Version 2026-10-16-prelaunch
Privacy notice
This explains what Palipasan collects when you book an early table, why, and what you can ask us to do about it. It is written to meet the Philippine Data Privacy Act of 2012 (Republic Act 10173).
Who is responsible
Palipasan is the personal information controller. Reach us about anything in this notice at privacy@palipasan.com.
What we collect
- Your name. Shown to the restaurant on their door list so they can greet you and find your table.
- Your email address, if you sign in with Google. Used to send your booking confirmation and reminders.
- Your mobile number, if you sign in by mobile. Used to verify it is really you, and so the restaurant can reach you if something changes.
- Your bookings. Which restaurant, which evening, party size, your booking code, whether you arrived, and whether you passed the table on.
- Missed bookings. We count no-shows, because three of them pause an account for 30 days.
We do not take payment, so we never hold card or bank details. You pay the restaurant directly.
Why we are allowed to
Mostly because we need it to give you the booking you asked for. Reminders and the no-show rule rest on your consent, which you gave when you signed in and can withdraw at any time by writing to us.
Who else sees it
- The restaurant you booked. Your name, party size, seating time and booking code. Nothing else, and only for their own bookings.
- Our suppliers. Supabase hosts the database in Tokyo, Japan, Vercel serves the site, and our email provider sends reminders. They process data on our instructions only.
- A friend you Pasa a table to sees the restaurant, time and party size. They do not see your name or contact details.
We do not sell personal information, ever.
Where it goes
Our database is hosted by Supabase in Tokyo, Japan (ap-northeast-1), so your information is transferred outside the Philippines. We rely on contractual protections with our suppliers to keep it protected to the same standard.
How long we keep it
Booking records are kept for 24 months so restaurants can resolve disputes and the no-show count means something. Your account is kept until you ask us to delete it. Ask, and we remove your personal details and leave the restaurant’s booking counts anonymous.
Your rights
Under the Data Privacy Act you may ask to see what we hold, correct it, object to how we use it, have it deleted or blocked, receive a copy in a portable form, and be told if there has been a breach that puts you at risk. You may also complain to the National Privacy Commission. Email privacy@palipasan.com and we will answer within 15 working days.
Changes
If we change this notice materially we will ask you to agree again the next time you sign in. We record which version you agreed to and when.