Data Privacy Policy

1. Introduction & Scope

The One Pampanga Food & Beverage Expo 2026 (“OPFBEX 2026”), organized by Project One (Personal Information Controller) and powered by Dara Consulting as the technology and ticketing provider (Personal Information Processor), is committed to safeguarding your personal data in strict compliance with the Philippine Data Privacy Act of 2012 (RA 10173).

2. Personal Data We Collect

When you register for a pass, claim a pre-registration, or submit event feedback, we collect:

• Contact & Identity Data: Full Name, Email Address, and Mobile Number.
• Professional & Demographic Data: Company/Organization Name, Job Title/Role, Age Bracket, and City/Province.
• Event Participation Data: Ticket Code, Pass Type (Visitor, Exhibitor, Sponsor), intended days of attendance, purpose of visit, and gate check-in timestamps.
• Feedback Submissions: Star ratings, category feedback, and voluntary survey responses.

3. Purpose of Data Processing

Your personal information is collected and processed strictly for legitimate event operations:

• Issuing your personalized QR badge and digital Express Pass.
• Venue admission control, safety enforcement, and physical headcounts at the SMX Convention Center Clark.
• Sending important event updates, digital ticket retrieval links, and schedule announcements.
• Aggregated, anonymized demographic analytics for post-event reporting.

4. Data Protection & Technical Security Measures

We implement comprehensive security controls to protect your data against unauthorized access, scraping, accidental loss, or unlawful destruction:

• Encrypted Transmission: All data is transmitted over HTTPS using TLS 1.3 encryption.
• Database Row Level Security (RLS): Direct public database reads are strictly restricted. Attendees can only access their own specific ticket token, and mass scraping by bots or automated crawlers is programmatically blocked.
• Bot Mitigation: Web crawlers and automated indexing bots are explicitly prohibited from accessing attendee records and pass portals via strict robots.txt directives.
• Zero Unauthorized Sharing: We do not sell, rent, or trade your personal information to third-party advertisers.

5. Data Retention & Disposal

Personal data is retained only for as long as necessary to fulfill event verification, post-event reporting, and audit requirements. After the retention period, records are securely archived or permanently deleted in accordance with the National Privacy Commission guidelines.

6. Your Rights as a Data Subject

Under RA 10173, you hold the following rights regarding your personal data:

• Right to be Informed: To know how your personal data is collected and used.
• Right to Access & Rectify: To request a copy of your records or correct any inaccuracies.
• Right to Erasure / Blocking: To request the deletion or removal of your details from our active database.