In brief
Mr. P, operating the Mr. P TAKANE restaurant and website at the address above, is responsible for the personal information collected through the restaurant's online services. Questions and requests concerning personal information may be sent to mrptakane@gmail.com. The Contact page and linked Facebook Messenger page provide additional means of contacting the restaurant, but sensitive identity documents should not be sent through public social-media messages.Mr. P TAKANE · Operated by Mr. P
Sta. Cruz St., Sumpong, Malaybalay City, Bukidnon 8700, PhilippinesPublic email: mrptakane@gmail.com · Phone: (0967) 578 7821
Official Facebook pageWho is responsible for your data?
Mr. P, operating the Mr. P TAKANE restaurant and website at the address above, is responsible for the personal information collected through the restaurant's online services. Questions and requests concerning personal information may be sent to mrptakane@gmail.com. The Contact page and linked Facebook Messenger page provide additional means of contacting the restaurant, but sensitive identity documents should not be sent through public social-media messages.
What we collect and why
We process only the information reasonably relevant to the following activities:
| Activity | Information involved | Purposes and basis |
|---|---|---|
| Website operation and security | Request timestamps, IP addresses, browser/device and session signals, access/security events | Serve the site, prevent abuse, protect accounts and maintain reliable service; legitimate interests and applicable legal duties |
| Reservations and Dine-In | Name, contact details, selected date, time, party size, table selections, selected menu items, requests, booking reference, status/history | Process a reservation or requested service, prevent conflicts, contact the guest and maintain necessary records; contract or steps requested before a contract, plus applicable legal obligations |
| Take Out | Name, contact details, ordered items/quantity, pickup selection, price, fulfillment status and history | Process and fulfill pickup orders, handle disputes and support customers; contract and legal obligations |
| Payment handling | Selected payment method, transaction amount/reference, uploaded payment images and the payment-review decision | Match and manually verify transfers, detect mistakes/fraud, reconcile sales and meet financial/recordkeeping obligations; contract, legal obligations and appropriate legitimate interests |
| Contact and complaints | Name, email, optional phone number, selected topic and message | Answer inquiries, resolve complaints, keep accountability records; steps requested by the person, legitimate interests or legal obligations as appropriate |
| Private service messaging | Message text and permitted attachments, sender/recipient context, service reference and timestamps | Communicate about a booking, order, complaint or payment; contract and legitimate interests |
| Authorized staff administration | Staff identity, role, approved-device/session records, passkey-related public authentication credentials, security verification and audit events | Restrict access, operate the service and protect financial/customer records; legitimate interests, employment obligations where relevant, and legal obligations |
Required checkout fields are identified in the relevant form. Optional messages, dietary notes and requests should contain only what is necessary. When booking for another person, supply their information only if you are authorized to do so and inform them about this Notice. Do not submit passwords, one-time codes, complete bank statements, unrelated identity documents or other unnecessary confidential information.
Information about allergies, disability or health can be sensitive. Share only what is needed for us to consider a request. A general checkout acknowledgement does not authorize unrelated use of sensitive information; specific processing of such information must have an applicable lawful basis and appropriate access safeguards.
Payments and accounts
Bank or QR payment evidence is reviewed by authorized personnel. Uploading an image is not confirmation that a payment has been received. We do not claim to operate an online card gateway unless one is actually shown as an enabled service. A customer may use a temporary, scoped session to access an eligible booking or order; that is not necessarily a conventional verified-email account. Expiry of browser access does not delete a transaction record.
Who may receive information?
Access is limited to authorized restaurant personnel and service providers who need it for hosting, security, communications, storage or transaction support, subject to applicable contractual and legal protections. A financial institution or transfer service may independently process a customer's payment under its own rules. We may disclose information where lawfully required by competent authorities or needed to protect lawful rights. We do not sell customer personal data.
Specific production provider and cross-border processing disclosure: N/A. This must accurately identify the actual service-provider categories and any relevant international processing before the Notice is published; do not guess geographic locations from software package names.
Links to Facebook or mapping services take you to independently operated platforms with their own privacy practices. Visiting an external link is different from an embedded tracker.
Retention and deletion
We keep each category of data only for its legitimate, specified purpose, as required by applicable recordkeeping rules, or while reasonably necessary to resolve disputes and protect rights. Final periods and triggers are as follows:
| Record category | Approved retention period or trigger |
|---|---|
| Contact inquiries and complaints | N/A |
| Reservations, orders and accounting/transaction records | N/A |
| Submitted payment proofs and related review history | N/A |
| Private messages and attachments | N/A |
| Customer/staff sessions, device and security records | N/A |
| Backups and recovery copies | N/A |
We securely delete, de-identify or restrict information once retention is no longer justified, subject to applicable legal preservation requirements. Financial and security audit records may need to remain intact even when individual access sessions have expired. Deleting a browser draft is not the same as deleting a server record, and restored backups must be handled according to the applicable retention and erasure procedure.
Your rights
Subject to applicable law, you may request information about processing, access to your data, correction of inaccuracies, objection or restriction where available, erasure/blocking when justified, portability where applicable, or lodge a complaint with the National Privacy Commission. Requests should be sent to mrptakane@gmail.com. We may reasonably verify identity and authority before disclosing or changing another person's booking or payment record. We will explain any lawful reason for retaining information rather than promising deletion of legally required records.
Security, incidents and changes
We use technical and organizational controls intended to limit unauthorized access and preserve confidentiality, integrity and availability, but no online service is risk-free. Where legally required, reportable incidents will be handled under applicable notification rules. If this Notice materially changes, we will publish the revised version and give additional notice where required. Changes do not retroactively replace the text of a policy previously accepted with a transaction.