Privacy Policy

1. Introduction

Sama (“we”, “us”, “our”) is committed to protecting your personal information in accordance with Republic Act 10173, the Data Privacy Act of 2012 of the Philippines. This Privacy Policy explains what data we collect, how we use it, and your rights.

2. Information We Collect

When you create an account:

• •Full name
• •Email address
• •Phone number

When you make a booking:

• •Number of slots booked
• •Emergency contact name and phone number
• •Medical notes or allergies (optional)
• •Selected pickup point
• •Payment information (processed by PayMongo — we do not store card details)

When you confirm as a participant:

• •Full name
• •Emergency contact details
• •Medical notes
• •Waiver acceptance and timestamp

When you apply as an organizer:

• •Full name, display name, phone, bio
• •Facebook profile URL
• •Evidence of past trips
• •Activity types and years of experience
• •Emergency certification status

Automatically collected:

• •Browser type and device information
• •Pages visited and time spent
• •IP address

3. How We Use Your Information

We use your information to:

• •Create and manage your account
• •Process bookings and payments
• •Send booking confirmations and trip reminders
• •Allow organizers to contact confirmed participants
• •Review and approve organizer applications
• •Improve the platform and user experience
• •Comply with legal obligations

4. How We Share Your Information

We do not sell your personal data. We share your information only with:

• •Organizers — your name, phone, emergency contact, pickup point, and medical notes are shared with the organizer of trips you book
• •PayMongo — payment processing. Their privacy policy applies to payment data
• •Resend — transactional email delivery
• •Supabase — database and authentication infrastructure
• •Vercel — hosting infrastructure
• •Legal authorities — if required by Philippine law

5. Data Retention

We retain your personal data for as long as your account is active or as required by law. Booking records are retained for a minimum of 5 years for legal and dispute resolution purposes.

6. Your Rights Under the Data Privacy Act

As a data subject under RA 10173, you have the right to:

• •Access — request a copy of your personal data we hold
• •Correction — request correction of inaccurate data
• •Erasure — request deletion of your account and personal data
• •Object — object to the processing of your personal data
• •Portability — request your data in a portable format
• •File a complaint — with the National Privacy Commission (NPC)

To exercise any of these rights, contact us at acobapaulzion@gmail.com. We will respond within 15 business days.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data including:

• •Encrypted data storage via Supabase
• •Secure HTTPS connections
• •Role-based access controls
• •Regular security reviews

In the event of a data breach affecting your rights, we will notify you and the National Privacy Commission within 72 hours of discovery.

8. Cookies

Sama uses cookies and similar technologies to maintain your session and improve your experience. You can disable cookies in your browser settings, though this may affect platform functionality.

9. Children's Privacy

Sama is not intended for users under 18 years of age. We do not knowingly collect personal data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact and Complaints

For privacy concerns or to exercise your rights:

• •Email: acobapaulzion@gmail.com
• •You may also file a complaint with the National Privacy Commission at www.privacy.gov.ph