Privacy Policy

Please read this Privacy Policy before creating an account, submitting information, placing an order, requesting a service, becoming a provider, connecting a wallet, or otherwise using Dawat.

This Policy should be read together with the Terms of Service, Disclaimer, and Corporate and Legal Information.

Dawat follows the general data-privacy principles of transparency, legitimate purpose, proportionality, fairness, accountability, and reasonable security.

Some features described in this Policy may remain under development, limited testing, geographic rollout, partner integration, or regulatory review. Dawat will process information only for features that are actually used or made available.

This Policy applies to personal data processed through Dawat’s website, application, marketplace, delivery, transportation, accommodation, directory, property, agriculture, payment, community, rewards, wallet, support, and administrative services.

It applies to customers, visitors, merchants, sellers, drivers, couriers, hosts, property providers, professionals, farmers, applicants, partners, community participants, business representatives, and other individuals whose personal data Dawat processes.

This Policy does not govern an independent third party’s own processing where that party acts as a separate personal information controller. Third parties may provide their own privacy notices and terms.

Dawat is responsible for determining why and how personal data is processed for its platform operations, except where another party independently determines the purposes and means of processing.

The verified legal operator, registration information, business address, and official privacy contact will be maintained on the Corporate and Legal Information page.

Dawat may also engage service providers that process personal data on its behalf under contractual, confidentiality, security, and data-protection obligations.

The information collected depends on your account type, location, permissions, transactions, provider role, and the features you use.

Dawat seeks to avoid collecting information that is excessive or unrelated to a legitimate purpose. Additional information may be requested when required for a particular service, safety review, legal obligation, or provider-verification process.

Certain information may qualify as sensitive personal information under Philippine law, including government identifiers, age, health-related information, legal records, and information concerning proceedings or licenses.

Dawat will process sensitive personal information only when a lawful basis exists and when reasonably necessary for identity verification, safety, fraud prevention, legal compliance, service eligibility, incident handling, or another disclosed purpose.

Users should not submit medical records, complete payment credentials, government identifiers, private keys, recovery phrases, or other highly sensitive information unless Dawat specifically requests it through an appropriate secured process.

Dawat may collect information:

• Directly from you when you register or update an account.
• When you place an order, request a ride, book a service, create a listing, submit a review, or contact support.
• From your device when you permit location, camera, notification, storage, or similar access.
• Automatically through cookies, logs, analytics, authentication, and security technologies.
• From merchants, drivers, couriers, hosts, users, or other parties participating in the same transaction.
• From payment, identity, cloud, mapping, messaging, wallet, or other service providers.
• From public records, authorized databases, public blockchain networks, or lawful verification sources.
• From partners or organizations where you have authorized the disclosure or another lawful basis applies.

Dawat may process personal data to:

• Create, authenticate, maintain, and secure user accounts.
• Verify customers, merchants, drivers, couriers, hosts, professionals, businesses, and authorized representatives.
• Process orders, bookings, deliveries, rides, service requests, listings, payments, refunds, settlements, rewards, and support requests.
• Calculate routes, estimated distances, service availability, delivery times, and applicable fees.
• Match users with relevant merchants, providers, drivers, couriers, hosts, or local services.
• Display listings, profiles, reviews, ratings, transaction history, activity, and platform content.
• Prevent fraud, impersonation, abuse, prohibited activity, payment misuse, and cybersecurity threats.
• Investigate complaints, disputes, accidents, safety reports, policy violations, and unauthorized transactions.
• Communicate confirmations, receipts, security notices, service updates, support responses, and policy changes.
• Improve platform reliability, accessibility, design, search, routing, recommendations, and service coverage.
• Develop aggregated or de-identified statistics, research, reporting, and operational insights.
• Comply with lawful requests, court orders, tax duties, regulatory obligations, and applicable laws.
• Establish, exercise, or defend legal claims and protect the rights, safety, and property of Dawat and its users.

Dawat will not process personal data in a manner incompatible with the disclosed and legitimate purposes unless another lawful basis permits the additional processing.

