Privacy Policy

We, Prior Matter Retail Inc. (“Prior Matter”, “we”, “our”, or “us”), recognize the importance of protecting your privacy and adhere to the Philippine Data Privacy Act of 2012 (RA 10173) and its IRR. This Privacy Policy describes how we collect, use, and process your personal data in connection with your use of our website and related services (the “Services”).

By visiting or using the Services, you acknowledge that you have read and understood this Privacy Policy. We process your Personal Information only where we have a lawful basis to do so, including the performance of a contract with you, compliance with legal obligations, our legitimate interests, and, where required, your consent.

1. Roles and Legal Framework

• Personal Information Controller (PIC): Prior Matter Retail Inc. controls the collection, holding, and processing of your Personal Information.

• Personal Information Processor (PIP): Third-party entities (e.g., Shopify, logistics providers) process data on our behalf and under our instructions.

• Data Subject: You, the individual whose Personal Information is collected and processed.

• Legal Basis: This Policy operates under the DPA and upholds Transparency, Legitimate Purpose, and Proportionality across all processing activities.

2. Collection of Personal Data

We collect Personal Information about you from various sources, consistent with the nature of our e-commerce operations.


Source of Data Examples of Data Collected
Directly from You Personal & Contact Details: Name, email, phone, billing and shipping addresses.
Optional Data: Clothing size (for sizing assistance), feedback/photographs (for returns or feedback).
Automatically via Services/Technology Technical Information: IP address, location (country/city), device type, browser, OS (via cookies).
Website Activity: Saved items, pages visited, frequency of use.
From Third-Party Partners Delivery Partners (e.g., DHL, LBC): Status updates, signature, delivery location (for tracking/proof).
E-commerce & Payment Partners (Shopify, Xendit, PayPal): Personal/contact details, billing address, transaction authorization for fulfillment and payment processing (may be used for marketing if explicitly consented).

Children’s Privacy. Our Services are not intended for, and we do not knowingly collect Personal Information from, individuals under 18. If we learn that we collected Personal Information from a minor without appropriate consent, we will delete it as soon as reasonably practicable.

3. How and Why We Process Your Personal Data

We process your Personal Information only when necessary and based on a valid legal ground, primarily Contractual Obligation and Legitimate Interest.


Purpose of Processing Activity
Order Fulfillment Processing & delivering orders, updating status, processing payments (contract and legitimate interests).
Customer Service & Enquiries Responding to questions, handling enquiries, assisting with sizing (contract and legitimate interests).
Fraud Prevention & Legal Rights Detecting, preventing, and responding to fraud or violations; exercising/protecting legal rights.
Marketing & Personalization Sending product/service/news information; analyzing preferences to customize experience (consent or legitimate interests; subject to your right to object/opt-out).
Business Improvement Analyzing usage, collecting feedback, and using analytics for testing, development, and optimization.

You may opt out of marketing emails at any time via the “unsubscribe” link or by contacting privacy@priormatter.com. Opting out of marketing does not affect transactional or service-related communications.

4. How We Share and Disclose Your Personal Data

• Service Providers/Processors: Payment providers, warehouse/logistics, security/CCTV, IT software, and messaging/telephony services—acting under confidentiality as PIPs.

• International Transfers: Some providers (e.g., Shopify, Xendit, PayPal, international couriers) may process/store data outside the Philippines. We apply appropriate safeguards per the DPA.

• Delivery Data Controllers: Couriers act as independent data controllers during delivery.

• Corporate Group: Sharing within the Prior Matter group for security, optimization, and internal reporting.

• Legal Obligation & Fraud: Government/regulators, law enforcement, and fraud-prevention agencies as required by law or to establish/exercise/defend legal claims.

• Business Transaction: In a merger, acquisition, reorganization, or asset sale, data may be shared as necessary to evaluate/complete the transaction; any successor is bound by this or a materially similar policy.

5. Security and Retention

• Security Measures: We implement physical, technical, and organizational measures to safeguard your data and review these regularly.

• Retention: We retain Personal Information only as required by our retention policy, for business purposes, or as required by law.

By way of example, we generally retain:

• Order/transaction records: up to 10 years (tax/accounting and business development).

• Customer service communications: up to 5 years after resolution.

• Marketing contact details: until you withdraw consent/opt-out (then we retain minimal info to record your opt-out).

• Website logs/analytics: up to 10 months (security and service improvement).

We may retain data longer where required by law or to establish, exercise, or defend legal claims. We may request information to confirm your identity before acting on a rights request. Rights are subject to limitations/exemptions under the DPA.

6. Security & Data Breach Handling

In the event of a security incident or Personal Information breach likely to result in a risk to your rights and freedoms, we will notify the National Privacy Commission and affected Data Subjects in accordance with the DPA and its IRR.

7. Your Data Subject Rights (Philippines)

As a Data Subject, you are entitled to the full range of rights guaranteed under RA 10173 and its IRR. You can exercise these rights by contacting us.

Data Subject Right What You Can Request
Right to be Informed To be informed whether your Personal Information is being or has been processed, including purposes and methods of processing.
Right to Access To obtain reasonable access to the contents of your data, sources, recipients, and the manner of processing.
Right to Object To object to processing—particularly for direct marketing, automated processing, or profiling—unless required by legal obligation.
Right to Rectification To dispute inaccuracies or errors and have the PIC correct them immediately.
Right to Erasure or Blocking To suspend, withdraw, block, remove, or destroy data if incomplete, outdated, unlawfully obtained, or no longer necessary.
Right to Data Portability To obtain a copy of your electronic data in a structured, commonly used, machine-readable format and transmit it to another PIC.
Right to Damages To be indemnified for damages sustained due to inaccurate, incomplete, outdated, unlawfully obtained, or unauthorized use of your data.
Right to Lodge a Complaint To file a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated.
8. Contact Details

• Email for Privacy Requests: privacy@priormatter.com

• Address: Teachers Village Phase 1, Lot 18 Blk 5, Legazpi City, PH-ALB, 4500, PH

• Data Protection Officer (DPO): tina@priormatter.com