Privacy Policy

ReservePolomolok is a local booking platform for venues in Polomolok, South Cotabato, operated by Genetrify Information Technology Services, a sole proprietorship registered with the Philippine Department of Trade and Industry. For the purposes of RA 10173, Genetrify Information Technology Services is the personal information controller. Reach us about anything on this page at hello@reservepolomolok.com.

When you book as a guest, create an account, or list a venue through ReservePolomolok, we collect:

• Account data: your name, email address, mobile number, and (for a password account) a password, stored only as a secure hash — the plain password never persists. If you sign in with Google, we receive your name and email from Google instead.
• Guest booking data: if you book without an account, we store the name, email, and mobile number you enter, so we can hold the slot, email your receipt and a private link to view or manage the booking, and let the venue reach you about that reservation. No password or account is created.
• Booking data: the venue, court or unit, date and time, amount, and status of each reservation you make, plus any note you add for the venue.
• Payment metadata: a payment reference, the amount, and status from our payment processor. Card and e-wallet details are entered on the processor’s page — we never see or store your card number, CVV, or bank credentials.
• Venue-owner data(if you list a venue): your venue’s name, address, contact details, hours, prices, and the payout details you give us so we can remit your earnings.

We do not collect your birthdate, government IDs, precise geolocation, contact lists, or files from your device. We do not use third-party advertising, and we do not run cross-site tracking or behavioural ad cookies.

We use the data above only to:

• Run the booking service — hold slots, confirm reservations, and show you your booking history.
• Authenticate you and keep your account secure.
• Process payments and, once we act as your marketplace, remit owner payouts.
• Send transactional email — booking receipts, cancellation notices, owner booking alerts, and password resets — and a booking-receipt SMS to the mobile number you give us. Marketing email is sent only if you opt in, and you can turn it off any time in your settings.
• Let a venue reach you about a booking you made with them.
• Comply with our legal and tax obligations under Philippine law.

We do not sell your personal data. The venue you book sees the booking details and the contact number you provide, so it can honour and reach you about your reservation. Otherwise we share data only with the service providers we need to run the platform, each for the stated purpose:

• Supabase: database and file hosting. Holds your account, booking, and venue data.
• Vercel: application hosting. Handles the web requests that serve the site.
• PayMongo: payment processing. Receives the data needed to take a payment and issue a reference; card details go to PayMongo directly, never to us.
• Resend: transactional email delivery. Receives your email address and the message content for receipts and notices.
• Semaphore: SMS delivery (a Philippine SMS gateway). When SMS receipts are enabled, receives your mobile number and the receipt message for the booking you made.

We may also disclose data when required by Philippine law, a lawful court order, or to protect the rights and safety of ReservePolomolok, our users, or the public.

Account, booking, and venue data are stored in our Supabase Postgres database. Traffic between your browser, our app, and our providers is encrypted in transit with TLS. Passwords are never stored in plaintext — they are hashed with bcrypt and a per-user salt. Your login session is a signed, http-only cookie that expires and is re-verified on the server for every request. No system is perfectly secure; if a breach affecting you occurs, we will notify you and the National Privacy Commission within the timelines RA 10173 requires.

We keep data only as long as we need it:

• Account data: until you ask us to delete your account.
• Booking records: kept while your account is active. Payment and receipt records are retained as long as Philippine tax law requires (up to 10 years for BIR).
• Guest bookings: a guest booking’s contact details are kept for the same period as any booking (through the reservation, then tax-record retention). If you booked as a guest and want your details removed, email us the booking reference.

We process a guest’s contact details to perform the booking you asked for and so the venue can honour it (RA 10173: performance of a contract and legitimate interest). To have your account, or a guest booking’s details, removed, email hello@reservepolomolok.com. We confirm receipt and complete deletion within 30 days, except records we are legally required to keep.

Under the Philippine Data Privacy Act you have the right to be informed, to access the data we hold about you, to correct inaccurate data, to object to specific processing, to have unlawful processing erased or blocked, to a portable copy of your data, to be compensated for damage from unlawful processing, and to complain to the National Privacy Commission. To exercise any of these, email hello@reservepolomolok.com.

We may update this policy as the platform grows. Material changes are posted here, and the date at the top always reflects the latest version.