Privacy Notice

The Personal Information Controller (PIC) is Eagold Marketing (Oracle’s Herbal Products), Philippines. For any privacy concern, or to exercise your rights below, contact our Data Protection Officer:

Data Protection Officer
Email: privacy@oraclesherbal.com

• Identity & contact: full name, mobile number, email address, delivery address.
• Account: login credentials (stored securely by our authentication provider), your referral link, and your sponsor/placement in the network.
• Transactions: orders, product selections, payment method, payment reference numbers, and proof-of-payment images you upload.
• Earnings & payouts: commission records, wallet balance, and payout account details you provide.
• Verification (only if required for payouts): a reference to a government-issued ID (we store only the last few digits, never a full ID scan) and, where applicable, your TIN.
• Support: messages and any screenshots you send us.
• Technical: limited device/usage information needed to secure and operate the service.

• To create and manage your membership and account.
• To process orders, payments, deliveries, commissions, and payouts.
• To operate the referral network, including showing your uplines limited information about their team (see Section 4).
• To provide customer support and send transactional notices (order and payment updates, support replies).
• To comply with legal, tax, and regulatory obligations.
• To protect the service against fraud and abuse.

Our lawful bases include your consent, the performance of our contract with you as a member, our legal obligations, and our legitimate interests in running and securing the business.

Oracle’s Herbal Products is a referral/network business. Your direct sponsor and uplines can see limited, non-sensitive information about you for team management: your name, profile photo, membership status, join date, and mobile number. We do not expose your home address, email, TIN, ID reference, or internal notes to other members. When you share your personal referral link, your name and photo are visible to people who open that link.

We use reputable service providers to run the platform, some located outside the Philippines. Your data may be processed in Singapore and the United States under appropriate safeguards:

• Supabase (database & file storage) — Singapore (ap-southeast-1).
• Vercel (application hosting).
• Resend (transactional email) — United States.

These transfers are made only as necessary to provide the service, and we require our processors to protect your data to a comparable standard.

We keep your data for as long as your membership is active and as needed for the purposes above. Certain records (e.g., transactions, commissions, tax documents) are retained for the period required by law even after account closure. When no longer needed, data is securely deleted or anonymized.

Under RA 10173 you have the right to:

• be informed about how your data is processed;
• access a copy of your personal data;
• correct inaccurate or outdated data;
• object to or withdraw consent for certain processing;
• request erasure or blocking of your data, subject to legal retention;
• data portability; and
• lodge a complaint and be indemnified for damages.

To exercise any of these, email our DPO at privacy@oraclesherbal.com. We will respond within a reasonable period.

We use encryption in transit, access controls, row-level security on our database, private storage for sensitive documents, and other measures to safeguard your data. No system is perfectly secure, but we work to protect your information and to respond promptly to incidents.

In the event of a personal-data breach that may pose a real risk to your rights, we will notify the National Privacy Commission and affected data subjects in accordance with NPC rules (generally within 72 hours of knowledge of the qualifying breach).

We may update this Privacy Notice from time to time. The “last updated” date above reflects the current version. Material changes will be communicated through the service.