Paddle Fest 2026 Privacy Notice
Personal information controller: KMP Realty Estate Management
We ask for your personal information only to sell you a ticket, issue your QR code, admit you at the gate, and keep the records the law requires. The organizer is the personal information controller for this event and handles your information under Republic Act No. 10173 (the Data Privacy Act of 2012), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission. We never sell your information and we do not use it for advertising.
What we collect
- Your name (first, middle and last) — printed on your ticket and used to verify you at the gate.
- Your mobile number — so we can reach you about your order or an event advisory.
- Your email address — where your order confirmation and your QR tickets are sent.
- Your address, if you choose to give it — used only on your receipt and in our sales records.
- Your order details: the tickets you bought, the amounts, any promo code, the payment method and the payment reference number.
- The proof of payment you upload yourself, when you pay by GCash or bank transfer.
- Entry records: the date, time and gate of every scan of your QR code, and which staff account scanned it.
- Security records: the IP address and browser of the device used to place the order.
Why we collect it
- Issuing, delivering, reprinting and verifying your tickets and receipts.
- Confirming your payment and preventing double or fraudulent payments.
- Validating your QR code at the entrance so each ticket is used only once.
- Contacting you about your order, or about a change, delay or safety advisory for the event.
- Counting attendance and keeping the sales and accounting records the organizer is required to keep.
- Protecting the event and other guests against fake, shared or duplicated tickets.
Who else sees it
- Our payment provider, when you pay online. You enter your payment details on the provider's own secure page — this website never sees your card, wallet PIN or bank login, only the result and the reference number.
- Our hosting and email providers, which store this website and deliver our messages on our instructions.
- Authorized event staff at the gate, who see only the ticket details needed to admit you.
- Government agencies, law enforcement or the venue, when a valid legal request or a safety or public health requirement applies.
- Our service providers act only on our instructions and may not use your information for their own purposes.
How we protect it
- The whole website, including checkout, is served over an encrypted HTTPS connection.
- Your order page opens only with the private link we send you; an order number alone cannot open it.
- Each QR code is a one-time random token that carries no personal information, and it is accepted for one successful check-in only.
- Staff accounts are limited to the roles and permissions they need, and passwords are stored only as one-way hashes.
- Every staff action on an order, ticket, payment or setting is written to an audit log.
Your rights under the Data Privacy Act
- To be informed that your personal information is being collected and processed, and how.
- To object to the processing, and to withdraw a consent you have given.
- To access the personal information we hold about you and how it was processed.
- To correct any information that is inaccurate or out of date.
- To have information erased or blocked when it is incomplete, outdated, false, unlawfully obtained or no longer needed.
- To data portability — to receive a copy of your information in a commonly used electronic format.
- To be indemnified for damages caused by a violation of your rights under the Data Privacy Act.
- To complain to the National Privacy Commission (privacy.gov.ph) if you believe your rights have been violated.
We keep your order, ticket and entry records for as long as the event needs them and afterwards for the period required for financial, tax and dispute records — normally up to five (5) years from the date of your order. Payment proof images are kept only until the payment has been verified and the period for disputes has passed. Records that are no longer needed are securely deleted or stripped of anything that identifies you.
To ask about this notice, or to access, correct, erase or object to the use of your information, message the organizer using the contact details on this page. Please use the subject “Data Privacy Request” and include your order number so we can find your record. We answer within a reasonable period and within the periods set by the National Privacy Commission. Take note that withdrawing your consent or asking us to erase your details before the event may mean we can no longer validate your ticket at the gate.
- National Privacy Commission — privacy.gov.ph
Buying a ticket also means accepting the ticket terms. Lost your tickets? Use Find My Tickets instead of sending your details again.