Privacy policy
Last Updated: October 2, 2026
Introduction
This Privacy Policy explains how KHM Megatools Corp. ("we," "our," or "us") collects, uses, shares, and protects your personal information when you visit khmtools.com.ph (the "Site"), buy from us, or contact us through our shop, phone, email, Viber, or Messenger.
We are a Philippine company. We process personal information in accordance with Republic Act No. 10173 – the Data Privacy Act of 2012, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). For customers outside the Philippines, additional rights may apply under the laws of your location (see "Customers Outside the Philippines" below).
Who Is Responsible for Your Information
KHM Megatools Corp. is the personal information controller for the information described in this policy.
KHM Megatools Corp.
940 Blumentritt Rd, Sampaloc, Manila, 1008 Metro Manila, Philippines
Data Protection Officer: support@khmtools.com.ph (please use the subject line "Data Privacy")
Information We Collect
A. Information You Give Us
- Name, email address, and phone number
- Billing and delivery address
- Company name and contact person (for company orders and Purchase Orders)
- Payment confirmation details, such as proof of bank transfer (we do not store full card numbers)
- Account login details
- Messages, inquiries, warranty claims, and support tickets
- Documents you send for regulated purchases (for example, DENR permit documents for chainsaws)
B. Information Collected Automatically
- IP address, browser type, and device information
- Pages viewed, products browsed, and search terms
- Referral sources and site interaction data, such as clicks and navigation
We collect this through cookies, pixels, and analytics tools. See "Cookies & Tracking Technologies" below.
C. Information from Third Parties
- Payment processors and banks (payment confirmation)
- Couriers and logistics partners (delivery status)
- Advertising and social media platforms, when you interact with our pages or ads
Why We Use Your Information and Our Legal Basis
Under the Data Privacy Act, we process personal information only when we have a lawful basis. We rely on the following:
- To fulfill a contract with you — processing and delivering orders, issuing quotations and receipts, handling returns, refunds, exchanges, and warranty claims.
- To comply with the law — keeping tax and accounting records, issuing official receipts, and meeting regulatory requirements (for example, DENR requirements for chainsaw sales).
- For our legitimate interests — preventing fraud, securing the Site, and improving our website, products, and customer service, provided these interests do not override your rights.
- With your consent — sending marketing messages and promotions, and using non-essential cookies. You may withdraw consent at any time.
We do not collect sensitive personal information (such as health, religious, or government ID numbers) unless a specific transaction legally requires it, and then only with your consent or as permitted by law.
Cookies & Tracking Technologies
We use cookies and similar technologies to make the Site work, analyze performance, personalize content, and support advertising. You can manage non-essential cookies through our cookie banner or your browser settings. Disabling some cookies may affect features such as login or checkout. For details, see our Cookies Policy.
Who We Share Your Information With
We share personal information only as needed for the purposes above, with:
- Shopify, our e-commerce platform provider
- Banks and payment processors
- Couriers, cargo, and logistics partners
- Brand authorized service centers, when you file a warranty claim
- Analytics, marketing, and advertising service providers
- IT, hosting, and customer support vendors
- Government agencies, when required by law
Our service providers may process your information only on our instructions and must protect it. We do not sell your personal information.
Transfers Outside the Philippines
Some of our service providers, including Shopify, store or process data outside the Philippines. When this happens, we take reasonable steps, including contractual safeguards, to make sure your information receives a level of protection consistent with the Data Privacy Act.
How Long We Keep Your Information
We keep personal information only as long as needed for the purpose it was collected, then dispose of it securely. In general:
- Order, invoice, and receipt records are kept for the period required by Philippine tax and accounting laws.
- Warranty and support records are kept for the duration of the warranty period and any related claim.
- Marketing contact details are kept until you unsubscribe or withdraw consent.
How We Protect Your Information
We use organizational, physical, and technical security measures to protect personal information, including encrypted connections (SSL), restricted access on a need-to-know basis, and PCI-compliant payment processors. No system is completely secure, but we work to protect your information and review our measures regularly.
Data breaches: If a personal data breach occurs that may cause you serious harm, we will notify the National Privacy Commission and affected customers as required by law, generally within 72 hours of discovery.
Your Rights as a Data Subject
Under the Data Privacy Act, you have the right to:
- Be informed — know whether and how your personal information is being processed.
- Access — request a copy of the personal information we hold about you.
- Object — object to processing, including for direct marketing.
- Erasure or blocking — ask us to delete or block information that is incomplete, outdated, false, unlawfully obtained, or no longer needed.
- Rectification — ask us to correct inaccurate information.
- Data portability — obtain your information in a commonly used electronic format.
- Damages — be compensated for damages caused by unlawful processing.
- File a complaint — lodge a complaint with the National Privacy Commission.
To exercise these rights, email support@khmtools.com.ph with the subject line "Data Privacy." We may need to verify your identity before acting on your request. We aim to respond within 15 business days.
If you are not satisfied with our response, you may contact the National Privacy Commission at privacy.gov.ph.
Marketing Messages
We send promotional emails or messages only with your consent. You can unsubscribe at any time using the link in our emails or by messaging us. Order and service updates are not marketing messages and will still be sent while you have an active transaction with us.
Children's Privacy
Our Site is intended for adults. Customers under 18 may only purchase with the consent and supervision of a parent or legal guardian, consistent with our Terms of Service. We do not knowingly collect personal information from minors without such consent. If you believe a minor has shared information with us, please contact us and we will delete it.
Third-Party Links
Our Site may link to third-party websites, such as brand pages, government sites, and video platforms. We are not responsible for their privacy practices. Please review their policies before sharing personal information with them.
Customers Outside the Philippines
If you access our Site from another country, the privacy laws of your location may give you additional rights.
- European Economic Area / United Kingdom (GDPR): We process your data on the legal bases described above (contract, legal obligation, legitimate interests, and consent). You may exercise your rights by contacting us, and you may also complain to your local data protection authority.
- California, USA (CCPA/CPRA): You may request to know, access, correct, or delete your personal information. We do not sell or share personal information for cross-context behavioral advertising as defined under California law. See also our Do Not Sell My Personal Information page.
These sections apply only where those laws apply to you. The Data Privacy Act of 2012 remains the primary law governing this policy.
Do Not Track
There is no common industry standard for responding to "Do Not Track" browser signals, so we do not change our data practices when such a signal is received.
Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with a new "Last Updated" date. For significant changes, we may also notify you by email or through a notice on the Site.
Contact Us
KHM Megatools Corp.
Attention: Data Protection Officer
940 Blumentritt Rd, Sampaloc, Manila, 1008 Metro Manila, Philippines
Email: support@khmtools.com.ph (subject: "Data Privacy")
Landline: (02) 8561-0701
Globe: 0917 529 1966
Customer Service Hours: Mon–Sat, 8:30 AM–5:30 PM (Philippine Time, UTC+8)
Response Time: We aim to respond within 1–2 business days.