Privacy Policy

This Policy applies to Pikko.ph websites, booking pages, customer and merchant accounts, administrative tools, emails, and related support interactions. It should be read with our Terms & Conditions.

Pikko controls personal data needed to operate accounts, secure and improve the platform, administer merchant subscriptions, and maintain marketplace and transaction records. A venue merchant separately controls customer information it uses to provide the court, verify manual payments, communicate about bookings, administer venue policies, and meet its legal obligations. Depending on the activity, Pikko may also process booking data for or with that merchant.

Depending on how you use Pikko, we may collect:

• Identity and contact data: name, email address, mobile number, account identifiers, verification status, and authentication information.
• Booking data: merchant, site, court, dates, hour blocks, prices, booking status, guest-booking token records, notes, cancellation information, and booking history.
• Payment data: payment method, amount, status, gateway reference, timestamps, fees, refund or reconciliation records, and manual-payment screenshots. Payment providers handle full payment credentials.
• Merchant and staff data: business identity, contact details, addresses, venue coordinates, sites, courts, rates, operating rules, subscription records, staff roles, and uploaded business media.
• Technical and usage data: IP address, browser and device information, security and access logs, session cookies, error records, pages and actions used, and approximate or device location only when requested and permitted.
• Communications: support messages, dispute information, policy requests, and email delivery records.

Please avoid including unrelated financial, identification, health, or other sensitive information in notes or payment screenshots. Where possible, obscure details that the merchant does not need to verify the transfer.

We collect data directly from customers, guests, merchants, and staff; automatically from devices and platform activity; from payment, authentication, email, hosting, storage, and security providers; and from another authorized user who creates a booking or merchant record on your behalf.

We process personal data to:

• create and secure accounts, authenticate users, and manage roles;
• display availability, create bookings, reserve courts, verify payments, and send confirmations or operational notices;
• share booking details with the responsible venue merchant and support cancellations, refunds, reconciliation, and disputes;
• operate merchant trials, subscriptions, invoices, gateway entitlements, reporting, and customer records;
• prevent fraud, abuse, double bookings, unauthorized access, and security incidents;
• diagnose errors, maintain the platform, analyze aggregate performance, and improve features;
• comply with legal, accounting, tax, regulatory, and lawful government requirements; and
• send marketing only when permitted, with a way to opt out.

We process data when necessary to provide a requested booking or platform service and perform a contract; to comply with legal obligations; for legitimate interests such as platform security, fraud prevention, service improvement, and business administration when those interests do not override individual rights; and with consent where consent is required. Consent may be withdrawn without affecting processing already lawfully completed.

We may share relevant information with:

• Venue merchants and authorized staff so they can fulfill bookings, verify payments, contact customers, and apply venue policies.
• Service providers supporting hosting, databases, authentication, file and image storage, email, maps, analytics, security, and technical operations.
• Payment providers and financial partners to create QR payments, confirm status, prevent fraud, reconcile transactions, and process authorized refunds.
• Professional advisers, regulators, courts, and authorities when reasonably necessary to protect rights, comply with law, or respond to valid legal process.
• A successor or transaction participant in a merger, financing, reorganization, or transfer of the platform, subject to appropriate confidentiality and legal safeguards.

We do not sell personal data as a standalone product. Merchants may not use booking data for unrelated marketing without an appropriate lawful basis.

Pikko and its providers may process data in the Philippines and other locations where they maintain infrastructure or support operations. When data is transferred or remotely accessed across borders, we require appropriate contractual, organizational, and technical safeguards consistent with applicable data-protection requirements.

We retain personal data only as long as reasonably necessary for the purposes described above, including active accounts, booking fulfillment, transaction reconciliation, merchant administration, security, dispute handling, and legal, tax, and accounting requirements. Different records have different retention periods.

Booking and payment records may be kept after a booking for legitimate recordkeeping and dispute purposes. Manual-payment screenshots should be removed or restricted when they are no longer necessary for verification, disputes, or compliance. Data may be retained longer when required by law, legal hold, fraud prevention, or a pending claim. Aggregated or de-identified information may be retained where it no longer identifies an individual.

We use reasonable organizational, physical, and technical measures designed to protect data, including access controls, tenant separation, encrypted connections, protected secrets, audit records, and service-provider safeguards. No internet service can guarantee absolute security.

Users must protect passwords and private booking links. If you suspect unauthorized access or an exposed payment screenshot, contact Pikko and the relevant merchant promptly.

Pikko uses cookies and comparable browser storage necessary for login sessions, security, preferences, and reliable platform operation. We may use limited measurement tools to understand performance and feature use. Where required, optional tracking will be subject to notice and consent controls.

Subject to the Data Privacy Act of 2012 and applicable limitations, you may have rights to be informed, access personal data, object to or withdraw consent for certain processing, correct inaccurate data, request erasure or blocking, obtain portable data where applicable, claim damages, and file a complaint with the National Privacy Commission.

We may need to verify your identity and clarify the data or processing involved before acting. Some records cannot be immediately deleted when retention is required for a booking contract, legal obligation, security investigation, accounting record, or legal claim. For merchant-controlled booking data, we may direct or transmit the request to the responsible venue merchant.

Pikko is not directed to children acting independently. A booking for a minor should be created and supervised by a parent or legal guardian. If we learn that a child’s data was submitted without appropriate authority, we will take reasonable steps to review and delete or restrict it, subject to legal and safety requirements.

We may update this Policy to reflect platform, provider, or legal changes. The revised version will show a new last-updated date. Material changes may also be communicated through the platform or registered contact information.

For privacy questions or requests, email privacy@pikko.ph with enough detail to identify the account, booking, or merchant record involved. Venue-service and cancellation matters should first be sent to the merchant shown on the booking page.

If a privacy concern is not resolved, you may lodge a complaint with the Philippine National Privacy Commission. Platform-support questions may be sent to support@pikko.ph.