Privacy Policy
Last updated 13 October 2026 · Version 2026-10-13-draft
Draft for review. This text is not final until every highlighted [bracket] is filled in and it is approved.
This policy explains how we handle your personal data, in line with the Data Privacy Act of 2012 (RA 10173).
1. Who is responsible
EKG Productions ([Registered business name], [Business address]) decides how your personal data is used on this website. Our Data Protection Officer is [DPO name], [DPO email].
2. What we collect
- Account details: full name, email, mobile number, and a password (stored in a protected form, never as plain text). If you sign in with Google, we receive your name and email from Google.
- Purchase details: the concert, tickets and seats you chose, amounts, and the status of your order and payment. We do not see or store your card number.
- Security details: IP address, browser type, approximate location, and your activity in the waiting room and security check. We use these to keep ticket sales fair and to stop bots.
- Messages you send us for support.
3. Why we use it
To create and run your account, process your order, send your e-tickets and order emails, check your ticket at the gate, give you support, protect the sale from bots and fraud, keep accounting records, and follow the law. We send promotions only if you choose to receive them.
4. Who we share it with
Service providers that help us run the website, only as needed: PayMongo (payments), Supabase (database and login), Vercel (hosting), Resend (email) and Cloudflare Turnstile (security check). Some of their servers are outside the Philippines. We do not sell your personal data.
5. Cookies
We use only essential cookies, for example to keep you logged in and to remember that you passed the security check. We do not use advertising cookies. If this changes, we will update this page and ask for your consent where required.
6. How long we keep it
Account and order records: [5 years], for tickets, support and accounting. Security logs: [1 year]. After that we delete or anonymize them.
7. Your rights
Under the Data Privacy Act you may: be informed about how your data is used, access it, correct it, object to its use, ask us to erase or block it, receive a copy in a common format, and claim damages if your rights were violated. To use these rights, email our Data Protection Officer. You may also file a complaint with the National Privacy Commission (privacy.gov.ph).
8. Security
We use encrypted connections, restricted staff access with roles, and activity logs. No system is perfectly secure, and we will act on and report any data breach as the law requires.
9. Children
This website is for people 18 and older.
10. Changes
We may update this policy. The latest version is always on this page.
11. Contact
[DPO email], or [Support email], [Messenger page], [Mobile number].