Privacy notice

1. Who we are

ASCEND, with its place of business at Bonifacio High Street, H22X+8V2, 7th Ave, Taguig City, Metro Manila, is the Personal Information Controller responsible for the personal data described in this notice.

Our Data Protection Officer can be reached at membership@ascend-ph.com.

2. What we collect

Through this website, we collect only what the membership application asks for:

• —Your name
• —A mobile number, with the country it is dialled from
• —An email address
• —What you are training for, in your own words

The website does not collect payment card details, bank details or government identification numbers, and it has no payment gateway. It sets no advertising or analytics cookies of its own and does not build a profile of you; the one third party the site loads is described in section 8.

What happens when you press Submit. Your answers are sent to a small program running on this site’s own domain, which checks them and emails them to us. They are not stored in any database — this website has none. The only lasting copy is the message in our mailbox. The providers that carry it are named in section 4.

At the gym, before your first session, we also collect information about your health — injuries, medical conditions, and anything else that affects how we should scale your training. Health information is sensitive personal information under RA 10173. We collect it only on a separate, signed waiver and health questionnaire, only with your written consent, and we use it for nothing but your safety while training.

3. Why we collect it, and on what basis

• —To assess and respond to your membership application — on the basis of the consent you give when you tick the box on the application.
• —To administer your membership and confirm payments once you have joined — on the basis of our contract with you.
• —To keep you safe while training and to scale sessions appropriately — on the basis of your separate written consent to the health questionnaire.
• —To meet tax, accounting and other legal obligations — on the basis of legal obligation.

We do not use your details for marketing unless you separately opt in, and any marketing message we send will let you opt out.

4. Who we share it with

We do not sell personal information and we do not share it for anyone else’s marketing. We share it only with:

• —Cloudflare, Inc., which hosts this website and runs the small program that receives your application. Your submission passes through their network.
• —Resend (Plus Five Five, Inc.), which delivers the application to our mailbox as an email. They handle it in transit and keep a short-lived delivery record.
• —Our email provider, which stores the message once it arrives.
• —Our accountant and bank, for payment reconciliation once you are a member.
• —Government authorities, where we are legally required to disclose.

Each processor is bound by a written agreement to process your data only on our instructions and to keep it secure. Where a provider stores data outside the Philippines, we remain accountable for it and use providers that offer a comparable level of protection.

5. How long we keep it

• —Applications that do not become memberships: 12 months from your application, then deleted from our mailbox. Because applications arrive as email and are not kept in a database, deleting the message is what deletion means.
• —Member records: for the duration of your membership and 5 years afterwards, to meet tax and accounting requirements.
• —Health questionnaires and waivers: for the duration of your membership and 3 years afterwards.
• —Payment receipts you send us: 5 years, as required for tax records.

6. How we protect it

We apply organisational, physical and technical measures proportionate to the data we hold: access limited to staff who need it, encrypted transmission, locked storage for paper waivers, and staff briefed on their confidentiality obligations. If a personal data breach occurs that is likely to give rise to a real risk of serious harm, we will notify the National Privacy Commission and the affected individuals within seventy-two (72) hours of knowledge of the breach, as required by law.

7. Your rights

Under the Data Privacy Act you have the right to:

• —Be informed whether your personal data is being processed, and how.
• —Access the personal data we hold about you.
• —Object to processing, including withdrawing consent at any time.
• —Have inaccurate or outdated data corrected.
• —Have your data erased or blocked where it is incomplete, outdated, false, unlawfully obtained, or no longer necessary.
• —Data portability — receive your data in a commonly used, electronic format.
• —Be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorised use of your data.
• —Lodge a complaint with the National Privacy Commission.

To exercise any of these, email membership@ascend-ph.com. We respond within fifteen (15) working days. Withdrawing consent does not affect processing already carried out, and may mean we can no longer provide a class safely.

8. Cookies and third parties

ASCEND sets no advertising, analytics or tracking cookies of its own, and we do not build a profile of you. If we later add analytics, this notice will be updated and a consent banner added before any such cookie is set.

Loading this website contacts no one but our own host. There is one third-party feature on the site — an embedded Google Map on the location section — and it does not load unless you press “Show the map”. Until you do, nothing is requested from Google and Google is not told you were here.

If you do press it, your browser contacts Google directly from that point on: Google receives your IP address and may set its own cookies, under Google’s privacy policy (opens in a new tab), which we do not control. We send them nothing about you ourselves. The choice is not stored and does not carry to your next visit, and the written address and the plain link beside the button work without it.

9. Children

We do not knowingly collect personal information from anyone under 18 through this website. Members under 18 may train only with the written consent of a parent or guardian, given in person.

10. Complaints

Please raise any concern with us first at membership@ascend-ph.com. If you are not satisfied, you may complain to the National Privacy Commission, 5th Floor, Delegation Building, PICC Complex, Roxas Boulevard, Pasay City, Metro Manila — privacy.gov.ph (opens in a new tab).

11. Changes to this notice

We will post any change on this page and update the date at the top. Material changes affecting how we use data you have already given us will be notified to you directly.