Privacy Policy

Bahandi Gas Corporation ("Bahandi Gas," "we," "us," or "our") is an LPG refilling and distribution company operating the Bahandi Gas ERP system (the "Platform"). We are committed to protecting the privacy of our employees, authorized users, and the individuals whose information we process in the course of our operations.

This Privacy Policy explains how we collect, use, store, and protect personal and operational data when you access or use the Platform. By using the Platform, you consent to the practices described in this policy.

1. Information We Collect

We collect the following categories of information:

• Account information: Full name, email address, role, assigned company/supplier, and authentication credentials provided when you are invited to the Platform.
• Usage and session data: Login timestamps, session duration, online time tracking, and activity logs used for operational metrics and security monitoring.
• Operational data: Inventory transactions, production records, deliveries, orders, collections, payments, and other records you create or interact with in the Platform.
• Customer information: Names, contact details, delivery addresses, and transaction history of customers served by our dealers and retailers, as entered by authorized users.
• Technical data: Device identifiers, IP addresses, and browser information collected automatically when you access the Platform.

2. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the Bahandi Gas ERP Platform and related services.
• Authenticate users, manage roles and permissions, and enforce company-level (supplier) data isolation.
• Track inventory, production, deliveries, finances, and approvals to run our refilling plant operations.
• Maintain audit trails and data control logs for security, accountability, and regulatory compliance.
• Monitor system usage, detect unauthorized activity, and investigate security incidents.
• Fulfill legal obligations, including tax reporting and government permit requirements.
• Communicate with you about your account, operational updates, and security alerts.

3. Legal Basis for Processing

We process personal data based on: (a) the performance of our employment or service contracts; (b) our legitimate interests in operating a safe and efficient LPG business; (c) compliance with legal and regulatory obligations; and (d) your consent, where applicable. Sensitive information is processed only when necessary and with appropriate safeguards.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Affiliated companies: Regasco, Solid R, Madayaw, and Bahandi Gas entities under the Bahandi Gas umbrella, where access is necessary for shared operations.
• Service providers: Hosting, analytics, and support vendors who process data on our behalf under confidentiality obligations.
• Government authorities: When required by law, regulation, or lawful government request.
• Business partners: Dealers, retailers, and logistics providers involved in fulfilling customer orders.

Access between company profiles is governed by role-based controls. Only authorized personnel (e.g., administrators, owners) may access data outside their assigned company.

5. Data Retention

We retain personal and operational data for as long as your account is active and for the period necessary to comply with legal, tax, and regulatory record-keeping requirements. Transactional and financial records are generally retained for a minimum of ten (10) years. Deletion requests are honored where permitted, while certain records may be retained to satisfy legal obligations or for legitimate business purposes.

6. Data Security

We implement technical, organizational, and physical safeguards to protect your information, including encrypted authentication, role-based access controls, row-level security, audit logging, and restricted administrative access. Access to the Platform requires authentication, and sensitive actions (such as record deletion) are gated by additional verification and logged for accountability.

7. Your Privacy Rights

Depending on applicable law, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to legal retention requirements.
• Object to or restrict certain processing of your data.
• Withdraw consent where processing is based on consent.
• Receive a copy of your data in a structured, machine-readable format.

To exercise these rights, contact your system administrator or our privacy contact below. We will respond within a reasonable timeframe and in accordance with applicable law.

8. International Transfers

The Platform is hosted on cloud infrastructure that may store and process data in locations outside the Philippines. Where data is transferred internationally, we take reasonable steps to ensure it is protected in accordance with this Privacy Policy and applicable data protection laws.

9. Children's Privacy

The Platform is a business tool intended for authorized employees, partners, and representatives. We do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us so we can remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. We will post the updated version on the Platform and revise the "Last updated" date. Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

For questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact the Bahandi Gas Corporation administrator through the Platform or via our official company channels.