal information. We do not share your data with advertisers.

How Long We Keep It

We keep your booking records for as long as needed to provide the service and meet our legal obligations under Philippine tax and consumer-protection law (typically up to 5 years). Health information is kept for the duration of the active service relationship and deleted on request, except where required by law.

You may request deletion of your records at any time by emailing norvenph@gmail.com.

Your Rights Under RA 10173

As a data subject, you have the right to:

Be informed about what we collect and why.
Access the personal information we hold about you.
Correct any inaccurate or outdated information.
Object to the processing of your data for purposes you have not consented to.
Erase or block your personal information when there is no longer a legal or contractual basis to keep it.
Data portability — receive a copy of your data in a structured, commonly used format.
Lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph if you believe your rights have been violated.

To exercise any of these rights, email norvenph@gmail.com. We respond within 15 working days.

Security

We use industry-standard security measures to protect your data, including encrypted transmission (HTTPS), payment tokenization via Stripe, and restricted access to internal systems. No method of transmission or storage is 100% secure, but we take reasonable precautions and notify affected users in the event of a confirmed breach as required by RA 10173.

International Transfers

Some of our service providers (notably Stripe, which is US-based, and Netlify, which is also US-based) may process your data outside the Philippines. These providers comply with international privacy frameworks. By using Norven you consent to such transfers, provided the data is protected to standards equivalent to RA 10173.

Children

Norven is intended for adults aged 18 and over. We do not knowingly collect information from minors. If you believe a minor has provided information to us, please contact norvenph@gmail.com and we will delete it.

Cookies and Analytics

Our website may set basic functional and analytics cookies to remember your session and measure aggregated usage. These do not personally identify you. You can disable cookies in your browser settings, though some site features may not work as expected.

Changes to This Policy

We may update this Policy. The "Effective" date at the top reflects the most recent revision. Material changes will be communicated by email to recent customers or via a prominent notice on norvenph.com at least 7 days before taking effect.

Contact

Privacy questions or requests: norvenph@gmail.com