Privacy Policy

1. Who we are and what this policy covers

Skylark Asia PH is a brand and website of NORTVALE IMPERIAL. In this policy, “Skylark,” “we,” or “us” refers to NORTVALE IMPERIAL. We act as the personal information controller for the personal information described here, subject to applicable Philippine law.

This policy covers the public corporate website and, when made available, related marketplace, seller, creator, social/video, and connected third-party services. The corporate website helps people discover our cleaning, care, and hygiene product directions and contact us about product or manufacturing inquiries. The current corporate website does not take online payments or place product orders through a checkout.

2. Information you provide

Depending on the Skylark feature you use, information may include account and profile details, marketplace activity, seller or creator information, and customer-support communications. If you voluntarily connect a supported third-party account, we may receive account or content information made available through that provider’s authorized process. The specific information depends on the feature and permissions involved.

If you choose to prepare and send an inquiry, you may provide your name, email address, company, product interests, requested quantities, notes, project requirements, and any other details you include in your message.

The inquiry tools prepare a message for your email application. They do not submit the message to a Skylark server or send it automatically. We receive the information only if you choose to send the email. Your email provider will also process the message under its own privacy terms.

The product inquiry list is saved in local browser storage on your device so it can remain available while you browse. It may contain selected product-family directions, quantities, and notes. Remove items from the list or clear the website’s stored data in your browser to delete that local copy.

3. Information handled when you visit

Like most websites, the hosting and security systems that deliver this site may process technical request details such as your IP address, browser and device information, requested pages, referral information, and the date and time of a request. We use this information as needed to operate, protect, troubleshoot, and maintain the website.

We use Google Analytics on this public website to understand aggregate page visits, referral sources, browser and device categories, and approximate location such as country. We also measure product-family page views, additions to the inquiry list, and preparation of an email inquiry draft. These interaction events do not include the name, email, company, or message entered into an inquiry form; preparing a draft does not mean it was sent. A first-party visitor counter on our public corporate and Shop storefronts records a random tab session ID, current page, approximate country, and timestamps so authorized Seller Center staff can see current activity and daily session totals. The session ID is held in session storage and refreshed every 30 seconds while the page is visible; it drops out of the active count after 90 seconds without a refresh, and session-level rows are deleted within 24 hours. Aggregated daily session counts, without session IDs or page paths, are kept for up to 400 days to show current-day and future trends. It does not store an IP address, name, email, or form content. Google Analytics may use first-party cookies to distinguish a browser and its sessions. Google states that GA4 uses IP information to derive location and does not expose raw IP addresses in Analytics reports. Our hosting and security providers may also maintain operational logs under their own service arrangements.

4. Cookies, browser storage, and the installed app

The site uses browser storage for the product inquiry list described above. The Progressive Web App service worker may store approved static files, such as images and application code, to make repeat visits faster and to support the offline screen. It does not cache page HTML, inquiry messages, account details, or payment information.

Google Analytics may set first-party measurement cookies. This site does not use Analytics data for advertising personalization. You can manage or clear cookies and website storage through your browser; clearing site storage also removes the saved inquiry list and may remove cached app files. Google’s Analytics processing is described in its data safeguards notice.

5. Third-party services and links

Some features connect to services operated by other organizations. Google Analytics measures site usage; Google Fonts is requested to display the website’s typefaces; and the Videos, Tips & Demos section loads YouTube-nocookie video embeds when that section comes into view. If the TikTok integration is available, TikTok also provides account authorization, supported APIs, and the official embedded video player. When these services load, their providers may process technical information such as browser, device, network, and requested-resource details under their own service arrangements.

The site also links to external services, including email applications, Viber, and online marketplaces. Following an external link or opening an embedded service is subject to that provider’s privacy policy and terms. We do not control how those providers process information.

Some providers may process information outside the Philippines. Their processing is governed by their own notices and applicable safeguards.

6. Why we use information

We use information to respond to a request you choose to send, discuss a product or manufacturing inquiry, maintain the inquiry tools you use in your browser, understand aggregate site usage through Google Analytics, operate and secure the website, diagnose technical issues, and meet applicable legal obligations. If you choose to connect a TikTok account in a Skylark service that offers the integration, we also use the permitted account and public-video data to maintain the connection, synchronize public video metadata, display the creator identity and videos through TikTok’s official playback mechanisms, and optionally link a video to a Skylark product page.

Where the Data Privacy Act of 2012 requires a lawful basis, processing is limited to the applicable basis for the specific purpose, such as taking steps at your request, pursuing a legitimate operational or security interest where your rights do not override it, or complying with law. We do not currently offer a newsletter signup or use inquiry details for behavioral advertising.

7. When information may be shared

We do not sell personal information or share it for cross-context behavioral advertising. Information may be available to personnel who need it to handle your inquiry, to service providers that support website hosting, security, email, Google Analytics, fonts, or video delivery, or to public authorities when disclosure is required or permitted by law. When you connect a TikTok account, Skylark sends authorization and API requests to TikTok and receives only the data returned for the scopes you authorize. TikTok processes login, API, and embedded-player activity under TikTok’s own policies. Opening the official player may send technical information directly to TikTok.

