Nextdrop Privacy Policy

This Privacy Policy applies to the Nextdrop website, mobile app, marketplace, wallet, partner program, affiliate/referral features, payment services, delivery services, merchant tools, and related services.

1. Introduction

Nextdrop values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share, transfer, disclose, retain, and protect your personal data when you access or use the Nextdrop website, mobile platform, services, marketplace, partner program, affiliate/referral features, payment services, delivery services, wallet or credit features, merchant tools, and related tools.

By creating an account, logging in, placing an order, subscribing, joining as a partner, using referral links, uploading documents, requesting payouts, or otherwise using Nextdrop, you agree to the collection and processing of your personal data as described in this Privacy Policy.

This Privacy Policy is prepared in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and issuances of the National Privacy Commission.

2. Personal Information We Collect

A. Account Information

• Full name
• Mobile number
• Email address
• Username and password
• Profile information
• Account type, such as customer, partner, affiliate, merchant, seller, or admin user

B. Identity, KYC, and Verification Information

• Government-issued ID
• Selfie or verification image
• Date of birth
• Address
• KYC or identity verification details
• Business registration documents, permits, tax information, or merchant documents, if applicable
• Bank account, payout, or settlement details, if applicable
• Risk, fraud, sanctions, and compliance verification results where applicable

C. Sensitive Personal Information

• Government-issued identification numbers and copies
• Identity verification records
• Financial account, bank, or payout details where applicable
• Health, biometric, or other sensitive personal information only when voluntarily submitted, required for verification, required by law, or necessary for a specific lawful purpose

D. Transaction Information

• Orders placed
• Products purchased
• Subscription plan
• Referral or affiliate transactions
• Commission, payout, or settlement records
• Payment status
• Wallet balance, account credits, vouchers, points, or rewards
• Refund requests, disputes, chargebacks, and delivery or pickup details

E. Payment and Wallet Information

• Payment method used
• Payment reference number
• Bank transfer details, if applicable
• Unified Wallet or Nextdrop wallet transaction records
• Dragonpay, card payment, e-wallet, or other payment gateway transaction references
• Chargeback, refund, reversal, and fraud-screening records

We do not store full card numbers unless required and permitted by payment gateway standards. Payment processing may be handled by accredited third-party payment processors.

F. Delivery and Shipping Information

• Recipient name
• Delivery address
• Contact number
• Delivery instructions
• Courier tracking details
• Pickup or in-house delivery information

G. Technical Information

• IP address
• Device type
• Browser type
• Operating system
• Login timestamps
• Cookies and similar tracking technologies
• System logs
• Pages visited and platform activity
• Fraud-detection signals, risk indicators, and security events where applicable

H. Communications

• Customer support messages
• Complaints and inquiries
• Chat or email correspondence
• Feedback, survey responses, and reports
• Uploaded support files, proof of payment, screenshots, and dispute evidence

3. How We Use Your Personal Information

• To create, verify, and manage your Nextdrop account
• To process orders, payments, subscriptions, wallet transactions, commissions, settlements, withdrawals, and refunds
• To deliver products through couriers, pickup, or in-house delivery
• To manage affiliate, referral, partner, and merchant programs
• To verify identity and prevent fraud, unauthorized transactions, abuse, chargebacks, money laundering risks, and platform misuse
• To conduct KYC, merchant verification, payout review, risk scoring, sanctions screening, and compliance monitoring where applicable
• To provide customer support and respond to complaints, disputes, chargebacks, or inquiries
• To send order updates, payment confirmations, delivery notices, service announcements, and security alerts
• To improve platform functionality, security, user experience, risk controls, and product offerings
• To comply with legal, tax, accounting, regulatory, audit, and law-enforcement requirements
• To send marketing, promotional, or business-related communications, subject to your consent where required
• To enforce our Terms and Conditions and protect the rights of Nextdrop, users, merchants, partners, affiliates, and the public

4. Legal Basis for Processing

• Your consent
• Fulfillment of a contract or transaction
• Compliance with legal obligations
• Legitimate business interests
• Protection of lawful rights and interests
• Prevention of fraud, abuse, unauthorized activity, security incidents, and regulatory risk
• Establishment, exercise, or defense of legal claims

5. Processing of Sensitive Personal Information

Nextdrop may process sensitive personal information, including government-issued IDs, verification documents, identity records, financial account details, and other regulated personal information, only when necessary for lawful purposes such as identity verification, KYC review, merchant onboarding, payout processing, fraud prevention, dispute handling, compliance with legal obligations, protection of rights, or where the user has provided consent.

Access to sensitive personal information is limited to authorized personnel, service providers, and parties with a legitimate need to process the information for approved purposes.

6. Automated Processing, Fraud Detection, and Risk Review

Nextdrop may use automated or semi-automated tools, rules, models, system logs, and manual review processes to detect suspicious activity, unauthorized transactions, fake accounts, referral abuse, voucher abuse, chargeback risk, merchant risk, payment anomalies, and security threats.

Such processing may affect account activation, transaction approval, payout release, wallet activity, settlement timing, commission validation, dispute resolution, or platform access. Users may contact Nextdrop through the privacy contact or support channel to request review of concerns relating to automated or risk-based decisions.

7. Sharing of Personal Information

We may share your personal information with:

• Payment gateways and financial service providers for payment processing, refunds, chargebacks, and fraud screening
• Courier and logistics partners for delivery and tracking
• Merchants, sellers, and suppliers for order fulfillment, returns, refunds, and customer support
• Affiliate or referral system providers for commission tracking and program administration
• IT, hosting, cloud, cybersecurity, analytics, communications, and system service providers for platform operations
• KYC, identity verification, risk review, and compliance service providers where applicable
• Professional advisers such as auditors, accountants, consultants, or lawyers
• Government agencies, regulators, courts, law-enforcement bodies, or other parties when required by law, lawful order, or legitimate legal process
• Business partners only when necessary to provide the service or when you have given consent

We require third-party service providers to process your data only for authorized purposes and to apply appropriate confidentiality and security safeguards.

