Privacy Policy

• Account info: name, email, password (stored as a one-way hash, never in plain text), and optionally phone number, skill level, and a profile photo.
• Booking details: court, date, time, party size, any add-ons or promo codes applied, and — for guest bookings without an account — a name and phone/email to reach you.
• Membership details, if you sign up for one: full name, age, birthday, contact number, address, and optionally an email.
• Payment: reservation and membership checkout is handled entirely by our payment processor, PayMongo — we never see or store your card or e-wallet details, only the payment result.
• Open play activity: when you check in, how long you play, and how many games.
• A drawn signature and timestamp, captured at signup as your consent to this Policy, our Terms of Service, and our Waiver.
• Front-desk purchase details (items, payment method, and your name or membership if applicable), if you buy something at the pro shop or front desk.
• Technical data like IP address, used only for anti-abuse rate limiting on guest bookings and password-reset requests.

We only process personal data for a declared, specific purpose, as required by the Data Privacy Act’s principles of transparency, legitimate purpose, and proportionality. The purposes are limited to running the club: creating and managing your bookings, membership, and queue spot; processing payments and promo codes; running the front-desk POS; sending account emails (like a password reset); and preventing abuse of the booking system. We don’t use your data for advertising, and we don’t sell it.

Our legal basis is, depending on the data: performance of the reservation or membership contract you enter into with us (Data Privacy Act, Sec. 12(b)) for booking and account data, and your consent — the signature you draw at signup — for everything else, including the sensitive personal information described below.

Under the Data Privacy Act (Sec. 3(l)), ageis classified as sensitive personal information, not ordinary personal data. We collect a member’s age and birthday as part of membership sign-up, and we process it only with your explicit consent (Sec. 13(a)), captured through the same signup signature, and only to confirm eligibility and administer your membership.

We don’t share your information with third parties except the service providers that make the site work — our hosting provider, database, payment processor (PayMongo, for reservation and membership checkout), email delivery service (currently Resend, for password-reset emails), and file storage provider (for photos and signatures you upload) — each only accessing what they need to provide that service, and each bound to protect it. Some of these providers process data on infrastructure outside the Philippines; where that happens, we only use providers that maintain security standards consistent with the Data Privacy Act.

We don’t sell your data, and we don’t share it for marketing.

We keep your data only as long as your account is active or as needed for the purposes above, consistent with the Data Privacy Act’s retention-limitation principle (Sec. 11(e)). Message us on Facebook or ask staff to delete your account — this permanently removes your profile and booking history and can’t be undone. We may keep a minimal transaction record (e.g. a receipt or payment reference) beyond that where bookkeeping or tax law requires it.

We apply reasonable organizational, physical, and technical safeguards proportionate to the risk, as required by Sec. 20 of the Data Privacy Act — passwords are one-way hashed and never stored in plain text, and payment card details never touch our systems at all; they go directly to PayMongo. If a breach occurs that’s likely to put your rights or freedoms at real risk, we’ll notify the National Privacy Commission and affected members within the timeline the law requires.

A player under 18 may use the courts and is welcome to be added to a booking, but a parent or guardian must create any account, sign up for any membership, and give consent on the minor’s behalf for any personal data we collect about them.

Under Sec. 16 (and related provisions) of the Data Privacy Act, you have the right to:

• Be informed that your data is being collected and processed (this Policy).
• Access a copy of the personal data we hold about you.
• Correct any inaccurate or outdated data.
• Object to processing, or withdraw consent, subject to the contractual data we need to run your booking or membership.
• Erasure or blocking of your data where it's no longer necessary, or was unlawfully obtained.
• Data portability — a copy of your data in an electronic format, where technically feasible.
• Damages for violation of your rights under the Act, and to file a complaint with the National Privacy Commission (privacy.gov.ph).

To exercise any of these, message us — see Contact below.

Questions about this Policy, your data, or to exercise any right above: message us on Facebook or visit us at Pickle Island Courts, Guimaras Circumferential Road, Jordan, Guimaras 5048. If you believe we’ve mishandled your data and we haven’t resolved it, you may also file a complaint with the National Privacy Commission.