Depending on the circumstances, Dawat may process personal data based on one or more of the following:

• Consent: when you freely authorize a specific processing activity, such as optional location access or marketing communications.
• Contract: when processing is necessary to create an account, process a transaction, provide a requested service, or administer a provider relationship.
• Legal obligation: when processing is required by tax, corporate, consumer, employment, court, regulatory, or other applicable requirements.
• Protection of vital interests: when processing is necessary to protect life, health, or safety.
• Response to an emergency: where permitted for public order, safety, health, or another emergency purpose.
• Legitimate interests: where processing is necessary for fraud prevention, cybersecurity, service improvement, legal claims, or platform safety and those interests are not overridden by data-subject rights.
• Other grounds authorized by law: including circumstances applicable to sensitive personal information.

Where processing relies on consent, you may withdraw that consent prospectively. Withdrawal does not affect processing that was lawful before withdrawal and may prevent Dawat from providing a feature that requires the relevant information.

Location information may be used to determine service coverage, display nearby providers, match requests, calculate estimates, support navigation, monitor an active trip or delivery, prevent fraud, and respond to safety incidents.

Precise device location should be collected only when enabled, authorized, and reasonably necessary for an active feature. Depending on your device, you may control location permission through operating-system settings.

Disabling location access may prevent features such as nearby discovery, live tracking, ride matching, delivery routing, or address confirmation from working correctly.

Drivers and couriers may be required to provide location data while online, handling an active request, or using safety and navigation functionality. The applicable provider notice or agreement may contain additional details.

Dawat Nearby does not request device location merely because a page loads. You may choose precise or approximate device location, select a municipality manually, or decline. Temporary recommendation locations expire and replace the prior temporary location; Dawat does not use them to create a permanent consumer movement history.

Saved addresses, customer pickup and destination points, operational rider locations, and private property or home-business locations are access restricted. Public results honor exact, approximate, municipality-only, or hidden visibility. Transaction locations may remain with a ride, delivery, order, reservation, inquiry, safety report, or dispute when operational or legal retention is necessary.

For account security, Dawat may process a request IP transiently into a keyed, non-reversible identifier and retain a coarse signup or last-login country. Raw IP addresses and IP-derived coordinates are not retained by Dawat Nearby. IP geolocation is not used to choose nearby riders, stores, restaurants, providers, properties, tourism, or jobs, and shared public IP use is not treated as proof that users are the same person.

Dawat may verify merchants, drivers, couriers, hosts, professionals, businesses, representatives, or users before enabling sensitive or higher-risk features.

Verification may involve identity documents, selfies, photographs, business permits, vehicle records, professional credentials, contact confirmation, database checks, or review by an authorized verification provider.

Biometric information or facial-comparison technology will not be used merely because an image is submitted. Where biometric processing is introduced, Dawat should provide an additional notice explaining the technology, purpose, lawful basis, provider, retention, safeguards, and available alternatives.

Verification does not guarantee a person’s character, reliability, competence, legality, financial condition, or future conduct.

Payment information may be transmitted to or received from authorized payment gateways, banks, electronic-wallet providers, card networks, settlement providers, and other financial-service partners.

Dawat may receive transaction references, payment status, limited account details, settlement records, refund information, and fraud signals required to process or support a transaction.

Dawat does not claim that every displayed payment integration is currently live, approved, or commercially available. The integration of a named payment provider does not necessarily imply sponsorship or endorsement.

Payment providers may process information as independent personal information controllers under their own privacy notices and legal obligations.

Dawat may allow users to connect a third-party wallet or interact with blockchain-based functionality.

Public blockchains generally record information that can be viewed by anyone, including wallet addresses, transaction identifiers, token amounts, timestamps, network activity, and smart-contract interactions.

Blockchain records may be permanent or practically impossible for Dawat to modify or erase. Dawat may remove the association between a wallet and a centralized Dawat profile where appropriate, but it cannot guarantee deletion of information independently recorded on a public blockchain.

A public wallet address may become personal data when it can be linked to an identifiable individual. Users should consider the privacy implications before connecting or reusing a wallet.

Unless expressly stated otherwise, Dawat does not control or store private keys or recovery phrases. Never send them through Dawat support, messages, listings, or forms.

Dawat may use cookies, local storage, session identifiers, software development kits, pixels, and similar technologies to operate the platform.

These technologies may be used to:

• Keep users signed in and maintain sessions.
• Remember preferences and interface settings.
• Protect accounts and prevent abuse.
• Measure performance and diagnose errors.
• Understand feature usage and improve services.
• Support communications or marketing where legally permitted.

