Privacy Policy

Depending on how you use OnePlan, we may collect and process the following information:

• Personal and account information: name, email address, phone number, and account credentials.
• Event and booking information: event name and type, event date and time, guest count, venue and service selections, and special requests.
• Communication information: inquiries, messages, and other communications exchanged through OnePlan.
• Quotation and payment-related information: quotation details, reservation-fee status, payment status, and proof of payment that you choose to upload.
• Technical and security information: information needed to maintain account security, diagnose issues, and help prevent unauthorized access or misuse.

Please avoid including sensitive personal information in special requests unless it is necessary for your booking.

We use personal information for purposes related to operating OnePlan and managing event requests, including to:

• create and manage client accounts;
• receive and respond to event booking requests;
• check venue availability and coordinate event schedules;
• prepare and communicate quotations;
• manage booking progress and send relevant updates;
• receive and verify submitted reservation-fee payment proof;
• maintain booking and payment-related records;
• protect OnePlan against unauthorized access, misuse, and security threats; and
• address inquiries, complaints, disputes, and applicable legal or accounting requirements.

We will not use your information for an unrelated purpose without an appropriate lawful basis and, where required, providing further notice or obtaining consent.

Information is generally collected directly from you when you register for an account, submit a booking request, send a message, provide event details, or upload payment proof. It is processed electronically through OnePlan and the technology services used to operate the system. Authorized personnel may access information according to their responsibilities in handling client accounts and bookings.

OnePlan may perform routine system checks, such as validating submitted fields and checking schedule availability. Booking acceptance and the verification of submitted payment proof are handled by authorized Patio Florencia personnel. OnePlan does not automatically make the final booking-approval or payment-proof verification decision.

Under the Philippine Data Privacy Act of 2012, personal information is processed only when an applicable lawful criterion is present. Depending on the activity, the business may rely on the following bases:

• Contractual necessity or steps requested before a contract: to respond to booking inquiries, create and manage an account, prepare quotations, and administer booking-related services requested by you.
• Legal obligation: to maintain or disclose records when required by applicable laws, regulations, or lawful government processes.
• Legitimate interests: to protect the security and proper operation of OnePlan, prevent misuse, investigate suspicious activity, and maintain reliable system records, where those interests are not overridden by your rights and freedoms.
• Consent, when applicable: for a specific purpose where consent is the appropriate lawful basis. You may withdraw consent, subject to legal limitations and any other lawful basis that may permit continued processing.

Sensitive personal information will not be intentionally requested through ordinary booking forms. If its processing becomes necessary, it must satisfy an applicable condition under the Data Privacy Act.

Submitting a booking request does not constitute blanket consent to processing for unrelated purposes.

Information may be accessed or processed, as necessary, by:

• authorized FB & 3 Kids Pool and Pavilion personnel who handle client requests and bookings;
• authorized technical administrators and support personnel maintaining OnePlan;
• hosting, database, email, security, and other technology service providers supporting the system; and
• government authorities or other parties when disclosure is required by law or a lawful order.

Recipients should only access information necessary for their authorized responsibilities. Your personal information is not intended to be publicly displayed or made available to other clients.

Personal information is retained only for as long as necessary for the declared purpose, to address booking-related matters, to establish, exercise, or defend legal claims, or to comply with applicable legal obligations. When information is no longer needed and no valid retention ground applies, it will be securely deleted, destroyed, or anonymized.

• Account information: while the account is active and, after closure, only as long as necessary to resolve outstanding booking matters, claims, or legal obligations.
• Inquiries, booking details, quotations, and communications: while needed to respond to requests, administer bookings, resolve disputes, and meet any applicable legal obligations.
• Accounting records and supporting documents: where a record forms part of books of accounts or supporting accounting records subject to BIR preservation requirements, it will be retained for the applicable statutory period. Revenue Regulations No. 7-2024 generally provides for five years, measured from the day after the return-filing deadline or, if filed late, from the actual filing date, for the taxable year in which the last entry was made. Exceptions may require longer preservation. This five-year rule does not automatically apply to every item of personal information.
• Technical and security records: only for the period necessary for system security, troubleshooting, and investigation of relevant incidents, subject to the retention schedule approved by the business.

The business should maintain and follow a written retention schedule that sets the specific periods for each category of information.

The business uses reasonable administrative, physical, and technical safeguards intended to protect personal information against unauthorized access, disclosure, alteration, loss, and misuse. Access to booking information is restricted to authorized users based on their responsibilities. No electronic system or method of transmission can be guaranteed to be completely secure.

Subject to the Data Privacy Act of 2012 and its applicable limitations, you may exercise rights that include:

• Right to be informed: to know whether and how your personal information is processed.
• Right to access: to request access to personal information held about you.
• Right to rectification: to request correction of inaccurate or incomplete information.
• Right to object: to object to processing when the conditions under the law are met.
• Right to erasure or blocking: to request removal or blocking when legally justified.
• Right to data portability: to obtain a copy of your information in a commonly used electronic format when applicable.
• Right to damages: to seek compensation when provided by law for damages caused by inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal information.
• Right to lodge a complaint: to bring a concern to the National Privacy Commission when you believe your privacy rights have been violated.

These rights are subject to applicable legal conditions and exceptions. Certain records may need to be retained to comply with legal obligations or to establish, exercise, or defend legal claims.

For questions, access or correction requests, objections, or other concerns involving your personal information, contact the business using its approved privacy contact:

patioflorencia@yahoo.com

Please provide enough information to identify your account or request. The business may ask you to verify your identity before acting on a request.

OnePlan relies on technology services to operate and maintain its website, application, database, communications, and security. These service providers may process information on behalf of the business when necessary to provide their services. The business should ensure that appropriate safeguards and agreements are in place when personal information is processed by service providers.

This Privacy Policy may be updated when OnePlan's features, business operations, or applicable privacy requirements change. The latest version will be published through OnePlan. Please review this page periodically.

Registered business name

FB & 3 Kids Pool and Pavilion

Commonly recognized venue name

Patio Florencia

Business address

Metrogate Complex, Pandayan, Meycauayan, Bulacan, Philippines

Privacy contact email

patioflorencia@yahoo.com

For privacy-related questions and personal-data requests, please use the email address above. No individual Data Protection Officer is named in this notice because the beneficiary has not provided a designated officer's name or title.