Privacy Policy

1. Overview & Scope

This Privacy Policy applies to all users of the JazzuCourt sports scheduling platform—including registered members, visiting players, and participating court facility operators within Balangkayan, Eastern Samar, and across the Philippines. We adhere to the core privacy principles of Transparency, Legitimate Purpose, and Proportionality in every data processing operation.

2. Information We Collect & Lawful Basis

Pursuant to Section 12 of R.A. 10173, we process personal data based on contractual necessity (to fulfill court reservations) and your explicit, voluntary consent:

• Account & Identification Data: Full legal name (first name, middle name, last name), mobile telephone number, email address, username, and cryptographically hashed passwords (salted one-way hashes; passwords are never readable in plaintext).
• Membership & Eligibility Records: Membership ID number, tier status, validity periods, and affiliated sports club.
• Reservation & Transaction Details: Reserved sport (pickleball, badminton, basketball, volleyball), venue location, court designation, scheduled date/time, confirmation tokens, and cancellation logs.
• Facility & Operator Details: For venue administrators in Balangkayan: venue name, municipal business permit reference, court surface, operating hours, and booking rules.
• Security & Audit Logs: IP addresses, browser user-agents, timestamped authentication events, and CSRF session tokens maintained pursuant to the Cybercrime Prevention Act of 2012 (R.A. 10175) to detect and deter unauthorized access.

3. Purpose of Processing

Your data is processed strictly for the following legitimate purposes:

• Scheduling court time slots, issuing unique digital confirmation receipts, and preventing double-booking conflicts.
• Enabling facility operators to verify player identity and validate on-court check-ins at participating venues.
• Sending essential transactional notifications regarding booking status, schedule adjustments, or weather cancellations.
• Complying with municipal safety regulations, sports recreation guidelines, and accounting records under Philippine law.

4. Data Sharing & Non-Disclosure

We respect your privacy rights and enforce strict data sharing constraints:

• Venue Operators: When you confirm a booking, only necessary reservation details (player name, reservation code, time slot) are shared with the designated venue manager for check-in verification.
• No Commercial Monetization: We do not sell, rent, lease, trade, or share your personal data with third-party advertisers, marketing agencies, or data brokers.
• Legal & Law Enforcement Disclosures: Data may be disclosed only upon lawful court order, subpoena, or written directive issued by competent Philippine legal authorities or the National Privacy Commission.

5. Statutory Rights of the Data Subject

Under Section 16 of the Philippine Data Privacy Act of 2012 (R.A. 10173), you are entitled to the following enforceable rights:

• Right to be Informed: The right to know whether personal data pertaining to you is being collected, processed, stored, or disclosed.
• Right to Access: The right to request reasonable access to your personal information held in our database.
• Right to Object: The right to object to the processing of your personal data for purposes other than essential booking administration.
• Right to Erasure or Blocking: The right to suspend, withdraw, or order the removal of your personal data from our active filing systems upon account closure, subject to statutory record-retention laws.
• Right to Rectification: The right to dispute and rectify any inaccurate or incomplete personal information.
• Right to Data Portability: The right to obtain an electronic copy of your account data in a structured, commonly used format.
• Right to Damages: The right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data.
• Right to File a Complaint: If you believe your privacy rights have been violated, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) at complaints@privacy.gov.ph or visit https://privacy.gov.ph.

6. Security Measures & Data Retention

In compliance with Section 20 of R.A. 10173 and R.A. 10175, JazzuCourt enforces comprehensive physical, technical, and organizational security measures—including SSL/TLS transport encryption, parameterized database queries to thwart SQL injection, strict role-based access controls, and rate-limited authentication endpoints. Personal data is retained only for as long as your account is active or as mandated for financial and booking audit records under Philippine commerce regulations.

7. Data Protection Officer (DPO) Contact

To exercise your data privacy rights, request account modifications, or file a privacy inquiry, please contact our designated Data Protection Officer: