Privacy policy

Asia Smarthome Corporation, trading as ASHCo

Last updated: August 1, 2026

About This Privacy Policy

Asia Smarthome Corporation, trading as ASHCo (“ASHCo,” “we,” “us,” or “our”), operates this website and online store, including its content, features, tools, products, and related services (collectively, the “Services”).

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you:

  • visit or use the Services;

  • create or use an account;

  • inquire about or purchase our products;

  • request delivery, assembly, installation, repair, return, exchange, or warranty assistance;

  • communicate with us; or

  • otherwise interact with ASHCo.

This Privacy Policy should be read together with our Terms of Service and other applicable policies. If there is a conflict between this Privacy Policy and the Terms of Service concerning the collection, processing, or disclosure of personal information, this Privacy Policy will govern that subject matter.

By using the Services, you acknowledge that you have read and understood this Privacy Policy. Where consent is required by law, we will obtain consent through an appropriate mechanism. Consent is not required where processing is otherwise permitted by law, including when processing is necessary to perform a contract, comply with a legal obligation, or pursue a legitimate interest that is not overridden by your fundamental rights and freedoms.

Philippine Data-Privacy Framework

ASHCo processes personal information in accordance with the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

The processing of personal information is guided by the principles of transparency, legitimate purpose, and proportionality. 

In this Privacy Policy:

“Personal information” means information from which an individual can be identified or which can reasonably and directly ascertain an individual’s identity.

“Processing” includes collecting, recording, organizing, storing, updating, retrieving, using, disclosing, transferring, or otherwise handling personal information.

“Personal Information Controller” or “PIC” means the person or organization that controls the collection and processing of personal information.

“Personal Information Processor” or “PIP” means a person or organization that processes personal information on behalf of a PIC.

For information collected and used by ASHCo for its own business purposes, ASHCo acts as the PIC. Third-party providers may act as PIPs or as independent controllers for processing governed by their own privacy policies.

Personal Information We Collect

The information we collect depends on how you interact with the Services and the transaction or service involved.

A. Contact and delivery information

We may collect:

  • name;

  • billing and shipping address;

  • delivery address;

  • telephone or mobile number;

  • email address;

  • recipient and contact-person details; and

  • delivery instructions and access information.

Delivery and access information may include building restrictions, elevator details, loading-area instructions, parking information, floor number, stairway conditions, and other information needed to arrange safe delivery, assembly, or installation.

B. Account information

If you create an account, we may collect:

  • username;

  • password or authentication information;

  • account preferences and settings;

  • saved addresses;

  • wishlist or saved-item information; and

  • information needed to secure and administer the account.

We do not intend to collect sensitive personal information through ordinary account registration. Please do not submit sensitive personal information unless it is necessary for a specific request and we have provided an appropriate means of collecting it.

C. Transaction and product information

We may collect information about:

  • products viewed, selected, saved, added to a cart, or purchased;

  • quotations, orders, invoices, and payment status;

  • returns, exchanges, cancellations, refunds, repairs, and warranty requests;

  • delivery, assembly, and installation services;

  • product preferences and specifications;

  • customer reviews or feedback; and

  • communications and records relating to a transaction.

D. Payment information

Payments may be processed by third-party payment providers. We may receive information such as payment method, transaction reference, payment status, billing details, and limited payment-card information.

Unless expressly stated otherwise by the relevant payment provider, ASHCo does not need to receive or retain your complete payment-card number, card-verification code, or online-banking credentials. You should review the payment provider’s privacy notice and terms for information about its processing activities.

E. Communications

We may collect information contained in your communications with us, including inquiries, complaints, requests, reviews, attachments, photographs, delivery records, and other supporting documents.

Please avoid sending sensitive personal information through ordinary email or other unsecured channels unless we specifically request it and provide a suitable method.

F. Device and usage information

When you use the Services, we or our service providers may collect:

  • IP address;

  • browser and device type;

  • operating system;

  • network information;

  • approximate location derived from technical information;

  • pages, products, and features viewed;

  • referring and exit pages;

  • dates and times of activity;

  • search and interaction information; and

  • cookies and similar technology identifiers.

We use these information for security, analytics, website administration, service improvement, and, where permitted, marketing.