8. Cross-Border Data Transfers

Nextdrop may store, process, access, or transfer personal information outside the Philippines when using cloud hosting, payment, analytics, communication, verification, cybersecurity, customer support, or other service providers located in other jurisdictions.

When personal information is transferred across borders, Nextdrop will use reasonable safeguards required by applicable data protection laws, such as contractual protections, access controls, security measures, and restrictions on unauthorized processing.

9. Cookies and Tracking Technologies

Nextdrop may use cookies, analytics tools, tracking pixels, device identifiers, and similar technologies to:

• Keep users logged in
• Remember preferences
• Analyze website traffic
• Improve platform performance
• Detect suspicious activity and security risks
• Support marketing, attribution, and retargeting campaigns where permitted

You may disable cookies in your browser settings, but some platform features may not work properly.

10. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes stated in this Privacy Policy, comply with legal and regulatory requirements, resolve disputes, enforce agreements, prevent fraud, maintain business records, process refunds, validate commissions, support merchant settlements, and comply with tax, accounting, audit, and legal retention requirements.

Transaction, tax, accounting, KYC, fraud-prevention, dispute, payout, settlement, and legal records may be retained for the period required or permitted by applicable laws and legitimate business purposes.

11. Data Security

We implement reasonable organizational, physical, and technical security measures to protect your personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

These measures may include:

• Account authentication
• Password protection
• Access controls
• Encryption where applicable
• System monitoring
• Audit logs
• Secure hosting practices
• Administrative access restrictions
• Vendor security review where applicable
• Incident response and breach assessment procedures

However, no online platform is completely secure. Users are responsible for keeping their login credentials confidential.

12. Breach Notification and Incident Response

If Nextdrop becomes aware of a data breach or security incident involving personal information, it will assess the incident and take reasonable steps to contain, investigate, remediate, and document the matter.

Where required by the Data Privacy Act, National Privacy Commission issuances, or other applicable laws, Nextdrop will notify affected data subjects and/or the appropriate regulator within the required period, including within seventy-two (72) hours from knowledge of or reasonable belief that a notifiable personal data breach has occurred, where applicable, and provide relevant information about the nature of the breach, affected data, possible consequences, and measures taken or recommended.

13. Your Rights as a Data Subject

Under the Data Privacy Act, you have rights over your personal information, including the right to:

• Be informed
• Access your personal data
• Correct inaccurate or outdated data
• Object to processing
• Withdraw consent, where applicable
• Request deletion or blocking of your data
• File a complaint with the National Privacy Commission
• Claim damages, where legally applicable
• Data portability, where applicable

To exercise your rights, you may contact us at:

Email: support@nextdrop.com.ph or the designated privacy contact officially appointed by the company

Address: Quezon Avenue 1520 JR Bldg, Mezzanine Floor, 1520 Quezon Ave, South Triangle, Diliman, Quezon City, 1100 Metro Manila

Nextdrop will acknowledge a complete and verified data subject request within five (5) business days and will act on the request or provide a written response within thirty (30) calendar days from receipt of the verified and complete request. If the request is complex, legally restricted, or requires additional verification or third-party records, Nextdrop will inform the requesting data subject of the reason for any extension or partial action, subject to applicable law.

14. Marketing Communications

We may send you promotional offers, product updates, partner opportunities, affiliate updates, and marketing messages.

You may opt out of marketing communications at any time by using the unsubscribe option, updating your account preferences, or contacting us.

Important service-related messages, such as payment confirmations, order updates, payout notices, security alerts, compliance notices, and account notices, may still be sent even if you opt out of marketing messages.

15. Children's Privacy

Nextdrop is intended for users who are at least 18 years old or of legal age to enter into binding transactions. We do not knowingly collect personal information from minors without proper consent from a parent or legal guardian.

16. Account Security

You are responsible for maintaining the confidentiality of your username, password, OTP, and account credentials. Any activity performed through your account will be presumed authorized unless you immediately report unauthorized access to Nextdrop.

17. Account and Data Deletion Requests

You may request account deletion or deletion of applicable personal data through the privacy contact, support@nextdrop.com.ph, or any in-app deletion mechanism made available by Nextdrop. Nextdrop will acknowledge a complete and verified request within five (5) business days and will act on the request or provide a written response within thirty (30) calendar days from receipt of the verified and complete request, unless a longer period is permitted by law or reasonably required due to complexity, lawful retention, pending transaction, dispute, fraud review, tax requirement, or compliance obligation. Deletion requests are subject to identity verification and lawful retention requirements, including transaction records, tax records, payment references, refund records, KYC records, fraud prevention logs, dispute records, settlement records, and other legally required documentation.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, regulatory expectations, security practices, or business operations.

The updated Privacy Policy will be posted on the Nextdrop website or app with the updated effective date. Continued use of Nextdrop after changes means you accept the updated Privacy Policy, to the extent permitted by law.

19. Contact Us

For privacy-related concerns, requests, or complaints, you may contact:

• Company: Unified Products and Services, Inc.
• Email: support@nextdrop.com.ph
• Mobile/Landline: (02) 8998-0991
• Address: Quezon Avenue 1520 JR Bldg, Mezzanine Floor, 1520 Quezon Ave, South Triangle, Diliman, Quezon City, 1100 Metro Manila

This page is provided as the public privacy policy URL for Nextdrop app store and Play Store submissions.