top of page

Privacy Policy

1. WHO WE ARE

This website (tusokusok.com) is owned and operated by The 4101 Food Corporation ("4101," "we," "us," or "our"), a corporation duly organized and existing under the laws of the Republic of the Philippines, with SEC Registration No. 2026060255191-00 and registered office at 11th Floor One Corporate Center, Julia Vargas Ave. cor. Meralco Ave., Ortigas Center, San Antonio, Pasig City, NCR 1600, Philippines. Tusok Usok is a brand and trade name of The 4101 Food Corporation.

 

We act as the Personal Information Controller (PIC) for the personal data described in this Policy, as that term is defined under Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC").

 

We respect your privacy and are committed to processing your personal data lawfully, fairly, and transparently.

2. SCOPE OF THIS POLICY

This Policy explains how we collect, use, disclose, store, and protect personal data when you:

 

  • browse or interact with tusokusok.com;

  • place an online order for food, catering, or related products;

  • submit an event booking, catering inquiry, or reservation request;

  • subscribe to our updates or promotional communications;

  • contact us through any form, chat, email address, or phone number published on this website; or

  • apply for employment or a supplier engagement through this website.

 

This Policy does not apply to third-party websites, applications, or platforms that we may link to. Their own privacy policies govern their processing.

3. PERSONAL DATA WE COLLECT

3.1 Information You Provide Directly

For online orders:

 

  • Full name

  • Mobile number and/or landline

  • Email address

  • Delivery address and delivery instructions

  • Order contents, quantities, and special requests

  • Preferred delivery or pickup date and time

  • Payment reference details (see Section 3.4)

 

For event bookings, catering, and reservations:

 

  • Full name and, where applicable, the name of the organization or the couple/celebrant

  • Contact number and email address

  • Event date, time, venue address, and event type

  • Estimated guest count

  • Budget range and menu preferences

  • Name and contact details of your coordinator, planner, or on-site point of contact, where you provide them

  • Dietary restrictions, allergen information, and religious or medical dietary requirements, where you choose to disclose them

 

For inquiries, feedback, and complaints:

 

  • Name, contact details, and the content of your message

 

For careers and supplier inquiries:

 

  • Name, contact details, résumé or company profile, and any other information you voluntarily submit

3.2 Sensitive Personal Information

Where you disclose allergen, dietary, medical, or religious dietary requirements in connection with an order or event booking, this may constitute sensitive personal information under Section 3(l) of the DPA. We collect this information only where you voluntarily provide it, and we process it solely to prepare your order safely and accurately. By submitting this information through our forms, you give your express consent to our processing of it for that purpose, consistent with Section 13 of the DPA.

 

You are not required to disclose this information. If you prefer not to submit it through the website, you may communicate it to us directly before your event or delivery.

3.3 Information Collected Automatically

When you visit tusokusok.com, our service providers and we may automatically collect:

 

  • IP address and approximate geographic location

  • Browser type, device type, and operating system

  • Pages viewed, time spent, and referring website

  • Cookie identifiers and similar tracking data

 

This information is collected in aggregate or pseudonymous form for analytics, performance, and security purposes.

3.4 Payment Information

We do not collect, process, or store your full credit card, debit card, or bank account numbers on our systems. Online payments are processed by third-party payment service providers ([PAYMENT PROCESSORS — e.g., PayMongo, Xendit, GCash, Maya]), each of which maintains its own privacy policy and security standards. We receive only limited transaction data such as the payment reference number, transaction status, amount, and the last four digits of the payment instrument.

4. HOW WE USE YOUR PERSONAL DATA AND OUR LAWFUL BASIS
We process your personal data for the following purposes and on the following lawful criteria under Sections 12 and 13 of the DPA:

TABLE

5. MARKETING COMMUNICATIONS

We will send you marketing communications only where you have opted in, or where you are an existing customer and the communication relates to similar products or services. Every marketing message will include a clear method of opting out. You may also withdraw consent at any time by contacting our Data Protection Officer using the details in Section 13. Withdrawing consent will not affect transactional messages relating to an order or booking you have already placed.

6. DISCLOSURE AND SHARING OF PERSONAL DATA

We do not sell your personal data. We share it only as follows:

 

a. Service providers and processors. We engage third parties who process personal data on our behalf and under our instructions, including:

 

  • Website hosting and site infrastructure ([Wix.com Ltd.])

  • Payment service providers ([PAYMENT PROCESSORS])

  • Delivery and logistics partners ([DELIVERY PARTNERS], where applicable)

  • Analytics and marketing platforms ([e.g., Google Analytics, Meta])

  • Cloud storage, email, and productivity providers ([e.g., Google Workspace])

 

Each processor is bound by a data sharing or outsourcing agreement requiring confidentiality and security measures consistent with Sections 43 to 46 of the IRR of the DPA.

