1. Introduction
FunRide PH (“we”, “our”, “us”) is committed to protecting your personal data in accordance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 (“DPA”), and its Implementing Rules and Regulations. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights as a data subject.
2. Data We Collect
We collect the following categories of personal data:
- Account data: Full name, email address, and password (hashed — never stored in plain text).
- Registration data: Contact number, date of birth, emergency contact details, shirt size, and any other fields required by specific event organizers.
- Payment data: Transaction reference numbers issued by PayMongo. FunRide PH does not store raw card numbers or full bank account details — these are handled exclusively by PayMongo in accordance with PCI-DSS standards.
- Usage data: Log data, IP address, browser type, pages visited, and timestamps, collected automatically when you use the Platform.
3. Purpose and Legal Basis for Processing
We process your personal data for the following purposes:
- Contract performance: To create and manage your account, process event registrations, send confirmation and QR ticket emails, and provide customer support.
- Legitimate interests: To improve the Platform, detect and prevent fraud, ensure platform security, and generate anonymized aggregate statistics (e.g., total finishers, events listed).
- Compliance: To comply with applicable Philippine laws and regulations.
- Consent: For any marketing communications — you may withdraw consent at any time.
4. Sharing of Personal Data
We share your personal data only with the following parties:
- Event organizers: Your registration information (name, contact number, shirt size, etc.) is shared with the organizer of the specific event you register for, so they can manage participant lists and bib/kit distribution.
- Payment processor (PayMongo):Payment details are processed directly by PayMongo. Please review PayMongo’s own privacy policy for details on how they handle your data.
- Infrastructure providers: Supabase (database and authentication hosting) and Vercel (web hosting), both of which are bound by data processing agreements.
- Email delivery (Resend): Your email address is used to deliver transactional emails such as registration confirmations and QR tickets.
We do not sell your personal data to third parties for marketing purposes.
5. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes described in this Policy, and in any event for the minimum period required by applicable Philippine law. Registration records may be retained for up to seven (7) years for accounting and audit purposes. You may request earlier deletion subject to legal retention requirements.
6. Your Rights Under the Data Privacy Act
As a data subject under RA 10173, you have the following rights:
- Right to be informed — to know how your data is being processed.
- Right of access — to request a copy of your personal data held by us.
- Right to correction — to request correction of inaccurate data.
- Right to erasure — to request deletion of your data, subject to legal retention obligations.
- Right to object — to object to the processing of your data for certain purposes.
- Right to data portability — to receive your data in a structured, commonly used format.
- Right to file a complaint — with the National Privacy Commission (NPC) of the Philippines if you believe your rights have been violated.
To exercise any of these rights, contact our Data Privacy Officer at hello@funrideph.com. We will respond within fifteen (15) business days.
7. Security
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These include encrypted data transmission (HTTPS/TLS), hashed password storage, row-level security in our database, and access controls for staff.
8. Cookies and Analytics
FunRide PH uses session cookies essential for authentication and platform functionality. We may use privacy-respecting analytics (Vercel Analytics) that do not identify individual users. We do not use third-party advertising cookies.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform at least fifteen (15) days before the change takes effect.
10. Contact
For privacy-related inquiries or to exercise your data rights, contact us at:
FunRide PH — Data Privacy Officer
Email: hello@funrideph.com
You may also file a complaint directly with the National Privacy Commission (NPC) of the Philippines at www.privacy.gov.ph.