Service providers may process information only as needed to provide their services or as otherwise required by law. We take reasonable steps to use appropriate safeguards for information shared with them.

8. How long information is kept

The inquiry list remains in your browser until you remove it or clear the website’s stored data. If you send us an email, we retain the correspondence for as long as needed to respond, manage the business relationship, maintain appropriate records, and meet legal requirements. Technical logs are retained according to the operational and security needs and retention practices of the relevant providers. TikTok-specific account, profile, and video metadata is retained or deleted as described in Section 13.

9. Your rights and choices

Under the Data Privacy Act of 2012, you may have the right to be informed, access your personal information, object to certain processing, correct inaccurate information, request erasure or blocking where applicable, request data portability where applicable, and seek damages as provided by law. These rights are subject to legal conditions and exceptions.

To request access, correction, deletion, or TikTok-related cleanup, email our existing privacy contact at hello-skl@northvale.merhg.com with “Privacy request” in the subject. Describe the request and identify the TikTok account if it relates to the integration. We may need to verify your identity before acting. Never send a password, OTP, authorization code, access token, or refresh token.

For more information, see the National Privacy Commission’s summary of data subject rights and the Data Privacy Act of 2012. You may also file a complaint with the National Privacy Commission where appropriate.

10. Security

We take reasonable steps to protect information handled through the site and our inquiry process. TikTok access and refresh tokens are encrypted and stored server-side for the authorized integration; token values are not returned to the browser interface. No website, email transmission, or storage method can be guaranteed completely secure. Please avoid including sensitive personal information in a product inquiry unless it is necessary.

11. Children’s information

Public browsing of Skylark does not require an account. You must be at least 18 years old to create a Seller or Creator/Affiliate account, connect a TikTok or other external account, sell through the marketplace, or receive payouts or creator earnings. This website is not designed to collect personal information directly from children. If you believe a child has sent personal information to us, contact hello-skl@northvale.merhg.com so we can review the request.

12. Changes to this policy

We may update this policy when our website, services, or legal obligations change. The Last Updated date near the top of this page reflects the latest revision. Material changes will be reflected here.

13. TikTok account connection and public video display

When this applies. This section applies when a Skylark service offers TikTok account connection and you choose to authorize it. Skylark uses TikTok’s official OAuth authorization and supported Display API after you approve the requested permissions. Each TikTok account is authorized separately. The feature is not available in every Skylark service.

Information received from TikTok. With the user.info.basic and video.list permissions, Skylark requests the TikTok application-scoped account identifier (open_id), display name, and avatar URL, plus public-video information returned by TikTok. Video information may include the video identifier, title, description/caption, publication time, duration, temporary cover-image URL, share URL, official embed reference, and view, like, comment, and share counts when TikTok returns them. A creator handle may be read from the public TikTok video share URL when present; it is not requested as an additional profile field. TikTok may omit fields for a particular account or video. TikTok cover-image references can expire.

How Skylark uses it. Skylark uses the account identifier and profile information to maintain the authorized connection and associate the account with its synchronized videos. It uses public-video metadata to make those videos available in Skylark’s For You feed, show creator attribution, and load the video through TikTok’s official embed player. The player and TikTok links keep the video attributed to TikTok and its creator. Skylark does not download or re-upload TikTok video files or remove their watermark. A video may optionally link through Skylark’s product basket to an existing Skylark product detail page; the link uses Skylark’s existing product identity and does not change the video or its ownership.

TikTok and Skylark metrics. TikTok view, like, comment, and share counts, when returned, describe activity reported by TikTok for that TikTok video. They are kept separate from Skylark activity. Skylark interactions, if offered, do not change those TikTok counts or post an interaction to TikTok.

Tokens and security. TikTok may issue an access token, refresh token, and expiry values after authorization. When the integration is enabled, its server-side service stores the tokens in encrypted form, keeps app credentials out of browser code, and uses the tokens only for the authorized account and video requests. The service refreshes access through TikTok’s token endpoint when needed and replaces a rotated refresh token. Token values are not returned to the Skylark browser interface.

Disconnect and retention. When you disconnect a TikTok account, Skylark immediately stops future synchronization and removes that account’s videos from active For You eligibility. Skylark attempts to revoke the TikTok authorization. It immediately deletes the access token, refresh token, expiry values, and other stored authentication material even if TikTok revocation cannot be confirmed.

Disconnected TikTok account and profile metadata is deleted within 30 days unless it must be retained for a security, legal, transaction, fraud, dispute, or compliance purpose. Synchronized TikTok video metadata with no active Skylark dependency is deleted within 30 days after disconnect. Records needed for an active product relationship, transaction, dispute, fraud or security investigation, or legal requirement may remain only as long as reasonably necessary for that purpose. Skylark removes or deletes retained records when the applicable need ends.

You may request access, correction, deletion, or TikTok-related cleanup through the privacy contact described in Section 9. We may verify your identity before acting. Never send a password, OTP, authorization code, access token, or refresh token.

Third-party service. TikTok operates the authorization, API, and embedded-player services and processes information under its own terms and privacy notice. Opening the player or a TikTok link sends the related request to TikTok. Review TikTok’s Privacy Policy and TikTok’s Terms of Service.