Privacy Policy

1. Scope and operator

Cardinal Cuisine Food Concepts Inc., located in Parañaque City, Metro Manila, Philippines, is the personal information controller for MOW. This policy applies to information received through Facebook and Instagram Messenger, forms, telephone, email, our website, order records, consultations, and customer support.

Meta Platforms and other services you use to contact us may separately process information under their own privacy policies.

2. Information we may collect

Depending on how you use MOW, we may collect:

• Identity and contact information: name, Facebook or Instagram profile information made available to us, Messenger-scoped identifier, mobile number, email address, and emergency or authorized contact.
• Delivery and transaction information: delivery address and instructions, ordered meal program, schedule, payment status or reference, invoices, discounts, and customer-service history. We do not intentionally store complete payment-card details.
• Meal preferences: food preferences, disliked ingredients, cultural or religious restrictions, portion preferences, dietary goals, and feedback about meals.
• Dietary and health-related information: allergies, intolerances, medical dietary restrictions, diabetes or cardiac-diet requirements, ketogenic preferences, rehabilitation-related dietary instructions, medications relevant to food safety, body measurements, and information you voluntarily provide for personalization.
• Optional consultation information: information you choose to share with a Registered Nutritionist Dietitian (“RND”) when purchasing the separate premium consultation add-on.
• Communications and technical information: messages, responses, attachments, dates and times of interactions, consent records, and basic website device, browser, security, and usage information.

3. Why and how we use information

We process personal data only for declared, legitimate, and proportionate purposes, including to:

• respond to questions and determine whether MOW can accommodate a request;
• create, personalize, prepare, package, deliver, and support meal subscriptions;
• manage orders, schedules, payments, refunds, complaints, and food-safety concerns;
• coordinate an optional RND consultation when you purchase and consent to that add-on;
• send service notices, delivery updates, renewal reminders, and requested information;
• send offers or marketing messages when permitted and provide an easy way to opt out;
• improve menus, customer support, safety, and service performance using aggregated or appropriately protected information;
• detect abuse, protect our customers and systems, establish or defend legal claims, and comply with law.

Our lawful grounds may include your consent, steps taken at your request before entering a contract, performance of our service agreement, compliance with legal obligations, protection of vital interests in appropriate circumstances, and legitimate business interests that do not override your rights.

4. Dietary and health-related information

Health-related information is treated as sensitive personal information under Philippine law. We request it only when reasonably necessary to assess meal suitability, avoid ingredients, personalize a program, support food safety, or provide an optional professional consultation.

Where consent is the appropriate basis, we will seek specific and informed consent. You may withdraw consent, although doing so may prevent us from safely providing a personalized or medically restricted meal program. We do not sell health-related information, use it for unrelated advertising profiles, or guarantee weight loss, laboratory improvement, treatment, rehabilitation, or other clinical outcomes.

5. When information may be shared

We limit access to people and organizations that need information for the stated purpose. These may include:

• authorized Cardinal Cuisine and MOW staff involved in customer service, kitchen operations, billing, quality assurance, and management;
• the assigned RND or authorized nutrition professional, but only for the consultation add-on or another purpose you approve;
• delivery personnel, who receive only information reasonably necessary to complete delivery;
• technology and communications providers such as Meta, website hosting, workflow automation, business email, databases, security, analytics, and customer-support services;
• payment, accounting, legal, insurance, audit, or professional advisers as reasonably necessary;
• government authorities or other parties where disclosure is required by law, necessary for food safety, or needed to protect rights and safety.

Service providers are expected to process information only for authorized purposes and apply appropriate confidentiality and security safeguards. We do not sell or rent subscriber personal data.

6. Retention and security

We retain information only as long as reasonably needed for the purposes described above, including active subscriptions, customer support, food-safety documentation, accounting, dispute resolution, legal compliance, and the establishment or defense of claims. Retention periods vary by record type. Information that is no longer required is securely deleted, anonymized, or disposed of.

We use reasonable organizational, physical, and technical safeguards appropriate to the nature of the information. These may include access controls, role-based permissions, confidentiality duties, secure credentials, system monitoring, backups, vendor review, and controlled disposal. No transmission or storage method is completely risk-free; please avoid sending unnecessary sensitive information through social-media messaging.

Cross-border processing

Some technology providers may process or store information outside the Philippines. When this occurs, we take reasonable steps to require appropriate safeguards and continued protection consistent with applicable law.

7. Your privacy rights and choices

Subject to applicable law, you may request information about our processing and exercise rights including access, correction, objection, erasure or blocking, data portability where applicable, withdrawal of consent, and filing a complaint with the National Privacy Commission.

You may stop promotional messages at any time by replying STOP or UNSUBSCRIBE. Service-related communications necessary for an active order may continue.

For deletion instructions, visit our Data Deletion page. We may ask for reasonable verification before acting on a request to protect your information from unauthorized access or deletion.

Children

MOW is not designed for children to subscribe independently. If a meal program involves a minor, a parent or legal guardian should communicate with us and provide any required authorization.

8. Updates and contact

We may update this policy when our services, practices, providers, or legal obligations change. The current version and effective date will remain available on this page. Material changes will be communicated through an appropriate channel when required.

For questions, privacy requests, or concerns, contact: