Privacy Policy
Last updated: June 10, 2026
1. Introduction
Welcome to Spot Locker. This site is a white-label court booking experience powered by the Spot Locker platform ("Platform"), operated by Spot Locker ("we," "our," or "us"). Spot Locker is the venue you are booking with. For personal information processed through the Platform (including sign-in, bookings, and account features), Spot Locker is the personal information controller. We follow the Data Privacy Act of 2012 (Republic Act No. 10173).
This Privacy Policy explains what information we collect, why we use it, who we share it with, how long we keep it, and your rights.
When you submit a booking, you confirm that you have read and agree to this Privacy Policy and that we may collect and use your personal information as described here. If you do not agree, please do not submit a booking.
If you only browse the Platform without booking, we may still collect limited technical data (such as cookies or security logs), as described below.
2. When We Are Allowed to Use Your Information
We use your personal information only when the law allows. This includes when:
- We need it to handle your booking (our agreement with you)
- You consent—for example, when you submit a booking and agree to this Policy
- We have a valid business need that respects your rights—for example, preventing fraud, keeping the Platform secure, or improving our service
- The law requires us to keep or use certain records
If we rely on your consent, you may withdraw it as described in Section 10. Withdrawing consent does not undo processing that already happened. Some information is required to complete a booking; without it, we may not be able to confirm your reservation.
3. Information We Collect
3.1 Personal Information You Provide
When you use our Platform, we may collect:
- Booking details: Name, phone number, email (if you give it), court choice, date and time, and booking reference
- Court owner details: For venue operators: business information, court descriptions, photos, and contact details they provide
- Messages to us: Feedback, support requests, and other communications you send
- Google Sign-In (when enabled): If you choose "Sign in with Google," we receive information from Google such as your name, email address, and profile picture, as permitted by your Google account settings and Google’s policies. We use this to identify your account and show your bookings.
3.2 Information Collected Automatically
- Usage data: Pages you visit and how you use the Platform
- Device data: Browser type, operating system, IP address, and similar technical information
- Cookies: Small files used for sign-in, preferences, and security (see Section 4)
3.3 Payments — What We Do Not Collect on the Booking Form
We do not ask for your card number, e-wallet login, bank account, or payment method (such as GCash, Maya, or card) on our booking form.
The booking form only collects what we need to reserve a court—such as your name and phone number. Paying the venue (cash, bank transfer, QR code, or similar) is separate. Instructions may appear after you book, but we do not collect your payment details on the form itself.
If a venue offers online payment, you enter payment details on the payment provider’s site—not ours. We may only receive whether payment succeeded and a reference number to match your booking.
4. Cookies and Outside Services We Use
We rely on trusted companies to host and run the Platform. They may handle personal information only to perform their work for us and must protect it under their agreements with us, where applicable.
Examples include:
Supabase
Stores booking data and runs our backend. Data may be kept outside the Philippines.
Netlify
Hosts the website. May log technical data such as IP addresses.
Payment providers (when enabled)
Such as PayRex or PayMongo for optional online pay. They collect payment details from you directly; we do not store your payment method on the Platform.
Cloudflare Turnstile (when enabled)
Helps block bots and abuse. May use device and interaction data.
Analytics (when enabled)
Helps us understand how the Platform is used. We aim to limit personal data in these tools.
Google Sign-In
When enabled, Google LLC provides authentication. Google may process device and account data according to Google’s Privacy Policy. We receive only the profile fields needed to sign you in and link your bookings.
5. How We Use Your Information
We use your information to:
- Run the booking Platform
- Create and manage your court reservations
- Send your booking details to the court you chose
- Send confirmations, reminders, and booking-related messages
- Confirm optional online payments (status or reference only—not your card or e-wallet details)
- Improve the Platform and fix problems
- Prevent fraud and misuse
- Authenticate you when you use Google Sign-In (when enabled)
- Meet legal requirements in the Philippines
6. Who We Share Information With
Spot Locker is responsible for personal information collected for bookings on the Platform. The court you book with receives the details needed for your reservation (such as your name, phone number, and time slot). They should use that information only to run the venue—not for unrelated marketing or purposes.
We may also share information:
- Courts you book: Name, phone, date, time, court, and related booking information
- Service providers: Companies that help us host or secure the Platform (see Section 4)
- Legal requests: When Philippine law, a regulator, or a court requires it
- Business changes: If our business is sold or merged, with notice when the law requires it
- With your permission: For any other purpose you clearly agree to
We do NOT sell your personal information to third parties.
7. How We Protect Your Information
We use safeguards that fit the type of data we handle, including:
- Encrypted connections (HTTPS) when data travels to or from the Platform
- Access controls on our systems and database where applicable
- Security monitoring and updates
- Review of vendors that handle personal data on our behalf
No online system is perfectly secure. We work to protect your information, but we cannot promise absolute security.
8. How Long We Keep Information
We keep information only as long as we need it, including:
- While your booking is active and for related customer support
- Up to seven (7) years for booking and transaction records when the law requires it for tax, accounting, or compliance
- A shorter time for server and security logs, unless we must keep them longer for an investigation
You may ask us to delete information we hold about you. We will do so when we can, but we may need to keep some data if the law requires it or for valid legal claims.
9. If a Data Breach Occurs
If we learn of a breach of personal data that could seriously harm people, we will take steps to contain it, assess what happened, and notify the National Privacy Commission and affected users when the Data Privacy Act requires us to.
If you think your information was exposed because of the Platform, contact us right away using Section 14.
10. Your Rights (Philippines)
Under the Data Privacy Act, you may have the right to:
- Be informed: Understand how we collect and use your data (this Policy)
- Access: Ask for a copy of personal data we hold about you
- Correct: Ask us to fix inaccurate or incomplete data
- Delete or block: Ask us to delete or stop using your data when the law allows
- Object: Object to certain uses of your data, where the law allows
- Withdraw consent: Withdraw consent when we rely on it—some features may stop working
- Damages: Seek compensation when the law allows for certain wrongful use of your data
- Complain to the NPC: File a complaint with the National Privacy Commission if you believe your rights were violated
To use these rights, contact us using Section 14. We may ask you to confirm your identity. We will respond within the time frames required by law.
You can also visit https://privacy.gov.ph for information about complaining to the NPC.
11. Users Under 18
The Platform is for users 18 and older. We do not knowingly collect information from children. If you think a child gave us personal information, contact us and we will delete it.
12. Data Stored Outside the Philippines
Some of our service providers store or process data in other countries (for example, the United States). When we send data abroad, we follow the Data Privacy Act—for example, by using contracts that require appropriate security and confidentiality, and sharing only what is needed to run the Platform.
13. Changes to This Policy
We may update this Privacy Policy. The new version will appear on this page with a new "Last updated" date. For important changes, we may also show a notice on the Platform.
14. Contact Us
For privacy questions, data subject requests, or to exercise your rights under the Data Privacy Act, contact the platform operator:
For booking or venue-specific questions (hours, court rules, on-site payments), contact Spot Locker using the details on this site or at privacy@spot-locker.com.
15. Governing Law
This Privacy Policy follows the laws of the Republic of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173) and rules from the National Privacy Commission.