Privacy Policy — GT-18

Last updated: September 5, 2026

GT-18 ("the App") helps golf tournament organizers and players manage registration, pairings, results, sponsorship, disputes, and finance for amateur golf events. This policy explains what information the App collects, how it is used, and the choices you have.

Who Operates GT-18

Organization / data controller	F.E. Santiago Management Consultancy (FESMC), DTI Business Name Reg. No. 6192464
Contact email	golf@fesmc.com.ph
Mailing addresses	Unit C2B Tower 2 Escalades Condo, 20th Avenue, San Roque, Cubao, QC 1109 Maxcor Lane, Scout Fuentebella Extension, Sacred Heart, Diliman, Quezon City, Metro Manila, Philippines, 1103

Information We Collect

To register you for tournaments and operate an event, GT-18 collects: your name, email address, WHS/GHIN Handicap Index, payment status and proof-of-payment images you submit, and any information you enter when creating or joining a tournament (course, format, entry fee, sponsorship details).

Third-Party Services This App Uses

Feature	Service	What's sent
Database & authentication	Supabase	Your account email, profile, registrations, and scorecards
App/website hosting	Vercel	Standard web request data (IP address, as with any web request)
Entry fee & subscription payments	PayMongo (primary — PHP) or Stripe (international cards, USD)	Your email address and payment details, handled entirely by the payment processor — not this app
Course location links	Your device's default maps app	Handled by your device’s operating system, not by GT-18 directly

How We Use Your Information

We use this information to run tournaments: confirming registration, managing pairings and results, verifying payments, resolving disputes, and communicating with you about events you've joined or organize. Organizers can see registrant details (name, handicap index, payment status) for their own tournaments only.

Payment Information

Proof-of-payment screenshots you upload are stored to verify entry fee payment and are visible to the tournament organizer for review. GT-18 does not process card payments directly or store full payment card numbers — those are handled entirely by PayMongo and/or Stripe.

Data Sharing

We do not sell your personal information, and we do not share it with advertisers. Registrant information is shared only with the organizer of the tournament you register for, as needed to run the event.

Data Security

Data is stored with our infrastructure providers using encryption in transit (HTTPS/TLS) and access controls (row-level security) that limit who can view it. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

Data Retention and Account Deletion

You may permanently delete your account and profile at any time from Profile → Delete account in the app. This is a genuine, permanent deletion — not a deactivation. Your account credentials and profile are permanently deleted. Tournament registrations and scorecards you submitted remain on record, associated with the tournaments you played in, so that organizers can preserve accurate results and event history — this is disclosed to you in-app before you confirm deletion.

Your Rights

You may request to access, correct, or delete your personal information, or ask what data we hold about you, at any time by emailing us at the address below. We will respond within a reasonable time and delete data unless we have a legal or contractual reason to retain it (for example, ongoing dispute records or tournament recordkeeping as described above).

Children's Privacy

GT-18 is not directed at children under 13, or the relevant minimum age in your jurisdiction, and we do not knowingly collect information from children. Minors may only use GT-18 under a parent or guardian's account and supervision, subject to individual tournament organizer rules.

Changes to This Policy

We may update this policy as the App evolves. Continued use of the App after changes are posted constitutes acceptance of the updated policy. We will update the "Last updated" date above when changes are made.

Contact — Who to Reach for Data-Related Inquiries

This app is registered to a named organization based in the Philippines. That means the Philippine Data Privacy Act (RA 10173), regulated by the National Privacy Commission (NPC), is the primary applicable law for this deployment — not just GDPR/CCPA as generic reference points. RA 10173 requires personal information controllers of a certain scale to designate a Data Protection Officer; confirm with counsel whether FESMC's processing activities trigger that requirement, and register with the NPC if so.

Contact email	golf@fesmc.com.ph
Phone	+63 2 7149 3882 (landline) · +63 956 790 7477 (mobile)
Data Protection Officer	Not separately designated here — confirm with counsel whether RA 10173 requires one for FESMC's scale/processing activities, and route DPO-specific inquiries to the contact email above in the meantime.
Response time commitment	Within a reasonable time; we aim for 30 days

This is a factual record of the details provided, not a certification that FESMC's privacy program meets RA 10173 in full — have counsel review the complete policy, registration status, and any required NPC filings before relying on this for a live deployment.