Privacy notice

1. Who we are

ASCEND, with its place of business at Bonifacio High Street, H22X+8V2, 7th Ave, Taguig City, Metro Manila, is the Personal Information Controller responsible for the personal data described in this notice.

Our Data Protection Officer can be reached at membership@ascend-ph.com.

2. What we collect

Through this website, we collect only what the membership application asks for:

• —Your name
• —A mobile number, with the country it is dialled from
• —An email address
• —What you are training for, in your own words

The website does not collect payment card details, bank details or government identification numbers, and it has no payment gateway. It sets no advertising or analytics cookies of its own and does not build a profile of you; the one third party the site loads is described in section 8.

What happens when you press Submit. Your answers are sent to a small program running on this site’s own domain, which checks them and emails them to us. They are not stored in any database — this website has none. The only lasting copy is the message in our mailbox. The providers that carry it are named in section 4.

At the gym, before your first session, we also collect information about your health — injuries, medical conditions, and anything else that affects how we should scale your training. Health information is sensitive personal information under RA 10173. We collect it only on a separate, signed waiver and health questionnaire, only with your written consent, and we use it for nothing but your safety while training.

3. Why we collect it, and on what basis

• —To assess and respond to your membership application — on the basis of the consent you give when you tick the box on the application.
• —To administer your membership and confirm payments once you have joined — on the basis of our contract with you.
• —To keep you safe while training and to scale sessions appropriately — on the basis of your separate written consent to the health questionnaire.
• —To meet tax, accounting and other legal obligations — on the basis of legal obligation.

We do not use your details for marketing unless you separately opt in, and any marketing message we send will let you opt out.

4. Who we share it with

We do not sell personal information and we do not share it for anyone else’s marketing. We share it only with:

• —Cloudflare, Inc., which hosts this website and runs the small program that receives your application. Your submission passes through their network.
• —Resend (Plus Five Five, Inc.), which delivers the application to our mailbox as an email. Everything you typed is in that email, and Resend keeps a copy of it in their own dashboard for 30 days before deleting it. We cannot make that window shorter on our plan.
• —Our email provider, which stores the message once it arrives.
• —Our accountant and bank, for payment reconciliation once you are a member.
• —Government authorities, where we are legally required to disclose.

Each processor is bound by a written agreement to process your data only on our instructions and to keep it secure. Where a provider stores data outside the Philippines, we remain accountable for it and use providers that offer a comparable level of protection.

5. How long we keep it

• —Applications that do not become memberships: 12 months from your application, then deleted from our mailbox. Because applications arrive as email and are not kept in a database, deleting the message is what deletion means.
• —The delivery copy at Resend: 30 days, automatically, whatever we do. It is the one copy we cannot delete on request — if you ask us to erase your application before then, we delete our mailbox copy immediately and theirs expires on its own.
• —Member records: for the duration of your membership and 5 years afterwards, to meet tax and accounting requirements.
• —Health questionnaires and waivers: for the duration of your membership and 3 years afterwards.
• —Payment receipts you send us: 5 years, as required for tax records.

6. How we protect it

We apply organisational, physical and technical measures proportionate to the data we hold: access limited to staff who need it, encrypted transmission, locked storage for paper waivers, and staff briefed on their confidentiality obligations. If a personal data breach occurs that is likely to give rise to a real risk of serious harm, we will notify the National Privacy Commission and the affected individuals within seventy-two (72) hours of knowledge of the breach, as required by law.

7. Your rights

Under the Data Privacy Act you have the right to:

• —Be informed whether your personal data is being processed, and how.
• —Access the personal data we hold about you.
• —Object to processing, including withdrawing consent at any time.
• —Have inaccurate or outdated data corrected.
• —Have your data erased or blocked where it is incomplete, outdated, false, unlawfully obtained, or no longer necessary.
• —Data portability — receive your data in a commonly used, electronic format.
• —Be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorised use of your data.
• —Lodge a complaint with the National Privacy Commission.

To exercise any of these, email membership@ascend-ph.com. We respond within fifteen (15) working days. Withdrawing consent does not affect processing already carried out, and may mean we can no longer provide a class safely.

8. Cookies and third parties

ASCEND sets no advertising, analytics or tracking cookies of its own, and we do not build a profile of you. If we later add analytics, this notice will be updated and a consent banner added before any such cookie is set.

Loading this site contacts one third party: Google, on the map. This section is about what your browser fetches while you read the page. It is a different question from who handles your application once you press Submit — that is section 4, and the answer there is Cloudflare and Resend. The location section carries an embedded Google Map, and it loads on its own — you do not have to press anything, and there is no way to view the page with the map switched off. Everything else you see, on every page, is served from our own host and contacts nobody.

When the map loads, your browser contacts Google directly. Google receives your IP address and your browser’s user agent, and may set its own cookies, under Google’s privacy policy (opens in a new tab), which we do not control and are not party to. We send Google nothing about you ourselves, and we get nothing back from them — we cannot see who looked at the map, or when.

The map is loaded lazily, which means the request is made as you scroll the location section into view rather than when the page opens. If you never scroll that far, Google is never contacted. Your browser’s own controls — blocking third-party frames or cookies — will stop the map loading without breaking anything else: the written address and the directions links beside it are ours and work regardless.

9. Children

We do not knowingly collect personal information from anyone under 18 through this website. Members under 18 may train only with the written consent of a parent or guardian, given in person.

10. Complaints

Please raise any concern with us first at membership@ascend-ph.com. If you are not satisfied, you may complain to the National Privacy Commission, 5th Floor, Delegation Building, PICC Complex, Roxas Boulevard, Pasay City, Metro Manila — privacy.gov.ph (opens in a new tab).

11. Changes to this notice

We will post any change on this page and update the date at the top. Material changes affecting how we use data you have already given us will be notified to you directly.