T
TARA
TAVARA ERP Assistant
Last updated: June 2, 2026
This Privacy Policy applies to TAVARA ERP, operated by TAVARA HOLDINGS OPC (SEC Registration No. 2026050252208-01), and governs the collection, use, and protection of personal data in compliance with the Philippine Data Privacy Act of 2012 (RA 10173), the EU General Data Protection Regulation (GDPR), the Singapore Personal Data Protection Act 2012 (SG PDPA), the Thailand Personal Data Protection Act B.E. 2562 (TH PDPA), and the Malaysia Personal Data Protection Act 2010 (MY PDPA).
Data Controller / Personal Information Controller (PIC):
TAVARA HOLDINGS OPC · SEC Registration No. 2026050252208-01
Data Protection Officer (DPO):
Designated per NPC Advisory Opinion 2017-049, GDPR Art. 37, and equivalent ASEAN regulations. The DPO is your point of contact for all data privacy inquiries, rights requests, and complaints.
Contact: care@tavaraholdings.com · tavaraerp.com/contact
We collect information you provide when you create an account, subscribe to a plan, or use our platform. This includes your name, email address, company name, billing information, and usage data generated through interaction with our services.
We process personal data only when a lawful basis exists under RA 10173 §12, GDPR Art. 6, and equivalent provisions under SG/TH/MY PDPA:
We use collected data to provide, maintain, and improve TAVARA ERP services; process transactions and send related communications; personalize your experience; enforce our terms; and comply with legal obligations. We do not sell or rent your personal data to third parties.
Our platform uses essential cookies required for authentication and session management. We may also use analytics cookies to understand usage patterns and improve performance. You can manage cookie preferences through your browser settings.
We implement industry-standard security measures including encryption at rest and in transit, row-level security for data isolation, regular security reviews, and access controls. Data is hosted on reputable cloud infrastructure providers with their own security certifications.
We retain your data for as long as your account is active or as needed to provide services. After account termination, data is retained for the period required by applicable laws (including BIR 10-year retention for financial records) and then securely deleted.
Your data may be processed by the following sub-processors in the course of providing TAVARA ERP services:
Data Processing Agreements (DPAs) are in place with each sub-processor. For transfers from the EU/EEA, Standard Contractual Clauses (SCCs) apply. For cross-border transfers governed by RA 10173, we ensure all recipients maintain adequate security measures per NPC Circular 2016-02. For transfers involving Singapore, Thailand, and Malaysia residents, we apply equivalent contractual safeguards as required by SG PDPA §26, TH PDPA §28, and MY PDPA §129 respectively.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:
We maintain an internal breach register and conduct root-cause analysis for every incident.
Under RA 10173, GDPR, SG PDPA, TH PDPA, and MY PDPA (as applicable), you have the right to:
To exercise any of these rights, email care@tavaraholdings.com. We will respond within 30 days (NPC / MY PDPA), 1 month (GDPR), or 30 days (SG/TH PDPA).
If you believe your data privacy rights have been violated, you may file a complaint with the relevant authority in your jurisdiction:
For all privacy-related inquiries, contact our Data Protection Officer at care@tavaraholdings.com or visit tavaraerp.com/contact.