Who we are
Western Pickleball Center ("we") runs the pickleball courts at Siran, Guagua, Pampanga, Philippines. We decide what personal data is collected through this website and at our front desk, and we are responsible for it under the Data Privacy Act of 2012 (Republic Act 10173).
What we collect
- Your account: your name, email address, mobile number and a password (we only keep a scrambled version of it).
- For entry: a photo of one valid ID and the kind of ID. If our staff check your ID at the desk instead, they may note the last 4 characters of its number. We never type in or keep your full ID number.
- Your emergency contact: the name and mobile number of someone we can call if you get hurt or feel unwell here. Please ask them first; we only use it in an emergency.
- Children you add: their name and year of birth only.
- Bookings: the courts, dates and hours you book, what you paid, and the payment receipt you upload.
- Security records: when staff open, approve or reject an ID photo, and the internet address used to log in or send forms, to stop misuse.
Why we collect it
- To know who is inside the venue, for the safety of everyone there. Only registered people with a checked ID (and children with them) can come in.
- To take and confirm your bookings and payments.
- To contact you about your bookings or your registration, for example if we can't read your ID photo.
We use your ID and its details because you agree to it when you register (Section 13 of the Act). We don't use your data for advertising, and we don't sell it.
Who can see it
- Only our staff, through a staff login. Every time a staff member opens your ID photo, we record who opened it and when.
- Our service providers, only to run the site: Cloudflare (hosting and storage), Resend (emails such as password resets) and Semaphore (the text message with your sign-up code, which receives only your mobile number). They may store data outside the Philippines, under their own security and privacy terms.
- Government authorities, only if the law requires it.
How we protect it
ID photos are kept in private, encrypted storage that is not on the public internet. They can only be opened through the staff dashboard. We remove hidden details from your photo (such as where it was taken) before saving it. Staff logins end after 12 hours.
How long we keep it
- Your ID photo: while your account is active, so you don't have to show your ID on every visit. You can delete the photo yourself in My account at any time, or ask us to.
- A rejected ID photo is deleted as soon as staff reject it.
- Your account and ID details: until you ask us to delete them.
- Bookings and receipts: as long as we need them for our accounts and taxes, even after an account is deleted.
- Deleted data can stay in our database backups for up to 30 days before it is gone for good.
Your rights
Under the Data Privacy Act you can:
- be told what data we hold about you and how we use it, and get a copy;
- have wrong or out-of-date data corrected;
- withdraw your consent, object to how we use your data, or ask us to delete it (we then can't let you in without checking your ID again at the desk);
- be told if your data is involved in a security breach;
- complain to the National Privacy Commission (privacy.gov.ph) if you think we've handled your data wrongly.
Contact us
To use any of these rights, or with any question about your data, contact our Data Protection Officer, Jose Miguel Lim Pilea:
- Call or text 0960 425 0944
- Message us on Facebook Messenger
- Or ask at the front desk.