Privacy Notice

Celebrio Events, operated by Danztrack Studios, together with its parent company, subsidiaries, affiliates, and related companies (collectively, "Celebrio"), collects, processes, and stores personal data about you when you avail of its products and services — including its websites, mobile applications, and check-in tools — participate in its events, apply for a job with it, or enter into any contract with it (the "Services"), provided that you have given your express consent.

This Privacy Notice explains how your personal data is collected, used, shared, and secured by Celebrio in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations (collectively, the "Data Privacy Act"). Please read it carefully before giving your consent.

Celebrio collects information you provide directly to it, such as when you register an account, sign in (including through Google), book or purchase a ticket to an event, host or publish an event, list services as a vendor or planner, apply for a job, message another user, participate in the community, upload proof of payment for a booking, attend or check in at an event, or otherwise communicate or interact with Celebrio.

The personal data we collect may include:

• Account information — name, email address, mobile number, password, profile photo, and (if you sign in with Google) the basic profile data Google shares with us.
• Booking information — events you book, ticket tiers, seat assignments, QR ticket identifiers, and check-in status.
• Proof-of-payment uploads — receipt images, screenshots, or reference numbers you submit when paying via bank transfer, e-wallet (such as InstaPay), or other manual payment methods. Celebrio does not collect or store your full card or bank account credentials; you only upload proof that a payment was made.
• Organizer, vendor, planner, and advertiser information — business name, contact details, listings, pricing, public profile content, verification documents, and payout details where applicable.
• Event content you submit — guest lists, RSVPs, seating charts, schedules, badges, certificates, speaker and exhibitor profiles, lost-and-found items, emergency contacts, polls, and similar event-management data.
• Messages and community posts — content of messages exchanged with other users and posts you contribute to the community.
• Device and usage information — IP address, browser type, device identifiers, pages visited, referral source, ad and affiliate referral parameters captured from URLs, and similar analytics data.
• Any other information you choose to provide.

If you use Celebrio to organize a wedding, corporate event, festival, or any other event, you may upload personal data about third parties — for example, the names, contact details, dietary preferences, or seating assignments of your guests. By uploading this information you represent and warrant that you have the authority and lawful basis to share their personal data with Celebrio for the purpose of organizing your event, and that you have informed them of, or obtained their consent to, such processing where required by the Data Privacy Act.

With respect to this third-party data, Celebrio acts as a personal information processor on your behalf and will process it only as necessary to provide the Services to you.

Celebrio uses and processes your personal data to:

• Create and manage your account and verify your identity;
• Process bookings, issue QR tickets and receipts, manage seat assignments, and facilitate event check-in (including offline check-in, where attendee details may be temporarily cached on the scanning device so check-in works without an internet connection);
• Review and confirm uploaded proof of payment, and reconcile or refund bookings;
• Enable event organizers, vendors, planners, advertisers, and affiliates to operate their listings, manage their attendees or leads, and receive payouts;
• Power optional AI-assisted features (for example, AI helpers in the corporate and festival dashboards) that process the event content you submit to generate suggestions;
• Enable messaging, community participation, RSVPs, polls, certificates, badges, lost-and-found, and other event-management tools;
• Measure ad and affiliate campaign performance using referral parameters captured from URLs;
• Send transactional communications (booking confirmations, ticket delivery, check-in updates, security alerts) and, with your consent, marketing communications about events, promos, and Celebrio features;
• Maintain the security and integrity of the Services, prevent fraud, and comply with legal and regulatory obligations.

At all times, your personal data shall not be used or processed for any purpose that is contrary to law, morals, or public policy.

Celebrio shares personal data only as needed to deliver the Services:

• Event organizers — when you book or RSVP to an event, the organizer (and their authorized staff) can see your name, contact details, ticket tier, seat assignment, QR ticket identifier, and check-in status so they can admit you and run the event.
• Vendors and planners — when you message or inquire with a vendor or planner, your name, contact information, and the contents of your inquiry are shared with them.
• Advertisers and affiliates — aggregated and, where applicable, click- or conversion-level data tied to ad or affiliate campaigns you interacted with.
• Service providers — cloud hosting, database, email, SMS, manual-payment verification, and analytics providers who process data on Celebrio's behalf under appropriate confidentiality and data-protection terms.
• Within the Celebrio group — between and among the entities comprising Celebrio to provide you personalized Services.
• Legal and regulatory — in accordance with any lawful order from a relevant government agency, including the National Privacy Commission, the Bureau of Internal Revenue, and law enforcement.

Celebrio does not sell your personal data. Where a data-sharing arrangement is required by law, a data sharing agreement shall cover the sharing between Celebrio and the recipient.

Celebrio has instituted policies and procedures intended to protect personal data which it has collected and continues to collect. These include securing any document containing personal data and requiring the execution of non-disclosure agreements by its employees, consultants, vendors, suppliers, and contractors.

Your personal data is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems and are required to keep the personal data confidential. Data is encrypted in transit and access is enforced by row-level security policies on the database. Celebrio does not collect or store your full card or bank account credentials — for manual bookings, you only upload proof of payment (such as a receipt image or reference number), which is stored securely and reviewed by the event organizer or Celebrio's payments team.

