Skip to content
Carolina's PicklePop

Privacy

Data Privacy Notice

Last updated September 13, 2026

Carolina's PicklePop respects your privacy. This notice explains what personal data we collect when you use this booking site, why we collect it, and your rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

What we collect

  • Account details: booking here requires an account, so we collect your name, mobile number and email address, an encrypted password, and your booking and registration history.
  • Payment:payment is usually settled directly with the club. You pay by GCash, Maya or bank using the reference on your reservation, and staff confirm it against the club’s own account. If you choose to attach a payment screenshot, we store it privately and use it only to help confirm your payment. Where online payment is enabled, it is processed by Xendit on its secure page — we never see or store your card or e-wallet number; we only receive that a payment succeeded, its amount, and the channel.
  • Optional profile details: on your profile page you may choose to add your skill level. It is optional, you can clear it at any time, and leaving it blank does not affect your ability to book.
  • Customer Corner: if you post or comment in the members-only Corner, we store that content together with your display name so it can be shown to other members.
  • Technical data: a sign-in session cookie so we can keep you signed in. We do not use advertising or cross-site tracking cookies.

Why we use it

  • To take and confirm your bookings, seats and tournament registrations.
  • To confirm your payment and keep a record of it.
  • To contact you about a booking — a change, a cancellation, or a payment question.
  • To run the members-only Customer Corner, if you choose to use it.
  • To run the club’s operations and keep the records the law requires us to keep.

Our legal bases are your consent (which you give when you create an account or submit a booking) and the performance of our booking contract with you.

Who we share it with

We share your data only with the service providers that make this site work, and only as needed:

  • Xendit — to process online card / e-wallet payments securely (when enabled).
  • Supabase and Vercel — to host the database and the website.
  • Resend — to send transactional and reconciliation emails (e.g. the daily sales summary), when email notifications are enabled.
  • Telegram — to send the club operational alerts (e.g. a new payment to check). These alerts carry a booking reference and amount only — no customer name or contact details.
  • Google (Gemini) — to power the site’s help assistant, when it is enabled. If you type a question into the assistant, that message is sent to Google to generate a reply. Please don’t enter personal or payment details there — it is for general questions about the club only.

Some of these providers process or store data outside the Philippines (for example, our database and website are hosted in Singapore, and email is sent via a provider in the United States). Where data is transferred abroad, we remain accountable for it and take steps so it receives a comparable level of protection.

We do not sell your personal data, and we do not share it for advertising. We may disclose data where required by law or by a lawful order.

How long we keep it

We keep booking and payment records for as long as needed to run the club and to meet legal and tax record-keeping obligations. If you have an account, we keep your data while your account is active. You may ask us to delete your data at any time (see your rights below), subject to records we are legally required to retain.

Your rights

Under RA 10173 you have the right to:

  • be informed about how your data is processed;
  • access the personal data we hold about you;
  • correct any inaccurate data;
  • object to processing, or withdraw your consent;
  • have your data erased or blocked, where the law allows;
  • complain to the National Privacy Commission (NPC) if you believe your rights have been violated.

How to reach us

To exercise any of these rights, or for any privacy question, contact Carolina's PicklePop at hello@example.ph or +639170000000.

This notice is provided in good faith to explain our practices. The club should review it against its actual operations and, before opening, appoint a Data Protection Officer and register with the National Privacy Commission if required.