Privacy Notice

Kazza — The House of Becoming is an experiential event space in Kapitolyo, Pasig. When you apply to one of our nights, we ask you real questions and we keep your answers. This page says exactly what we collect, why, who else sees it, and how to make us delete it.

Who is responsible

Kazza — The House of Becoming, Kapitolyo, Pasig City, is the personal information controller. Our Data Protection Officer reads every request sent through the form at the bottom of this page — access, correction, deletion, or a complaint.

What we collect, and why

Our lawful basis

For ordinary personal information, we rely on your consent and on the steps necessary to give you the thing you asked for. For sensitive personal information — which under RA 10173 includes your age — we rely on your explicit consent, given by ticking the box on the application form. You may withdraw that consent at any time, and withdrawing it means we delete what we hold.

Automated processing

An AI model reads your answers and writes a summary that helps us review applications. It does not decide anything on its own. Every accepted and declined application is read and decided by a person. If you want to know what the summary said about you, ask and we will send it to you.

Who else handles your data

We use a small number of service providers. Your data is stored and processed outside the Philippines, and by applying you consent to that transfer.

Your data is never sold or shared with advertisers. Nobody attending a night is told who else applied.

How long we keep it

• Applications that are declined or never completed — deleted within 90 days.
• Applications from guests who attended — kept for 12 months after the night, then deleted.
• Payment references — kept for 12 months for refunds and disputes.
• Guest photographs on our pages — removed when the event page comes down, or the day you ask, whichever is sooner.

Ask us to delete your data sooner and we will, unless we are required to keep a payment record.

How we protect it

• The site is served only over HTTPS.
• The database is locked by row-level security; nothing is readable from the browser. All writes go through server-side code holding a key that is never sent to your device.
• Public forms are protected against automated abuse by a hidden field and rate limiting.
• Access to applications is limited to Kazza's host account and the person reviewing them.

Your rights

Under the Data Privacy Act you have the right to be informed, to object, to access what we hold, to correct it, to have it erased or blocked, to be indemnified for damage caused by false or unlawfully obtained data, and to receive a copy of your data in a portable form. Send it through the form below and we will respond within 15 working days.

If you are not satisfied with how we handle it, you may complain to the National Privacy Commission at privacy.gov.ph.

If something goes wrong

If a breach affects your personal data and is likely to put you at risk, we will notify you and the National Privacy Commission within 72 hours of knowing about it, as the law requires.

Changes

If we change this notice we will change the version and date at the top. Material changes affecting people who have already applied will be emailed to them.

Make a request

This goes straight to the person responsible. We reply within 15 working days. Photo takedowns, same day.

What do you need Choose one Access — what do you hold about me Correction — something you hold is wrong Erasure — delete what you hold Take my photo off the site Object — stop processing my data Something else Your email Your name optional Anything else optional Send request