Privacy Policy
Last updated: November 6, 2026
1. Introduction
Queue (queue.place) protects your personal data under Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations.
This policy explains what we collect, why, who helps us process it, how long we keep it and how you can see, fix, download or delete it. It covers customers, business owners and printing partners who use Queue.
2. Who We Are and How to Contact Us
The operator of Queue is the personal information controller for the data described here.
Data Protection Officer — privacy@queue.place
Email the Data Protection Officer with any question or request about your personal data.
3. Information We Collect
We collect only what we need to run Queue:
- Account information: name, email, avatar and bio. Your password is managed by our sign-in provider; we never see it.
- Phone number: optional on your profile, and given to a venue when you join its walk-in queue or book.
- Vehicle details: plate number and vehicle type for car wash bookings and walk-ins.
- Birthday: month and day only, optional, used for venue birthday tips.
- Bookings and orders: reservations, walk-ins, food orders and event inquiries, with dates, party size, notes and contact details.
- Payment information: reference numbers and amounts you submit, and any payment proof image you upload; the payment status PayMongo reports. We never see or store card numbers.
- Business owner verification: TIN, business permit number and images, BIR COR, DTI/SEC and government ID images, and LGU verification links. ID text is read on your own device before upload.
- Push notifications: your device’s push subscription address and keys, when you turn push on.
- Discovery and habits: favorites, visit times, when you last opened the app, and your last location only if you turn on nearby tips.
- Support and feedback: business owner support chat messages, feedback tickets, reviews and ratings, and reports.
- Location: only when you allow it, to show nearby venues.
- Usage and device data: pages visited, browser and device type, and error reports.
4. How We Use Your Information and Our Legal Basis
Each use has a legal basis under the Data Privacy Act:
- Providing bookings, walk-ins, orders and your account — contract.
- Payments, refunds and fraud checks — contract and legitimate interest.
- Verifying business owners — legitimate interest and legal obligation.
- Sending venue tips (win-back, birthday and thank-you messages), promotions and announcements, discovery and habit tips, and use of your birthday and location for them — consent you give in Notification settings and can withdraw anytime. Tips and promotions are off until you turn them on.
- Service and security emails and notifications about your bookings and account — contract.
- Support chat and its moderation — legitimate interest.
- Error monitoring and analytics — legitimate interest.
- Answering lawful requests from authorities — legal obligation.
We do not sell your personal data or use it for third-party advertising.
6. Business Owners and the Customers They Serve
When you book, join a queue or order, the venue’s owner and staff see the details they need to serve you: your name, phone, plate number, party size, notes and payment proof.
Owners must use these details only for that service, and may send venue tips only to customers who turned tips on.
Notes staff write about your walk-in visit are part of your data and are included when you download it.
7. Where Your Data Is Stored and How We Protect It
Your data is stored on Supabase servers in Japan (ap-northeast-1).
Data is encrypted in transit and at rest. Row level security limits who can read each record, files are kept in private storage, two-factor sign-in is available, and access to the systems is limited to the operator.
8. How Long We Keep Your Data
We delete data automatically when it is no longer needed. Timed records are removed daily once they pass their period:
- Finished walk-in queue entries: deleted after 90 days.
- Finished reservations and food orders (counted from the booking date): deleted after 90 days.
- In-app notifications: deleted after 14 days.
- Listing view records: deleted after 90 days.
- Payment provider event logs: deleted after 90 days.
- Business owner support chat messages: deleted after 1 day.
- Support chat moderation records: deleted after 30 days.
- Sign-ups never confirmed: deleted after 72 hours.
- Your account and profile: deleted at once when you delete your account.
- Records a venue keeps (bookings, walk-ins, food orders, event bookings and payments): kept for the venue after you delete your account, shown as Deleted user, with your contact details and notes removed.
- Payment proof images: deleted 1 year after you delete your account.
- Reviews, favorites, referrals, flags and feedback: kept until you delete your account.
- Business owner verification documents: kept with your claim record; uploads never submitted are deleted after 7 days.
9. Your Rights and How to Use Them
Under RA 10173 you have the right to be informed, to access your data, to object and withdraw consent, to have your data erased or blocked, to correct it, to data portability, to claim damages, and to file a complaint with the National Privacy Commission (privacy.gov.ph).
- Get a copy: use Download my data on your profile for a JSON copy of your data, including notes venue staff wrote about your walk-in visits.
- Correct: edit your profile to fix your details.
- Delete: Delete account on your profile deletes your account at once.
- Choose your tips: Notification settings turns venue tips, promotions and discovery tips on or off.
- Anything else: email privacy@queue.place. We answer within 15 days.
10. Data Breach Notification
If a breach affects your personal data and is likely to cause you serious harm, we will tell you and the National Privacy Commission within 72 hours of learning about it, with what happened, what data was involved and what you can do.
12. Children's Privacy
The Service is not intended for users under 13 years of age. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 13, we will take steps to delete that information promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. For important changes we also post a notice in What's New. Your continued use of the Service after changes constitutes acceptance of the updated policy.
Questions? Read Privacy and your data in Help.