Sources of Personal Information

We may collect personal information:

  • directly from you when you browse, create an account, place an order, request a quotation, communicate with us, or submit information;

  • automatically through the Services, including through cookies and similar technologies;

  • from Shopify and other service providers that support the Services;

  • from payment providers, couriers, installers, logistics providers, and other transaction partners;

  • from affiliates or business partners;

  • from publicly available sources; and

  • from another person when that person provides information necessary to arrange delivery, installation, payment, or another service.

If you provide another person’s personal information, you should ensure that you are authorized to do so and that the person has been informed, where required by law.

Purposes and Lawful Bases for Processing

We process personal information only for declared, specified, and legitimate purposes. Depending on the circumstances, our lawful basis may include your consent, the performance of a contract, compliance with a legal obligation, protection of vital interests, the performance of a public-authority function, or our legitimate interests, provided that those interests are not overridden by your fundamental rights and freedoms.

We may process personal information for the following purposes:

A. Providing and administering the Services

We use personal information to:

  • operate, maintain, and improve the website and online store;

  • create and administer customer accounts;

  • provide quotations and product information;

  • process and fulfill orders;

  • arrange payment, delivery, assembly, installation, storage, repair, return, exchange, refund, and warranty services;

  • communicate about orders, accounts, products, and services;

  • provide customer support; and

  • remember preferences and saved items.

B. Security, fraud prevention, and risk management

We may process information to:

  • authenticate accounts and transactions;

  • detect, prevent, and investigate fraud, unauthorized activity, abuse, and security incidents;

  • protect customers, personnel, property, and the public;

  • secure the website, payment process, and business systems; and

  • enforce our Terms of Service and other policies.

C. Communications and relationship management

We use personal information to respond to inquiries, complaints, feedback, and requests, and to maintain our customer and business relationships.

D. Marketing and promotions

Subject to applicable law and your choices, we may use contact and transaction information to send promotional communications, product announcements, offers, invitations, and other marketing materials.

You may opt out of promotional email communications by using the unsubscribe link in the relevant message or by contacting us. Opting out of marketing will not prevent us from sending non-promotional communications necessary for an order, account, payment, delivery, warranty, complaint, security, or other transaction-related matter.

We will not use personal information for a new or materially different purpose without providing the information required by law and, where necessary, obtaining consent.

E. Legal and regulatory purposes

We may process and disclose personal information when reasonably necessary to:

comply with laws, regulations, subpoenas, warrants, court orders, or lawful

government requests;

  • comply with tax, accounting, consumer-protection, reporting, or regulatory requirements;

  • establish, exercise, or defend legal claims;

  • investigate suspected violations of law, these Terms, or our policies; or

  • protect our rights, property, Services, customers, personnel, or other persons.

Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, local storage, and similar technologies to:

  • operate the website and shopping cart;

  • remember preferences;

  • maintain account and checkout security;

  • understand website traffic and usage;

  • measure the effectiveness of communications and promotions; and

  • personalize content or advertising where permitted.

You may adjust your browser or device settings to refuse or delete cookies. Some website features, including account and checkout functions, may not operate properly if necessary cookies are disabled.

Where required, we will provide an appropriate notice or consent mechanism for non-essential cookies and similar technologies.

Disclosure of Personal Information

We may disclose personal information to the following recipients, subject to applicable law, contractual safeguards, and the purpose for which the information was collected:

  • Shopify and technology providers that host, operate, secure, or support the website and online store;

  • payment processors and financial institutions that process or verify payments;

  • couriers, freight providers, installers, contractors, and logistics providers that fulfill delivery, assembly, installation, repair, return, or warranty services;

  • IT, cloud-storage, cybersecurity, analytics, communications, and customer-support providers that process information on our behalf;

  • marketing and advertising providers, where permitted and consistent with your preferences;

  • affiliates and corporate-group entities, where necessary for business administration or service delivery;

  • professional advisers, insurers, auditors, and legal representatives, where reasonably necessary;

  • government authorities, law-enforcement agencies, courts, and regulators, when required or permitted by law; and

  • successors or transaction parties in connection with a merger, acquisition, reorganization, financing, sale of assets, insolvency, or similar business transaction.

We do not disclose personal information to unrelated third parties for their own independent marketing purposes unless permitted by law and properly disclosed to you.

