Privacy Policy

Who we are and when this applies

Reserve.ph is operated by Dial-up Ventures PH. We provide booking, scheduling, payment coordination, reminders, intake forms, and related business tools for Philippine service businesses. You can contact us at support@reserve.ph or at the address below.

Our role

For our website, sales, account administration, billing, support, security, and product improvement activities, Reserve.ph determines why and how personal data is processed. For appointment records entered by or for a clinic or other business using Reserve.ph, that business generally controls the customer or patient relationship, and Reserve.ph processes the data to provide the service.

What we collect

We may collect names, email addresses, mobile numbers, business names, staff roles, login details, booking dates, selected services, service records, support messages, billing or subscription records, device identifiers, IP address, browser data, and cookie or analytics data. Payment card, wallet, or bank details may be handled by payment providers rather than stored directly by Reserve.ph.

Google sign-in

If you choose Google sign-in or connect Google in your account settings, we request the openid, profile, and email permissions. Google provides an account ID, name, email address, email verification status, and possibly a profile photo URL. We use the ID to recognize a linked account, the email to find or match an account, the name and email to prefill registration, and Google's verification status to decide whether your Reserve.ph email is already verified. These details let us create or link your account, sign you in, and help you finish a business account registration you started. Google sign-in does not request access to your Gmail, Google Calendar, or Google Drive data. Our Google Reviews feature uses a review link or Place ID supplied by a business; it does not read reviews through your Google sign-in connection.

How we store and delete Google sign-in data

We process Google's sign-in response in a temporary session, which may briefly hold a profile photo URL. If you start registration, your Google account ID, name, email, and verification status may be held in an encrypted registration token that expires after 30 minutes. If you submit the first step of business account registration but do not finish, the name, email, and mobile number you submitted are kept as described in Retention so we can help you complete your account. Once linked, we store Google as the sign-in provider and your Google account ID with your Reserve.ph account for as long as you keep Google sign-in connected. Your name and email become part of your Reserve.ph account profile, and a verified email may be recorded as verified. We do not save the Google access token, refresh token, or profile photo in your account. You can disconnect Google in account security settings after adding another sign-in method; this deletes the Google account link and ID but does not delete your Reserve.ph account or its other records. Contact us to request deletion of those records, subject to the retention rules below.

How we share Google sign-in data

We use service providers to host and secure Reserve.ph, to send account and service messages to your email address, and to manage customer relationships and onboarding support. These providers may process the account details needed for those services under our instructions. We may disclose Google sign-in data when required by law. We do not sell Google user data, share your Google account ID or profile photo with booking businesses or advertisers, or use Google sign-in data for promotional marketing, targeted advertising, or training general-purpose AI models.

Sensitive personal information

If a booking business requests or receives health-related details, appointment reasons, treatment-related notes, government-issued identifiers, age, or similar information, that data may be sensitive personal information under the Data Privacy Act of 2012. We process it only as needed to provide the booking service, under the relevant business's instructions, or where another lawful basis applies.

How we use information

We use information to operate the website and SaaS, create and manage accounts, process bookings, send confirmations and service messages, support customer accounts, generate receipts and reports, bill customers, secure and monitor the platform, prevent misuse, improve product performance, and comply with legal obligations. We send marketing only where permitted, using information provided directly to us rather than Google sign-in data. The specific Google sign-in uses described above remain subject to those limits.

Customer and client data

Reserve.ph customers decide what information they collect from their own clients through bookings and intake forms. Those customers are responsible for giving any required notices and obtaining any required consents from their clients. Reserve.ph processes that data to provide the service.

Marketing and analytics

We may use website and contact information you provide directly for product updates, business communications, analytics, and service improvement where permitted. Google sign-in data is used to create or link your Reserve.ph account, maintain your account profile, sign you in, send account or service messages, and help you finish a business account registration you started; it is not used for promotional marketing or advertising. We do not use appointment health details or intake health responses for advertising. We may contact business account holders by email or phone to help them set up and use Reserve.ph. If you start creating a business account and do not finish, we may use the contact details you entered, including those prefilled from Google sign-in, to help you complete it. You may opt out of promotional messages, although service, security, billing, and booking-related messages may still be sent.

Security

We use administrative, technical, and organizational safeguards designed to protect personal data, including Google sign-in details. Access to account information is restricted to authorized personnel and service providers who need it to operate and support the service. Intake and service-record data is encrypted at the tenant level and stored securely, with access controls intended to keep each business account separated from other tenants.

Sharing and service providers

We may share information with service providers that help us host the platform, send messages, process payments, provide analytics, prevent fraud, manage customer relationships and onboarding support, and support customers. Google sign-in data is shared only as described in the Google sign-in section above, subject to the limited uses stated there. We may also disclose other information when required by law, to protect rights and safety, or as part of a business transfer.

Retention

We keep information only for as long as needed to provide the service, support business records, resolve disputes, meet legal obligations, establish or defend legal claims, and maintain security. Booking records are retained according to the relevant business account, our agreement with that business, and applicable law, then deleted, returned, anonymized, or securely disposed of when no longer needed. If you start creating a business account but do not finish, we keep the contact details you entered for up to 12 months after your last attempt, then delete them, including copies held by our customer relationship provider.

Your rights

Under the Data Privacy Act of 2012, data subjects may have rights to be informed, access personal data, object to processing, request correction or erasure, block or remove data, data portability where applicable, damages where applicable, and complain to the National Privacy Commission. To exercise data subject rights, or to raise a concern about how we handle your personal information, contact our Data Protection Officer at support@reserve.ph. If your request concerns a booking controlled by a clinic or other business, we may refer or coordinate the request with that business.

Security incidents

If a notifiable personal data breach occurs, we will notify the National Privacy Commission and affected data subjects when required by the Data Privacy Act of 2012 and its rules. We may also work with affected business customers so they can meet their own legal obligations.

International processing

Some service providers may process or store information outside the Philippines. When that happens, we use reasonable steps designed to protect information consistently with this Privacy Policy and applicable law.

Updates

We may update this Privacy Policy as our service, legal obligations, or data practices change. The latest version will be posted on this page with a new effective date. If we change what Google user data we request or how we use or share it, we will notify affected users by email or a prominent in-app notice and ask for their consent before using Google data for a new purpose.

Business address