Privacy Notice
Version 1.0 · in effect from Monday, October 5, 2026
Who we are
Racket Yard Sports Center ("Racket Yard", "we", "us") operates the booking website at racketyardph.com and the racket sports facility at 3rd Floor, D' Arcade Food Park, 7433 Yakal, San Antonio, Makati City, 1203 Metro Manila.
Racket Yard Sports Center is a sole proprietorship registered in the Philippines. We are the Personal Information Controller for the personal data described here, under the Data Privacy Act of 2012 (Republic Act No. 10173).
Our Data Protection Officer is Janelle Sy, contactable at racketyardph@gmail.com or 0969 173 1198.
What we collect
When you book with us, we collect:
- Your name
- Your email address
- Your mobile number
- Details of your booking — date, time, duration, sport, racket rentals, coaching, and any coach selected
- Your proof of payment, which you upload as an image
If you create an account, we also collect your password, stored in encrypted form. We cannot see it.
If you buy a package, we keep a record of your credits, when they were bought, when they were first used, and when each was redeemed.
Our website uses cookies necessary for it to function — principally to keep you logged in. We do not use advertising or tracking cookies.
Why we collect it
We use your personal data to:
- Take and confirm your booking, and hold your slot while you pay
- Verify that your payment was received
- Send you booking confirmations and updates about your booking
- Manage your account and package credits, if you have them
- Run and improve the facility — for example, understanding how busy our courts are
- Meet our tax, accounting, and other legal obligations
Our legal basis is the performance of our contract with you when you book, and our legitimate interests in operating the business. Where we rely on your consent, you may withdraw it at any time.
Proof of payment — please read this
When you upload a screenshot of your GCash or BPI transfer, that image often contains information beyond the amount paid — account names, account numbers, reference numbers, and sometimes your balance.
We ask that you cover or crop anything you do not want to share before uploading. We only need to see the amount, the date, and the reference number.
These images are:
- Stored securely and are not publicly accessible
- Visible only to our staff and management, for verifying payment
- Never shared with other customers
- Automatically deleted three months after your booking
We keep the record of your booking and payment for longer, as set out below — it is only the image that is deleted.
Who we share it with
We do not sell your personal data. We do not share it for marketing.
We use these service providers, who process data on our behalf under contract:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and file storage | Outside the Philippines |
| Vercel | Website hosting | Outside the Philippines |
| Resend | Sending booking emails | Outside the Philippines |
| Cloudflare | Domain, DNS, and email routing | Outside the Philippines |
Because these providers operate outside the Philippines, your personal data is transferred abroad. We take reasonable steps to ensure it remains protected to the standard required by the Data Privacy Act.
We may also disclose personal data where required by law, or to establish or defend a legal claim.
How long we keep it
| What | How long |
|---|---|
| Proof of payment images | 3 months, then automatically deleted |
| Booking and payment records | 5 years |
| Account details | Until you ask us to delete your account |
| Package records | 5 years after the package expires or is fully used |
Your rights
Under the Data Privacy Act you have the right to:
- Be informed about how we process your personal data
- Access the personal data we hold about you
- Correct anything inaccurate
- Object to our processing of your data
- Erase or block your data where the law allows
- Data portability — receive your data in a usable electronic format
- Damages where you have suffered from a violation of your rights
- Complain to the National Privacy Commission
To exercise any of these, contact our Data Protection Officer at racketyardph@gmail.com. We will respond within the period required by law.
If you are not satisfied with our response, you may complain to the National Privacy Commission at privacy.gov.ph.
Children
[FLAGGED FOR LEGAL REVIEW — see section B. This reflects the owner's choice of no age restriction:]
We do not restrict bookings by age. If you are under 18, we ask that a parent or guardian reviews this notice and our Terms & Conditions with you before you book, and that they are aware of the personal data you provide to us.
If you are a parent or guardian and would like to see, correct, or delete personal data we hold about your child, contact our Data Protection Officer at racketyardph@gmail.com and we will act on your request.
How we protect your data
We use encrypted connections, restrict access to staff who need it, store passwords in hashed form, keep payment images in private storage that is not publicly reachable, and delete data when we no longer need it.
No system is completely secure. If a breach occurs that puts your rights at serious risk, we will notify you and the National Privacy Commission as required by law.
Changes to this notice
If we change this notice we will post the updated version here with a new date. Material changes will be notified to account holders by email.
Contact us
Racket Yard Sports Center 3rd Floor, D' Arcade Food Park, 7433 Yakal, San Antonio, Makati City, 1203 Metro Manila Email: racketyardph@gmail.com · Phone: 0969 173 1198 Data Protection Officer: Janelle Sy, racketyardph@gmail.com
When we change these, we publish a new version rather than editing this one. Your booking records the version you accepted, and that version continues to apply to it.