Privacy Policy

Effective Date: March 11, 2026

Rally PH This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our platform and services. We are committed to complying with the Philippines Data Privacy Act of 2012 (RA 10173), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA).

1. Information We Collect

Personal Information You Provide: When you create an account, subscribe to our newsletter, purchase a course, or sign up for a subscription, we may collect your name, email address, display name, experience level, tennis goals, and other profile details you choose to share.

Payment Data: When you make a purchase, our third-party payment processors collect your billing information (such as credit card number, billing address). We do not store full payment card details on our servers.

Usage Data: We automatically collect information about how you interact with our platform, including pages visited, features used, lesson completions, device type, browser type, and approximate location derived from your IP address.

User-Generated Content: Videos you upload for AI form analysis, comments, and other content you submit.

2. How We Use Your Information

We use your personal information to:

  • Provide, operate, and maintain our tennis learning platform
  • Process transactions and manage your subscriptions
  • Track your lesson progress, streaks, and learning milestones
  • Deliver our weekly newsletter (if you have subscribed)
  • Provide AI-powered form analysis feedback
  • Send push notifications (only with your opt-in consent)
  • Respond to your inquiries and provide customer support
  • Improve our platform, content, and user experience
  • Detect and prevent fraud or unauthorized access
  • Comply with legal obligations

3. Legal Basis for Processing

We process your personal data under the following lawful bases:

  • Consent: Where you have given clear consent for us to process your data for a specific purpose (e.g., newsletter subscription, push notifications).
  • Contract Performance: Where processing is necessary to fulfill our contractual obligations to you (e.g., providing access to purchased courses or subscription services).
  • Legitimate Interest: Where processing is necessary for our legitimate business interests (e.g., improving our platform, fraud prevention), provided these interests do not override your fundamental rights.
  • Legal Obligation: Where processing is required to comply with applicable laws and regulations.

4. Data Sharing & Third Parties

We do not sell your personal data. We share information only with the following categories of service providers who assist us in operating our platform:

  • Cloud database providers — for secure data storage and user authentication
  • Payment processors — for processing transactions securely
  • Video hosting services — for delivering lesson content and processing uploaded videos
  • Email delivery services — for sending newsletters and transactional emails
  • Analytics providers — for privacy-focused usage analytics with IP anonymization
  • Hosting providers — for serving our platform reliably

Each service provider is contractually bound to process your data only as necessary to provide their service and in accordance with applicable data protection laws.

We may also disclose your data if required by law, legal process, or government request, or to protect the rights, safety, or property of Rally PH, our users, or the public.

5. International Data Transfers

Our service providers may process your data in countries outside the Philippines, the European Economic Area (EEA), or your country of residence. When data is transferred internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission and equivalent protections recognized under the Philippines Data Privacy Act.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain certain information for legal, tax, or regulatory purposes. Payment transaction records may be retained as required by applicable financial regulations.

7. Cookies & Tracking

We use essential cookies necessary for the operation of our platform (e.g., authentication sessions). Our analytics are privacy-focused with IP anonymization enabled by default. We do not use third-party advertising cookies or cross-site tracking technologies. You may control cookies through your browser settings.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Under the Philippines Data Privacy Act (RA 10173):

  • Right to be informed about the collection and processing of your data
  • Right to access your personal data
  • Right to object to processing
  • Right to erasure or blocking of your data
  • Right to rectify inaccurate data
  • Right to data portability
  • Right to damages for violations of your data privacy rights
  • Right to file a complaint with the National Privacy Commission (NPC)

Under the EU GDPR:

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with your local data protection authority

Under the California CCPA/CPRA:

  • Right to know what personal information we collect, use, and disclose
  • Right to delete your personal information
  • Right to opt-out of the sale of personal information — we do not sell your personal data
  • Right to non-discrimination for exercising your privacy rights
  • Right to correct inaccurate personal information
  • Right to limit the use of sensitive personal information

To exercise any of these rights, please contact us at privacy@rally.ph. We will respond to your request within 30 days (or sooner if required by applicable law). You may also delete your account and associated data at any time from your account settings.

9. Children's Privacy

Our platform is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16 without verified parental consent, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal data, please contact us at privacy@rally.ph.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on our platform with a new effective date. Where required by law, we will obtain your consent to material changes. We encourage you to review this policy periodically.

11. Contact & Data Protection

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For concerns regarding compliance with the Philippines Data Privacy Act, you may also contact the National Privacy Commission (NPC) at www.privacy.gov.ph.