Your data

What a Keziah account keeps, why, and what you can ask for under the Philippines Data Privacy Act.

Who keeps it
Keziah Clothing, Session Road, Baguio City, for its two stores, Keziah Man and Keziah Woman. Questions and data requests: admin@keziahclothing.com.
What is kept
Your email address, and your password if you made one. Then only what you add: your bag, your favourites, the details and sizes you save, and the sample orders you place.
Your password
Stored only as a one-way hash that nobody at Keziah can read. It can only be checked when you sign in, never looked up. When you choose one, the first 5 characters of a scrambled copy of it are checked against Have I Been Pwned's public list of breached passwords; the password itself never leaves.
Why
To sign you in, and to keep your bag, favourites and details the same on every device you sign in on. It is not shared with anyone, sold, or used for ads.
Who sees it
Only you, while you are signed in. Keziah's staff cannot see customer accounts.
Signing in
With Google, Google tells this site your email address and that it is yours; your Google password never reaches it. With email, the codes that confirm your address or set a new password are sent through an email delivery service and stop working after 10 minutes.
The cookie
One cookie keeps you signed in on each device for 60 days, or until you sign out. Nothing follows you to other sites.
How long
Until you delete your account. Deleting it removes everything in it at once.
Your rights
Under the Data Privacy Act of 2012 (Republic Act No. 10173) you can ask what is kept about you, have it corrected, and have it deleted. Change your details or delete everything on your account page. For questions and data requests, email admin@keziahclothing.com. If you think your data was mishandled, you can complain to the National Privacy Commission at privacy.gov.ph.