Policy · updated 2026

privacy.

Mise (operated by Cirene Chua, sole proprietor) collects and processes personal information in compliance with the Philippine Data Privacy Act (RA 10173). This page explains what we collect, why, and what you can do about it.

1. What we collect

When you submit a form on this site — the contact form, the food-costing or diagnosis tools, the supplier directory, the feasibility check, or the book pre-order — we may collect:

Your name, email address, and phone number.
Information you voluntarily provide about your business or concept.
Your IP address, country, browser, and referring page (for security and rate-limiting; not used to identify you personally).
For payment-required tools: your GCash reference number, which we use only to verify your payment.

2. Why we collect it

To respond to your inquiries and deliver the report or tool you requested.
To send you the Mise newsletter, if you opted in.
To improve our tools by analyzing anonymized usage patterns.
To comply with tax and regulatory requirements where applicable.

3. How long we keep it

Lead information stays in our system as long as the relationship could plausibly be commercial — typically 24 months after last contact. Submission data tied to a paid report is kept for at least 5 years for tax record-keeping. You can request earlier deletion (see § 6).

4. Who we share it with

We do not sell your data. We share it only with:

Supabase (database hosting) — stores your submissions on encrypted infrastructure.
Resend (email delivery) — sends transactional emails on our behalf.
Kit (newsletter) — if you opted in to the newsletter.
Vercel (hosting) — handles requests to this site.

5. Cookies + tracking

We don't use advertising cookies. We use minimal first-party storage (session and theme preferences) and anonymous tool-usage events that don't identify you personally.

6. Your rights under the DPA

The Philippine Data Privacy Act gives you the right to:

Know what data we hold about you.
Correct inaccurate data.
Object to processing or withdraw consent.
Request deletion of your data.
Lodge a complaint with the National Privacy Commission.

To exercise any of these rights, email hello@mise-group.com with the subject line “Privacy request”. We respond within 15 business days.

7. Security

We use industry-standard encryption in transit (HTTPS) and at rest (encrypted database). No system is 100% secure — if we ever discover a breach that materially affects you, we'll notify you and the NPC as required by law.

8. Changes to this policy

If we update this policy in ways that meaningfully change how we use your information, we'll let you know via email (if you're subscribed) or via a banner on the site.

9. Contact

Data privacy questions: hello@mise-group.com.

This document is a plain-language summary of our practices. It is not a substitute for legal advice. If you have a specific concern about how we've handled your data, please contact us first so we can resolve it directly.