Legal
Privacy Policy
This policy explains how LaroCourts collects, uses, shares and protects personal information when you use larocourts.vip to book courts, coaches and rental gear, or to run a venue or a coaching profile. It follows the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations and the rules of the National Privacy Commission (NPC), and Singapore's Personal Data Protection Act 2012 (PDPA), the law of the country where our company is registered.
Who we are
LaroCourts is operated by BEINTOUCH PTE. LTD. (Singapore UEN 202144978W), a company registered in Singapore, with its registered office at 10 Anson Road #20-05, International Plaza, Singapore 079903. In this policy, “we” and “us” mean BEINTOUCH PTE. LTD., trading as LaroCourts.
For the personal information described here we are the personal information controller: we decide why and how it is processed. Venues and coaches who receive your booking details decide how they use them at their venue, so they are responsible for that use as well. When a venue records walk-ins, blocks or notes in its LaroCourts calendar, we process that information for the venue.
Data protection officer
Our data protection officer (DPO) handles privacy questions and requests. Email hello@larocourts.vip with “Data Protection Officer” in the subject line (the link fills it in), or write to us at the registered office above.
What we collect
We collect only what the service needs. You give us most of it; the rest is created as you use LaroCourts.
Your account
- Email address. You sign in with a one-time code sent to your email. We don't use passwords.
- Mobile number, if you sign in by SMS (where that option is shown) or add one to your profile.
- Profile details you choose to add: your name, city and playing level (0 to 7).
- If you sign in with Google (where that option is shown), Google shares your name, email address and profile picture link with us.
Bookings
- The venue, court, sport, date and time, coach and rental gear you book, the prices, your booking code and its status, and when and why a booking was cancelled.
- For split bills and open matches: who joined, each player's share and whether they paid, the number of players and the level range the organizer set.
- Ratings and comments you leave after playing.
Payments
- The amount, the kind of payment method (for example GCash or card), the status, any refunds, and PayMongo's reference numbers.
- You pay on PayMongo's checkout page. We never see or store your card number, card security code or e-wallet login. We give PayMongo your email address so it can send you a receipt.
Venues, coaches and partners
- Venues: the venue's name, description, address and map location, business phone and email, courts, prices, opening hours, rental gear, photos and booking settings; the owners, managers and staff on its team; its plan, invoices, payout status and PayMongo account ID; and what we owe it or have paid out.
- Coaches: display name, photo, bio, sports, levels taught, languages, hourly rate, the venues where you teach and your weekly hours there, your lessons and earnings, payout status and PayMongo account ID.
- Partners: your name, your company and the venues you onboard.
- The documents PayMongo needs for payouts (business registration, BIR Form 2303, a government ID and bank details) go straight to PayMongo; we don't collect them. If we pay you manually before your PayMongo payouts are connected, we ask for the bank or e-wallet account to pay into.
Photos
Venues and coaches can upload photos. Your browser resizes each photo and saves it as a new JPEG file before it is uploaded, which removes hidden data such as the GPS location. Photos are published on the site and anyone with a photo's link can open it, so please don't upload photos of people who haven't agreed to it.
“Notify me” sign-ups
Where there is nothing to book yet, you can leave your email address to hear when you can. We store the address, the sport and area of the page and the page you signed up on, and use them only to send you that news. To stop abuse of the form we also keep a one-way code made from your IP address (not the address itself) for about a day.
Messages
A log of the emails and text messages we send you (the kind of message, when it was sent and whether it was delivered), and the emails you send us.
Technical data
When you open a page or use the app, our hosting providers process your IP address, your browser and device type, the address requested and the time, to deliver the service, keep it secure and fix problems. To see which pages are visited and how fast they load, we use Cloudflare Web Analytics: a small script on each page reports the page address, the referring page, your browser and device type, your country and load timings. It sets no cookies, doesn't fingerprint your device and doesn't follow you across other websites, and we only see totals, never individual visitors. We don't use advertising tools or social media trackers, and we don't read your device's location. What the site keeps in your browser is explained in the Cookies and local storage policy.
We don't ask for sensitive personal information as the Data Privacy Act defines it, such as your age, health, religion or government-issued ID numbers.