Shopify and Other Service Providers

The Services are hosted or supported by Shopify and may involve the processing of personal information by Shopify and other third-party providers.

Information submitted through the Services may be transmitted to service providers located in the Philippines or other countries, depending on the technology and services used. These providers may process personal information under their own terms, privacy policies, and legal obligations, or as processors acting on ASHCo’s behalf.

Shopify’s processing is also governed by Shopify’s applicable privacy materials, which you should review directly. 

Cross-Border Transfers

Some service providers may store or process personal information outside the Philippines.

When personal information is transferred across borders, ASHCo will apply reasonable and appropriate safeguards required by applicable Philippine law, including contractual, organizational, nd technical safeguards appropriate to the nature and risks of the processing.

Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • provide and administer the Services;

  • complete transactions and provide after-sales support;

  • maintain business and transaction records;

  • comply with legal, tax, accounting, and regulatory obligations;

  • resolve complaints and disputes; and

  • establish, exercise, or defend legal claims.

The retention period depends on the type of information, the purpose of processing, the nature of the transaction, applicable legal requirements, and whether a dispute or investigation is ongoing.

When personal information is no longer necessary, we will delete, securely dispose of, anonymize, or otherwise process it in accordance with applicable law and our retention procedures.

Security

We maintain reasonable organizational, physical, and technical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, unauthorized access, and other unlawful processing.

Safeguards may include access controls, authentication, security policies, service-provider controls, monitoring, backup and recovery measures, staff procedures, and other measures appropriate to the risks involved.

No method of transmission or storage is completely secure. You should not send sensitive or confidential information through unsecured channels. If we determine that a personal-data breach requires notification under applicable law, we will take the required response and notification measures.

Your Rights as a Data Subject

Subject to the conditions and limitations under the Data Privacy Act and applicable regulations, you may have the right to:

  • be informed whether your personal information is being processed;

  • receive information about the personal information processed, the purposes and methods of processing, recipients or classes of recipients, the identity and contact details of the PIC, and applicable retention periods;

  • access personal information that we process about you;

  • request correction of inaccurate or incomplete personal information;

  • object to processing, including processing for direct marketing, subject to lawful exceptions;

  • withdraw consent where processing is based on consent;

  • request blocking, removal, or destruction where permitted by law;

  • request data portability where applicable; and

  • lodge a complaint with the National Privacy Commission.

These rights are not absolute. For example, we may continue processing information when necessary for a contract, legal obligation, lawful claim, security purpose, or other basis recognized by law.

How to Exercise Your Rights

To request access, correction, deletion, blocking, objection, withdrawal of consent, portability, or other assistance concerning your personal information, contact us using the following details:

  • your full name;

  • contact details;

  • a description of your request;

  • relevant order, account, or transaction information; and

  • documents reasonably needed to verify your identity or authority.

We may verify your identity before acting on a request. If you appoint an authorized representative, we may require proof of the representative’s authority and may separately verify your identity.

Complaints

If you have a concern about our processing of personal information, please contact us first. We will acknowledge and investigate the complaint through an accessible internal process.

If we cannot resolve the concern, you may lodge a complaint with the National Privacy Commission or pursue another remedy available under Philippine law.

Third-Party Websites and Links

The Services may contain links to websites, platforms, social-media pages, payment pages, or services operated by third parties.

Those third parties have their own privacy policies, security practices, and terms. ASHCo is not responsible for the privacy practices or content of websites or services that it does not control.

Information posted in public or semi-public areas, including third-party social-media platforms, may be visible to others and may be used by those platforms in accordance with their own policies. Consider carefully whether to post personal information in a public area.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, Services, technology, legal requirements, or regulatory guidance.

The revised version will be posted on this website with an updated “Last updated” date. We will provide additional notice or obtain consent when required by law, particularly where a change materially affects the purposes, methods, scope, or recipients of processing.

Contact Us

For questions, requests, or concerns about this Privacy Policy or the processing of your personal information, contact:

Asia Smarthome Corporation, trading as ASHCo
124 Jupiter Street
1209 Makati City
Philippines

Telephone: +63 920 840 2733
Email: hello@ashco.ph

For administrative or legal concerns:

Telephone: +63 920 809 1762
Email: business@ashco.ph