Ventry collects government IDs and business permits, which are sensitive personal information under the Data Privacy Act. That brings obligations including appointing a Data Protection Officer and, depending on your scale, registering your processing system with the National Privacy Commission. Have a Philippine privacy practitioner review this before launch. Fields marked in purple need your real details.
Who is responsible for your data
Ventry Corporation is the personal information controller for the data described here. Our registered office is at [registered business address].
Our Data Protection Officer is [DPO name], who can be reached at [dpo@ventry-app.com].
This policy explains what we collect when you use the Ventry app or website, why we collect it, and what you can do about it. It applies to clients, suppliers and organizers alike, with differences noted where they matter.
What we collect
Information you give us
- Account details — your name, email address, mobile number and password.
- Identity documents — a government-issued ID for verification. This is sensitive personal information under the Data Privacy Act and we treat it accordingly.
- Business documents, if you list as a vendor — DTI or SEC registration and your local business permit.
- Event details — the date, venue, headcount, budget and brief you provide when booking.
- Listing content, if you are a vendor — your packages, pricing, portfolio images and business description.
- Payout details, if you are a vendor — the bank or e-wallet account where we send your weekly payout.
- Messages you send through booking chat, and reviews you write.
- Support correspondence when you contact us.
Information we collect automatically
- Device and usage data — device type, operating system, app version, IP address, and which screens and listings you view.
- Approximate or precise location, if you allow it, so we can show vendors near you and filter by distance.
- Transaction records — what was booked, when, for how much, and the status of the escrow hold and release.
We do not store full payment card numbers. Card and e-wallet details are captured and held by our payment provider, [payment provider]. We receive only a transaction reference and the result.
How we use it
| Purpose | Data used |
|---|---|
| Create and run your account | Account details |
| Verify vendors and award badges | Government ID, business documents, booking history |
| Show you relevant vendors | Location, category and budget preferences, usage data |
| Process bookings and hold funds in escrow | Event details, transaction records, payout details |
| Enable booking chat | Messages, account details |
| Resolve disputes and process refunds | Booking record, chat history, transaction records |
| Prevent fraud and keep the platform safe | Device and usage data, identity documents, transaction patterns |
| Provide support | Support correspondence, account details |
| Meet legal and tax obligations | Transaction records, business documents |
| Send service updates | Email address, mobile number |
We do not sell your personal data. We do not share your contact details with vendors you have not booked with.
Our legal basis
Under the Data Privacy Act we process your data on these grounds:
- Performance of a contract — to deliver the booking, payment and escrow service you asked for.
- Consent — for precise location, marketing messages, and the processing of your government ID and other sensitive personal information. You may withdraw consent at any time, though some features will stop working.
- Legal obligation — to keep financial records and respond to lawful requests.
- Legitimate interests — to prevent fraud, secure the platform and improve the service, where this does not override your rights.
Who we share it with
- The vendor you book — your name, contact number, event details and brief, so they can deliver the service. They see what they need to do the job, not your full account history.
- The client who books you, if you are a vendor — your business name, listing, rating, verification tier and contact within the booking.
- Payment provider — [payment provider], to process payments, hold escrow and send payouts.
- Verification partners — [verification provider, if any], to confirm identity documents.
- Infrastructure and service providers — hosting, analytics, email and customer support tools, acting as our processors under contract.
- Authorities — where we are legally required, or where it is necessary to protect someone’s safety or our legal rights.
Some of these providers process data outside the Philippines. Where that happens, we take steps to ensure a comparable level of protection as required by the Data Privacy Act.
Location data
Ventry uses location to show vendors near you and to let you filter by distance within Davao and General Santos.
You control this through your device settings. If you decline precise location, you can still browse and book by choosing a city manually; only distance-based sorting is affected. We do not track your location in the background when the app is closed.
Messages and reviews
Booking chat is scoped to a single booking. We store these messages so that both sides have a record, and so we can resolve a dispute if one is raised.
We do not read your chats routinely. We access them when a dispute is raised, when abuse is reported, or where we are legally required to.
Reviews you publish are visible to other users together with your first name and city. Think of a review as public.
Cookies and analytics
Our website uses cookies and similar technologies to keep you signed in, remember preferences, and understand how the site is used.
Essential cookies are needed for the site to work. Analytics cookies help us see which pages are useful; these are set only where you have agreed, and you can change your mind at any time through [cookie settings link or browser instructions].
How long we keep it
| Data | Retention |
|---|---|
| Account details | While your account is active, then [e.g. 12 months] |
| Identity and business documents | [e.g. duration of listing + 5 years] |
| Transaction and payout records | At least 10 years, as required for Philippine tax and accounting |
| Booking chat | [e.g. 2 years after event] |
| Reviews | Retained for the life of the listing |
| Device and usage logs | [e.g. 12 months] |
When a retention period ends we delete the data or anonymise it so it can no longer identify you.
How we protect it
We use encryption in transit and at rest, access controls that limit who on our team can see what, logging of access to sensitive records, and regular review of our security practices.
Identity documents are stored separately from general account data and are accessible only to the staff who carry out verification.
No system is perfectly secure. Please use a strong, unique password and tell us promptly if you suspect unauthorised access to your account.
Your rights
Under the Data Privacy Act you have the right to:
- Be informed about how your data is collected and used.
- Access the data we hold about you.
- Correct anything inaccurate or out of date.
- Object to processing, including direct marketing.
- Erase or block data where it is unlawfully obtained, no longer necessary, or you withdraw consent.
- Data portability — receive your data in a commonly used electronic format.
- Damages for inaccurate, false, unlawfully obtained or unauthorised use of your data.
- Lodge a complaint with the National Privacy Commission.
To exercise any of these, email [dpo@ventry-app.com]. We will respond within 15 working days, or tell you if we need longer. We may ask you to confirm your identity first.
Some rights have limits. We may need to keep transaction records for tax purposes even after you close your account, and we may keep what is needed to resolve an open dispute.
If something goes wrong
If a personal data breach occurs that is likely to put you at real risk of serious harm, we will notify the National Privacy Commission and affected users within 72 hours of becoming aware of it, as the law requires, and tell you what happened and what to do.
Children
Ventry is for users aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
If you book an event for a minor — a debut or a birthday, for instance — please share only the details the vendor genuinely needs.
Changes to this policy
We will update this policy as the service changes. The effective date at the top always shows the current version. For material changes we will notify you in the app or by email before they take effect.
Contact and complaints
For any privacy question, or to exercise your rights:
- Data Protection Officer: [DPO name], [dpo@ventry-app.com]
- General support: support@ventry-app.com
- Post: [registered business address]
If you are not satisfied with our response, you may complain to the National Privacy Commission, 5th Floor, Delegation Building, PICC Complex, Pasay City, or through privacy.gov.ph.