Essential technologies may be required for authentication, security, transactions, and core platform functionality. Optional analytics or marketing technologies should be subject to available consent and preference controls where required.

Dawat does not sell personal data merely for payment by data brokers. Personal data may nevertheless be disclosed when reasonably necessary to operate a service or satisfy a lawful purpose.

Dawat may disclose information to:

• Users and providers: information needed to complete an order, booking, delivery, ride, accommodation, or service request.
• Payment providers: information required for payment authorization, settlement, refunds, fraud prevention, and support.
• Technology providers: cloud hosting, databases, authentication, communications, maps, analytics, monitoring, storage, cybersecurity, and support services.
• Identity and compliance providers: information required to verify identity, business information, eligibility, risk, or legal compliance.
• Professional advisers: lawyers, auditors, accountants, insurers, consultants, and investigators subject to appropriate duties.
• Government and legal authorities: when required or permitted by valid law, legal process, court order, investigation, emergency, or regulatory obligation.
• Business transaction participants: potential or actual investors, purchasers, successors, or advisers involved in a financing, merger, acquisition, restructuring, or transfer, subject to appropriate safeguards.
• Other parties authorized by you: where you request or consent to the disclosure.

Dawat seeks to disclose only the information reasonably necessary for the relevant purpose.

A customer’s name, contact details, address, order, and delivery instructions may be shared with the merchant, driver, courier, host, or provider assigned to the transaction.

A provider’s name, profile, rating, vehicle, listing, location, and contact or operational information may be shown to the customer where needed to complete the service safely.

Users and providers may use transaction information only for the relevant service, safety, support, dispute, or legally authorized purpose. It must not be used for harassment, unsolicited marketing, surveillance, discrimination, or another unrelated purpose.

Contact-masking or in-platform communication may be introduced to reduce unnecessary disclosure where technically available.

Dawat may use cloud, communications, security, analytics, authentication, payment, wallet, or technical providers whose infrastructure or personnel are located outside the Philippines.

Where personal data is transferred or made accessible across borders, Dawat will seek appropriate contractual, organizational, and technical safeguards consistent with applicable privacy requirements.

Cross-border processing does not remove Dawat’s responsibility to protect personal data under applicable Philippine law.

Dawat retains personal data only for as long as reasonably necessary for the purpose for which it was collected or for a compatible lawful purpose.

Retention periods may depend on:

• The duration of an account or provider relationship.
• Pending orders, refunds, disputes, claims, or investigations.
• Tax, accounting, corporate, labor, and regulatory requirements.
• Fraud prevention, platform safety, and cybersecurity needs.
• Applicable limitation periods for legal claims.
• The sensitivity, amount, and risk associated with the data.
• Technical backup, recovery, and deletion processes.

Different records may have different retention periods. Dawat does not represent that every transaction record is automatically kept for exactly five years or that every profile record is deleted immediately upon account closure.

When retention is no longer justified, personal data will be deleted, anonymized, securely destroyed, or otherwise placed beyond ordinary use, subject to technical and legal limitations.

Public-blockchain information is governed by the operation of the relevant network and may remain publicly available even after a Dawat account is closed.

Dawat uses reasonable and appropriate organizational, physical, and technical measures designed to protect personal data against accidental or unlawful destruction, alteration, disclosure, access, misuse, and loss.

Measures may include:

• Access controls and role-based permissions.
• Authentication and account-security controls.
• Encryption in transit and at rest where appropriate.
• Secure configuration and secrets management.
• Logging, monitoring, backups, and recovery procedures.
• Vulnerability management and software updates.
• Personnel confidentiality and access restrictions.
• Provider diligence and contractual safeguards.
• Incident response and breach-management procedures.

Security measures evolve according to the sensitivity of the data, available technology, operational context, risk, and reasonable cost. Dawat does not claim that any system is completely secure or immune from human error, malicious activity, or technical failure.

Users are responsible for protecting their passwords, authentication methods, devices, email accounts, connected wallets, and recovery information.

Dawat will assess suspected security incidents involving personal data and take reasonable steps to contain, investigate, document, remediate, and prevent recurrence.