Why we use it
| Purpose | What we use | Legal basis |
|---|---|---|
Create your account and sign you in | Email address or mobile number, one-time sign-in codes | Contract |
Take, confirm and cancel bookings, and hold a time slot while you pay | Account and booking details | Contract |
Take payments and send refunds, share payments and payouts through PayMongo | Booking and payment details, email address | Contract |
Give the venue and the coach what they need to host you | Name, mobile number and booking details | Contract |
Send confirmations, reminders, cancellation and refund notices, invites and invoices by email and SMS | Email address, mobile number and booking details | Contract |
Tell you when you can book the sport or area you asked about (“Notify me”) | Email address, the sport and area, the page you signed up on | Consent: ask us to remove it at any time |
Publish venue and coach listings, open matches, ratings and comments | Listing details, your name on open matches you create, ratings and comments | Contract, at your request |
Use the optional details you add to your profile, such as your city and playing level | Profile details | Consent: remove them at any time |
Review new venues and coaches, prevent fraud and abuse, keep the service secure and fix problems | Account, listing, booking and technical data | Legitimate interests |
Keep accounting and tax records, answer lawful requests from authorities, and deal with legal claims | Booking, payment, invoice and payout records | Legal obligation; legitimate interests for legal claims |
Answer your questions and complaints | Your messages and the records they are about | Contract and legitimate interests |
These are the lawful criteria in Section 12 of the Data Privacy Act: a contract with you (or steps you ask for before one), a legal obligation, our legitimate interests, which we weigh against your rights and freedoms, and your consent. Under Singapore's PDPA we rely on your consent, including the consent you give by providing your details to make a booking, and on the exceptions the PDPA allows, such as legitimate interests.
We don't sell personal information and we don't use it for advertising. We send service messages only, including the “Notify me” email you ask for, not marketing; if we ever want to send marketing, we will ask for your consent first.
We don't profile you. The only automatic decisions are the booking rules you see before you pay, such as whether a cancellation is inside the venue's free-cancellation window. If you think a rule was applied wrongly, email us and a person will review it.
Who sees your information
- The venue you book. Its owners, managers and front-desk staff, and a LaroCourts partner who manages the venue for its owner, see your name, mobile number and booking details: court, time, coach, rental gear, amount, booking code and number of players. Owners and managers get these by email for each new booking, and the venue's phone may get a text message with your name. If the venue has connected its own PayMongo account, your payment goes into that account, so the venue can also see what PayMongo shows merchants, such as your email address.
- Your coach, for a lesson: your name, the venue, court and time, the number of players and the lesson fee.
- Other players. If you create an open match, your name, the venue, the time, the level range and the price per player are listed on the open matches page, which anyone can see. Anyone who has the invite link of a shared booking or an open match can see the names of the players who joined and whether each has paid.
- Ratings and comments are public: anyone can read them, with the venue and the coach they are about.
- Everyone can see venue listings and approved coach profiles: name, photo, bio, sports, levels, languages, rate, venues and weekly hours.
- Our team: authorised LaroCourts staff who need it to review listings, support you and handle payments.
- Our service providers, listed below, only to provide their service to us.
- Authorities and others where the law requires or allows it, for example under a court order, to protect someone's safety, or to establish or defend legal claims.
- A buyer of our business, if LaroCourts is sold or merged, who must keep using your information under this policy.
Service providers and storage
These companies process personal information for us, on our instructions and under their data processing terms:
| Provider | What it does | Where |
|---|---|---|
Supabase | Our database, sign-in, photo storage and the server functions that run bookings and payments | Singapore: our database and photos are stored there |
Cloudflare | Delivers the website, protects it from attacks, measures page visits and speed without cookies (Web Analytics) and forwards email sent to our address | Worldwide network: your request is usually handled in a data centre near you |
PayMongo | Payments, refunds, payouts and your payment receipt | Philippines |
Resend | Sends our emails | United States |
Semaphore | Sends our text messages to Philippine mobile numbers, including sign-in codes | Philippines |
PayMongo, a licensed Philippine payment company, also handles your payment under its own privacy policy. If you sign in with Google, Google handles that sign-in under its own privacy policy. Venue pages link to Google Maps for directions; Google receives your request only if you open that link.
Transfers outside the Philippines
Our company is in Singapore and our database is in Singapore, so personal information collected in the Philippines is transferred to Singapore. Some providers process it in other countries too: Resend in the United States, and Cloudflare wherever its network handles your request. We remain responsible under the Data Privacy Act for personal information we transfer abroad, and under the PDPA we transfer it only where it will be protected to a standard comparable to Singapore law. We choose providers with strong security and rely on their data processing terms and security commitments.
