PowerPlay is committed to protecting your personal data in compliance with Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). This policy explains what data we collect, why we collect it, how we use it, and your rights as a data subject.
1. Personal Information Controller
PowerPlay, operating at Ridgewood Commercial Space, P. Sanchez, Pagsabungan, Mandaue City, Cebu, Philippines, acts as the Personal Information Controller (PIC) under the Data Privacy Act of 2012. As PIC, we determine the purposes and means of processing your personal data.
2. What Data We Collect
When you make a reservation through the PowerPlay online booking platform, we collect the following:
- Full name
- Email address
- Mobile number
- Preferred sport (pickleball or badminton)
- Booking details: date, time, court number, number of hours
- Payment transaction reference number (we do not store full card or e-wallet account details)
We may also collect non-identifiable technical data (device type, browser type, pages visited) through standard web analytics tools to improve website performance.
3. Purpose & Legal Basis for Processing
Your personal data is processed on the following lawful bases under Section 12 of the Data Privacy Act:
- Contractual Necessity (Sec. 12[b]): To confirm and manage your court reservation, issue your booking reference code, and communicate updates related to your session.
- Compliance with Legal Obligation (Sec. 12[c]): To maintain transaction records as required by applicable Philippine laws.
- Legitimate Interests (Sec. 12[f]): To improve our services, resolve disputes, and prevent fraud.
We do not use your personal data for marketing or promotional communications without your explicit consent.
4. Data Sharing & Third Parties
We do not sell, trade, or rent your personal information. Your data may be shared only with the following, strictly to the extent necessary:
- Payment service providers — to process transactions. Governed by their own DPA-compliant privacy policies.
- Email delivery service providers (e.g., Resend) — to send booking confirmations and reference codes.
- Cloud hosting and database providers (e.g., Vercel, Supabase) — to store booking data securely.
All third-party service providers are required to maintain confidentiality and process data only as instructed. We do not transfer your personal data outside the Philippines unless adequate data protection safeguards are in place.
5. Data Retention
Booking records and associated personal data are retained for three (3) years from the date of the session, after which they are securely deleted or anonymized. This retention period is consistent with standard transaction record-keeping requirements under Philippine law.
6. Data Security
PowerPlay implements reasonable and appropriate technical and organizational security measures to protect your personal data, in accordance with NPC Circular No. 2023-06. These include encrypted data transmission (HTTPS/TLS), access controls, and secure cloud storage.
In the event of a personal data breach, PowerPlay will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay, as required by the Data Privacy Act.
7. Your Rights as a Data Subject
Under Sections 16–20 of the Data Privacy Act, you have the following rights:
- Right to be Informed: To know how your data is collected and used.
- Right to Access: To obtain a copy of your personal data in our possession.
- Right to Rectification: To correct inaccurate or outdated data.
- Right to Erasure or Blocking: To request deletion of your data, subject to legal retention requirements.
- Right to Object: To object to processing not covered by this policy.
- Right to Data Portability: To receive your data in a structured, commonly used format.
- Right to Lodge a Complaint: To file a complaint with the NPC at privacy.gov.ph.
To exercise any of these rights, contact us through the official PowerPlay contact channels. We will respond within a reasonable period at no cost to you.
8. Cookies
The PowerPlay website may use cookies to improve browsing experience and collect anonymous usage analytics. You may disable cookies in your browser settings; however, some website functions may be affected. No personally identifiable information is collected through cookies without your knowledge.
9. Children's Privacy
Our online booking services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided personal information through our platform without parental consent, please contact us immediately.
10. Consent
By submitting a booking through the PowerPlay platform, you affirm that you have read and understood this Privacy Policy and that you freely and voluntarily consent to the collection and processing of your personal data for the purposes described herein, in accordance with Section 3(b) of the Data Privacy Act.
11. Changes to This Policy
PowerPlay may update this Privacy Policy periodically to reflect changes in our data practices or applicable law. The revised policy will be posted on the website with an updated date.
12. Contact & NPC Information
For privacy-related concerns or to exercise your data subject rights, contact PowerPlay through the official contact channels on our website. For complaints or escalations, you may also contact:
- National Privacy Commission — privacy.gov.ph
- Address: 25th–27th Floors, The Upper Class Tower, Quezon Avenue, Quezon City
- Email: info@privacy.gov.ph