Where notification is required under applicable law, Dawat will notify the National Privacy Commission and affected individuals within the applicable period and in the required manner.

Notices may describe the nature of the incident, potentially affected information, likely consequences, steps taken, recommended protective measures, and available contact channels.

Users should promptly report suspected account compromise, impersonation, phishing, unauthorized access, or misuse through Dawat’s official support channels.

Dawat may use automated tools to support matching, routing, estimated pricing, ranking, search, fraud detection, account security, provider discovery, content moderation, and recommendations.

Automated outputs may be based on location, availability, transaction history, service area, ratings, risk indicators, preferences, or technical information.

Dawat should not make a solely automated decision that produces a significant legal effect without providing the safeguards required by applicable law.

Where appropriate, users may request information, raise a concern, correct inaccurate input, or request human review through the available support process.

Dawat may send promotional messages where consent or another lawful basis exists. Marketing communications may relate to services, merchants, promotions, rewards, community initiatives, or platform updates.

You may withdraw from optional marketing communications through the unsubscribe mechanism, account setting, device preference, or available support channel.

You may continue to receive necessary transactional, administrative, safety, security, and legal communications even after opting out of marketing.

Dawat does not authorize providers to use transaction contact information for unrelated marketing without an appropriate lawful basis.

Dawat is not intended to allow children to independently enter transactions or use age-restricted services where they lack legal capacity.

A minor may use an eligible service only with the involvement, permission, and supervision required by law and the applicable service rules.

Dawat may request age or guardian verification and may restrict or remove an account where the user does not satisfy eligibility requirements.

A parent or legal guardian who believes a child has submitted personal data without appropriate authorization may contact Dawat to request review and appropriate action.

Subject to the Data Privacy Act, its implementing rules, and applicable exceptions, you may exercise the following rights:

These rights are not absolute. A request may be limited or denied where the law permits continued processing, including for legal obligations, public interest, fraud prevention, security, investigations, contractual claims, or the rights of other people.

Privacy requests may be submitted through the official privacy or support channel identified on Dawat’s Corporate and Legal Information page.

A request should clearly state:

• Your name and Dawat account details.
• The right you wish to exercise.
• The information or processing activity involved.
• Relevant dates, orders, listings, or transactions.
• Your preferred method of receiving a response.

Dawat may require reasonable identity verification before disclosing, correcting, deleting, exporting, or restricting personal data. This protects users against unauthorized requests.

An authorized representative may be required to provide proof of authority and identity.

Dawat will respond within the period required by applicable law, subject to the complexity and validity of the request.

Where account-deletion functionality is available, you may submit a request through account settings or the official support channel.

Account deletion may remove or de-identify profile information from ordinary platform use, but some information may remain where retention is necessary for:

• Outstanding transactions, refunds, or settlements.
• Fraud, abuse, safety, or security investigations.
• Tax, accounting, regulatory, or legal obligations.
• Dispute resolution or defense of legal claims.
• Protection of another person’s rights.
• System backups pending scheduled deletion.

Content relating to another user’s transaction may remain in that user’s records where legally and operationally necessary.

Dawat cannot delete or alter information independently recorded on a public blockchain.

Dawat may contain links to or integrations with independent websites, wallets, payment providers, maps, messaging tools, identity services, social networks, and other platforms.

Independent third parties may collect and process personal data under their own privacy policies. Dawat does not control their independent privacy practices.

Users should review the privacy notice and permissions of a third-party service before creating an account, providing information, authorizing access, or connecting a wallet.

Dawat may update this Privacy Policy to reflect changes in its services, technology, providers, data practices, security controls, or legal obligations.

The revised Policy will display an updated date. Material changes may also be communicated through the website, application, email, account notification, or another available channel.

Where consent is legally required for a new processing purpose, Dawat will request consent rather than treating continued use as consent automatically.

Questions, privacy requests, security concerns, and complaints may be submitted through the official channels identified on the Corporate and Legal Information page.

Please do not include passwords, private keys, recovery phrases, complete payment credentials, or unnecessary sensitive information in an ordinary email or support message.

You may also file a complaint with the National Privacy Commission where you believe your rights under Philippine data-protection law have been violated.

• Terms of Service
• Disclaimer and Risk Disclosures
• Corporate and Legal Information
• Public Whitepaper