Legal
Privacy Policy
Last updated: August 14, 2026 | Aligned with RA 10173 — Data Privacy Act of the Philippines
GCLT Transport & Trucking Services, Inc. is committed to protecting the privacy and security of your personal data in compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.
1. Data Controller Information
GCLT Transport & Trucking Services, Inc. is the Personal Information Controller (PIC) responsible for your personal data.
Address: #17 25th St. East Bajac-Bajac, Olongapo City, Philippines
Tel: (047) 222-4065 | Email: gclttruckingservices@yahoo.com
2. Personal Data We Collect
We collect the following categories of personal data:
| Data Category | Specific Data Points |
|---|
| Identity Data | Full name, date of birth |
| Contact Data | Email address, mobile phone number |
| Account Data | Password (encrypted), account role |
| Booking Data | Pickup/delivery addresses, cargo type, weight, dimensions, preferred time slot, truck quantity |
| Location Data | Geolocation coordinates (when you use "Use My Location" — only with your explicit consent) |
| Payment Data | Transaction ID, payment method (Stripe or COD). Card details are processed directly by Stripe; we do not store card numbers. |
| Technical Data | IP address, browser type, device type, pages visited, session duration (via server logs) |
| Uploaded Files | Proof-of-payment receipt images (for COD bookings) |
3. Purpose and Legal Basis of Processing
We process your personal data for the following purposes:
- Booking fulfillment: To process quote requests, confirm bookings, dispatch trucks, and issue invoices. (Legal basis: Contractual necessity)
- Account management: To create and maintain your user account, verify your identity, and provide customer support. (Legal basis: Contractual necessity)
- Email notifications: To send booking confirmations, status updates, invoices, and service announcements. (Legal basis: Legitimate interest; consent for marketing)
- Age verification: To ensure you meet the 18+ registration requirement. (Legal basis: Compliance with terms)
- Security: To detect and prevent fraud, unauthorized access, and bot activity (via Cloudflare Turnstile). (Legal basis: Legitimate interest)
- Legal compliance: To comply with Philippine tax, transport, and record-keeping laws. (Legal basis: Legal obligation)
4. Data Retention
- Account data: Retained for as long as your account is active. Deleted within 30 days of a verified account deletion request.
- Booking records: Retained for 7 years in compliance with BIR requirements (RA 8792, E-Commerce Act).
- Payment records: Retained for 5 years per BSP and AMLC regulations.
- Server logs: Retained for 90 days, then purged.
5. Third-Party Data Processors
We share your data only with processors who help us deliver our services, bound by data processing agreements:
| Processor | Purpose | Location |
|---|
| Firebase (Google) | Authentication, database, file storage | USA (adequacy safeguards) |
| Mailjet (Sinch) | Transactional email delivery | EU (GDPR compliant) |
| Stripe | Payment processing | USA (PCI-DSS compliant) |
| Cloudflare | Bot protection (Turnstile) | USA |
| OpenStreetMap / Nominatim | Map display and address geocoding | EU (open-source, anonymized) |
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
6. Your Rights Under RA 10173
As a data subject, you have the following rights which you may exercise by contacting us:
- Right to be Informed: To know how your data is collected and used (this Policy).
- Right to Access: To obtain a copy of the personal data we hold about you.
- Right to Rectification: To correct inaccurate or incomplete data. You can update most data directly via your Dashboard → Profile.
- Right to Erasure / Blocking: To request deletion or blocking of your personal data when it is no longer necessary for the stated purpose, subject to legal retention requirements.
- Right to Data Portability: To receive your data in a structured, machine-readable format.
- Right to Object: To object to processing based on legitimate interests.
- Right to Lodge a Complaint: To file a complaint with the National Privacy Commission (NPC) at www.privacy.gov.ph.
To exercise these rights, email us at:
gclttruckingservices@yahoo.com with subject "Privacy Request — [Your Full Name]". We will respond within
15 business days.
7. Security Measures
We implement the following technical and organizational measures to protect your data:
- All data in transit is encrypted using TLS/HTTPS.
- Passwords are hashed using Firebase Authentication (bcrypt-based).
- Firestore security rules restrict access to authenticated users and their own data only.
- Payment card data is never stored on our servers — processed directly by Stripe (PCI-DSS Level 1).
- Admin access is protected by role-based access control.
8. Cookies and Tracking
We use session cookies for authentication (managed by Firebase Auth). We do not use third-party advertising or tracking cookies. You may disable cookies in your browser settings, but this may affect Platform functionality.
9. Changes to this Policy
We may update this Privacy Policy as our practices change or as required by law. We will notify registered users by email and update the "Last updated" date above. Continued use of the Platform after changes constitutes acceptance.
10. Contact Our Data Protection Officer
For privacy concerns or requests:
Data Protection Officer
GCLT Transport & Trucking Services, Inc.
#17 25th St. East Bajac-Bajac, Olongapo City, Philippines
Email: gclttruckingservices@yahoo.com
Tel: (047) 222-4065