How long we keep it
| Information | How long we keep it |
|---|---|
Account and profile | While your account is open. When you ask us to close it, we delete it within 30 days, apart from the records below that the law requires us to keep. |
Bookings, payments, refunds, invoices and payouts | 5 years after the transaction, the period accounting and tax laws require, or longer while a dispute or legal claim about it is open. |
Ratings and comments | Until you ask us to remove them or close your account. |
Venue and coach listings and photos | While the listing is on LaroCourts. A photo you remove is deleted from our storage at once. |
Log of emails and text messages sent, and payment event log | 12 months. |
“Notify me” sign-ups | Until we have told you that you can book what you asked about, or until you ask us to remove it. |
Messages to our support team | 2 years after your question is resolved. |
Sign-in session in your browser | Until you sign out or clear this site’s data. |
Technical logs kept by Cloudflare and Supabase | A short period set by each provider. |
When the period ends, we delete the information or anonymise it so that it can no longer identify you.
How we protect it
- Every page and the app use encrypted connections (HTTPS), and browsers are told to use them every time.
- Database rules let each person see only the records they are entitled to: your own profile and bookings or, for a venue team, their venue's bookings. Payments, refunds and payouts are changed only by our server, never directly from a browser.
- There are no passwords to steal: you sign in with one-time codes. Keep your email account and phone secure, because anyone who can read your codes can sign in as you.
- Card and e-wallet details are entered only on PayMongo's page, and we confirm each payment by checking with PayMongo directly.
- Only authorised LaroCourts staff can use our admin tools, and only an existing administrator can grant that access.
- Our database provider encrypts stored data.
- The site's offline cache never stores your account, booking or payment details.
No system is perfectly secure. If a personal data breach is likely to put you at real risk of serious harm, we will notify you and the National Privacy Commission as the Data Privacy Act and the NPC's rules require (generally within 72 hours of learning of it), and Singapore's Personal Data Protection Commission where its rules require.
Your rights
Under the Data Privacy Act you have the right to:
- Be informed that your personal information is processed and how. This policy does that, and we will tell you before we use your information for anything new.
- Access your personal information: a copy of it, where it came from, who received it, why we use it and how long we keep it.
- Object to processing, including processing based on consent or on our legitimate interests, and withdraw your consent.
- Correct information that is wrong or incomplete. You can edit your name, mobile number, city and level yourself in My account → Profile.
- Erasure or blocking of information that is incomplete, outdated, false or unlawfully obtained, that is no longer needed, or that you no longer consent to.
- Data portability: a copy of the information you gave us in a structured, commonly used electronic format.
- Damages, if you are harmed by inaccurate, incomplete, outdated, false or unlawfully obtained information, or by unauthorised use of it.
- File a complaint with the National Privacy Commission.
If you die or can no longer act for yourself, your lawful heirs and assigns can use these rights for you. Under Singapore's PDPA you can also ask to access and correct your information and withdraw your consent, and you can complain to the Personal Data Protection Commission.
How to use your rights
- Email hello@larocourts.vip from the email address on your account and tell us what you want: a copy of your information, a correction, deletion, or something else.
- We may ask you to confirm who you are before we act, so that we never give your information to someone else.
- We reply within 30 days, free of charge. If we need more time, or can't do everything you ask (for example because the law requires us to keep a record), we tell you why.
Closing your account. Email us and we will close it and delete your profile. Booking and payment records that the law requires us to keep stay for the period above. What a venue or coach already received for a past booking stays in their own records. If you own a venue, hand it over to a new owner or ask us to close the venue first.
Children
LaroCourts is for people aged 18 and over. A parent or guardian can book for a child, for example a junior lesson, from their own account; we don't ask for the child's details. We don't knowingly collect personal information from anyone under 18. If you think a child has given us their details, email us and we will delete them.
Changes to this policy
We update this policy when the service or the law changes, and the date at the top shows the current version. If a change affects how we use your information in a significant way, we tell you by email or on the site before it takes effect.
Contact and complaints
This policy is effective from September 26, 2026.
Questions and requests: hello@larocourts.vip. By post: Data Protection Officer, BEINTOUCH PTE. LTD., 10 Anson Road #20-05, International Plaza, Singapore 079903. If you are not satisfied with our answer, you can complain to the National Privacy Commission in the Philippines or the Personal Data Protection Commission in Singapore.