 

b. Event partners. For catering engagements, we may share limited coordination details (event date, venue, headcount, contact person, setup requirements) with your appointed event coordinator, venue, or other suppliers where necessary to deliver the service.

 

c. Legal and regulatory disclosures. We may disclose personal data where required by law, court order, subpoena, or lawful request from a government agency, including the Bureau of Internal Revenue, the National Privacy Commission, local government units, and health authorities.

 

d. Corporate transactions. In the event of a merger, acquisition, reorganization, or sale of assets, personal data may be transferred to the relevant party, subject to this Policy and applicable law.

7. CROSS-BORDER TRANSFERS

Some of our service providers, including our website host and certain analytics and communications platforms, maintain servers outside the Philippines. Where personal data is transferred abroad, we remain accountable for it under Section 21 of the DPA and take reasonable steps to ensure that the recipient provides a comparable level of protection, including through contractual commitments.

8. COOKIES AND SIMILAR TECHNOLOGIES

tusokusok.com uses cookies and similar technologies to:

 

  • keep your session and shopping cart functional (strictly necessary);

  • remember your preferences (functional);

  • measure traffic and site performance (analytics); and

  • deliver and measure advertising, where applicable (marketing).

 

Strictly necessary cookies are required for the site to operate. You may accept, decline, or manage non-essential cookies through our cookie banner or your browser settings. Disabling certain cookies may limit site functionality, including the ability to complete an order.

9. RETENTION

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

TABLE

10. SECURITY MEASURES
We implement reasonable and appropriate organizational, physical, and technical security measures to protect personal data against accidental or unlawful destruction, alteration, disclosure, and unauthorized access, including:
 

  • encryption of data in transit via TLS/SSL across the website;

  • role-based access controls limiting personal data access to authorized personnel with a legitimate need;

  • confidentiality undertakings from employees, consultants, and contractors;

  • vetting of third-party processors and execution of data processing agreements;

  • regular review of access logs and security configurations; and

  • an internal breach response procedure.

 
No method of transmission or storage is completely secure. In the event of a personal data breach that meets the notification criteria under NPC Circular No. 16-03, we will notify the National Privacy Commission and affected data subjects within seventy-two (72) hours of knowledge of the breach.

11. YOUR RIGHTS AS A DATA SUBJECT

Under Sections 16 and 18 of the DPA, you have the right to:

 

  1. Be informed whether your personal data is being or has been processed, and to receive information about that processing;

  2. Access your personal data and obtain a reasonable copy of it;

  3. Object to the processing of your personal data, including for direct marketing, automated processing, or profiling;

  4. Rectify inaccurate or erroneous personal data;

  5. Erase or block personal data that is incomplete, outdated, false, unlawfully obtained, or no longer necessary for the purposes for which it was collected;

  6. Data portability — to obtain a copy of your data in an electronic or structured format commonly used, where processing is by electronic means;

  7. Damages — to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data; and

  8. Lodge a complaint with the National Privacy Commission.

 

To exercise any of these rights, contact our Data Protection Officer using the details in Section 13. We will respond within a reasonable period, and in any case within thirty (30) days of receipt of a valid request. We may require proof of identity before acting on a request. Certain rights are qualified by law — for example, we may be unable to erase records we are legally required to retain for tax or regulatory purposes.

12. CHILDREN'S PRIVACY

Our website and services are not directed at children under eighteen (18) years of age, and we do not knowingly collect their personal data. Where a minor's data is required in connection with an event booking, it must be provided by a parent or legal guardian. If you believe we have inadvertently collected a minor's personal data, contact our Data Protection Officer and we will delete it promptly.

13. CONTACT US

For questions, requests, or complaints regarding this Policy or your personal data:

 

Data Protection Officer - The 4101 Food Corporation

DPO NAME: Gabriel De los Reyes

Email: 4101.gabriel@gmail.com

Telephone: 09177124080

Address: One Corporate Center, Ortigas Center, Pasig City, Philippines

 

If you are not satisfied with our response, you may lodge a complaint with:

 

National Privacy Commission 5th Floor, Delegation Building, PICC Complex Vicente Sotto Avenue, Pasay City, Metro Manila 1307 Email: complaints@privacy.gov.ph Website: www.privacy.gov.ph

14. CHANGES TO THIS POLICY

We may update this Policy from time to time to reflect changes in our operations, technology, or legal obligations. The revised version will be posted on this page with an updated "Last Updated" date. Where changes are material, we will provide additional notice through the website or by email. Your continued use of tusokusok.com after the effective date of any revision constitutes acknowledgment of the updated Policy.

 

 

 

This Policy is governed by and construed in accordance with the laws of the Republic of the Philippines.

bottom of page