Loading…
What personal data EventsPH collects, why, who we share it with, how long we keep it and your rights.
Draft — pending legal review
EventsPH is operated by [to be confirmed: registered company name, SEC registration number and business address], the personal information controller for the data described here. We process personal data in line with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).
Data Protection Officer: [to be confirmed: Data Protection Officer's name and email address].
Government ID numbers and TINs are sensitive personal information under the Data Privacy Act; we collect them from partners only for accreditation and tax compliance.
| Purpose | Legal basis |
|---|---|
| Creating your account, taking bookings and payments, refunds and payouts | Performing our contract with you |
| Sending booking, payment and refund notifications by email, SMS and in the app | Performing our contract with you |
| Accrediting partners, keeping accounting and tax records | Compliance with legal obligations; for sensitive personal information, as required or allowed by law |
Service providers (processors) that act on our instructions:
| Provider | What they do |
|---|---|
| Neon | Database hosting (account, booking, payment and message records) and sign-in, including the one-time codes sent to your email. |
| Vercel | Hosts the website and stores uploaded photos and accreditation documents. |
When data is no longer needed we delete or anonymise it.
Under the Data Privacy Act you have the right to:
To use these rights, contact our Data Protection Officer ([to be confirmed: Data Protection Officer's name and email address]). We may need to confirm your identity first. Some data must be kept even after a request, for example records the law requires us to keep.
If a personal data breach happens, we will notify the National Privacy Commission and the people affected as the Data Privacy Act and NPC rules require.
EventsPH uses essential cookies only: to keep you signed in, to remember your AI Planner session before you sign in, and for security. We use no advertising or tracking cookies and no third-party analytics.
EventsPH is meant for adults who are planning an event. We do not knowingly collect data from children. [to be confirmed: minimum age, e.g. 18]
We will post any update to this notice here, with the date it changed, and tell you by email about important changes.
Questions about this notice: email support@prestige.ph [to be confirmed: support email address] or our Data Protection Officer.
| Preventing fraud and abuse (rate limits, masking contact details in messages, audit logs), fixing errors |
| Our legitimate interests in a safe, working service |
| AI Planner suggestions | Performing our contract with you, when you choose to use it |
| Answering your contact form message | Our legitimate interests in responding to you, and your request |
We do not sell your personal data and we do not use it for advertising.
| Processes QR Ph payments. Maya receives the payment amount and reference; you pay in your own app, so EventsPH never sees your wallet or bank login. |
| Resend | Sends EventsPH's email notifications. |
| Semaphore | Sends SMS notifications and mobile verification codes. |
| Anthropic | Runs the AI Planner. Your brief and follow-up questions, and listing details, are sent to generate suggestions. |
| Sentry | Error monitoring. Error reports are stripped of emails, phone numbers, account numbers, message text and request contents before they are sent. |
| Sign-in with Google, only if you choose it. Google tells us your name and email address. |
| OpenStreetMap | Map images on venue pages. Your browser loads the map tiles from OpenStreetMap's servers, which see your IP address. |
Some of these providers store or process data outside the Philippines. [to be confirmed: server locations and the data sharing or outsourcing agreements with each provider]