Privacy Policy
1. Who we are
Sugbo PlayStation Rentals, operating in Cebu City, Philippines, is the Personal Information Controller for data collected through this website, our booking flow and our Facebook and TikTok channels. Privacy concerns can be sent to our Data Protection Officer at sugboplaystationrental@gmail.com or through Facebook Messenger.
2. What we collect
Identity and contact data (name, mobile, email, Facebook profile name), delivery data (address, barangay, landmark, notes), verification data (government ID image and a verification selfie), booking data (package, dates, add-ons, reference), payment data (transaction reference, method, amount and status only) and technical data (device, browser, IP address, analytics events).
3. Why we collect it and our lawful basis
To fulfil the rental contract (scheduling, delivery, returns), to verify identity and prevent fraud or theft of high-value equipment, to process payments and refundable deposits, to comply with legal obligations, and with your consent to send booking updates and promotions. Marketing consent can be withdrawn anytime without affecting your rental.
4. How we handle government IDs
ID images are uploaded over an encrypted HTTPS connection, stored encrypted at rest in access-controlled storage, and viewable only by authorized personnel performing verification. We never post, sell or share ID images. They are permanently deleted 30 days after your deposit is returned and the rental is closed. We do not use IDs for facial recognition profiling or automated decisions with legal effect.
5. Payment security
Payments are processed by licensed providers (GCash, Maya and our card acquirer). Card numbers, CVV codes and e-wallet credentials are entered on the provider's secure interface and never touch our servers. We retain only the transaction reference, method, amount and status needed for accounting, deposit release and disputes.
6. Sharing and disclosure
We share the minimum data required with our delivery riders (name, address, contact, delivery window), payment providers, hosting and CRM providers under data processing agreements, and law enforcement or courts where legally required, including theft or unlawful withholding of equipment. We do not sell personal data.
7. Retention
Booking and transaction records are kept for the period required by Philippine tax and accounting rules. Verification media is deleted 30 days after rental closure. Marketing contact data is kept until you unsubscribe. Analytics data is retained in aggregated form.
8. Your rights under the Data Privacy Act
You have the right to be informed, to object, to access, to rectify, to erasure or blocking, to damages, to data portability and to lodge a complaint with the National Privacy Commission. To exercise any right, message our Data Protection Officer. We respond within 15 working days and may ask you to confirm your identity first.
9. Security measures and breach response
We apply HTTPS across the site, encryption at rest for verification media, role-based access with two-factor authentication for admin accounts, activity logging and regular access reviews. For a breach involving sensitive information, we notify affected renters and the National Privacy Commission within 72 hours of discovery, as required by law.
10. Cookies and analytics
We use essential cookies to keep your booking progress and optional analytics cookies to understand which packages and pages perform best. A consent banner lets you accept or reject non-essential cookies, and your choice can be changed anytime from the footer.