Retention. Celebrio retains your personal data only for as long as necessary to fulfill the purposes set out in this Privacy Notice, or as required by law. The table below summarizes our standard retention periods. When the applicable period expires, data is securely deleted, anonymized, or — for records under a legal hold — archived with restricted access until the hold is lifted.

How retention is enforced. Celebrio runs an automated retention sweep on a recurring schedule that (a) permanently deletes records past their retention window for low-risk categories (such as consent events, security audit logs, resolved vulnerability reports, suppressed-email entries, and analytics events), (b) anonymizes accounts whose deletion grace period has elapsed, and (c) flags records subject to legal hold (such as bookings and KYC records past the 10-year BIR/AMLA window) for human review before any deletion. Every sweep is logged in an internal audit trail.

How to request deletion of your account. You may request deletion at any time from Account → Danger zone or by submitting a request through our contact form (use the subject "Data deletion request"). On request, your profile enters a 24-month grace period during which you can cancel the request and restore your account. After the grace period, your profile is automatically anonymized (your name, photo, bio, phone, and location are removed and your profile is made private). Bookings, tickets, and payment records associated with you are retained in anonymized form for the periods required by Philippine tax and accounting law (currently ten (10) years under BIR rules), then deleted or archived after admin review. You may also adjust your cookie preferences at any time, which controls the retention of non-essential cookies on your device.

International transfers. Celebrio uses reputable cloud infrastructure and service providers that may process or store data on servers located outside the Philippines. Where personal data is transferred abroad, Celebrio takes reasonable steps to ensure the recipient affords a comparable level of protection as required by the Data Privacy Act.

While there will always be a risk of unauthorized disclosure of personal data, Celebrio believes that the foregoing safeguards are sufficient to prevent such unauthorized disclosure and is committed to updating and improving such safeguards in compliance with the Data Privacy Act.

Celebrio's websites use cookies — small files that a site transfers to your device through your web browser (if you allow) to recognize your browser and remember certain information. Celebrio uses cookies to keep you signed in, remember your preferences, and compile aggregate data about site traffic so it can improve the Services.

Celebrio also captures advertising and affiliate referral parameters from the URL when you arrive at the site (for example, ad campaign IDs and affiliate codes). This lets us attribute bookings to the correct advertiser or affiliate and measure campaign performance.

Cookie consent. When you first visit Celebrio, a banner asks you to choose how we use optional cookies. You can Accept all cookies (including analytics and preference cookies) or Reject optional cookies (allowing only strictly necessary cookies needed for sign-in, security, and core features). Your choice is stored in your browser's local storage and remembered for future visits. You can change your preference at any time on our Cookie Preferences page, by clearing your browser's local storage for celebrioevents.com, or by reaching us through our contact form.

You can also choose to have your device warn you each time a cookie is being sent, or you can turn off all cookies through your browser settings. If you turn cookies off, some features may be disabled and parts of the site may not function properly.

Celebrio maintains a documented incident response procedure to detect, contain, and remediate security incidents affecting personal data. Our procedure includes:

• Detection & assessment — monitoring of system logs, authentication events, and database activity to identify suspicious behavior; an internal severity assessment is performed within 24 hours of discovery.
• Containment — immediate revocation of compromised credentials, isolation of affected systems, and rotation of API keys and secrets.
• Eradication & recovery — removal of the root cause, restoration of affected services from known-good backups, and verification of system integrity before resuming normal operations.
• Notification — where a breach is likely to give rise to a real risk of serious harm to affected data subjects, Celebrio will notify the National Privacy Commission (NPC) and the affected individuals within seventy-two (72) hours of knowledge of the breach, in accordance with NPC Circular 16-03.
• Documentation & review — every incident is logged, reviewed in a post-incident analysis, and used to improve our controls.

If you believe your personal data may have been compromised through our Services, please notify our Data Protection Officer immediately through our contact form (use the subject "Suspected data breach"). For technical vulnerabilities, use the vulnerability reporting form.

While Celebrio employs all reasonable precautions to safeguard your information, we cannot warrant 100% cyber security. Celebrio encourages you to use the latest version of your web browser, which is normally equipped with security features that provide anti-phishing protection and tools to prevent malware and other privacy threats.

Our website may also contain hyperlinks to third-party websites that are not owned or controlled by Celebrio. The links are provided for your convenience and information only. Celebrio advises you to read the privacy policies of third-party websites to determine how they handle and protect information they collect from you.

As a data subject, you have the following rights under the Data Privacy Act:

• Right to be informed — of the collection and processing of your personal data and the purpose for which it will be processed.
• Right to object — to the processing of your personal data, including for direct marketing.
• Right to access — reasonable access to your personal data by notifying our Data Protection Officer.
• Right to rectify — any inaccuracy or error in your personal data.
• Right to erasure or blocking — to suspend, withdraw, or order the blocking, removal, or destruction of your personal data in accordance with the Data Privacy Act.
• Right to data portability — to obtain a copy of your data in an electronic or structured, commonly used format where processing is by electronic means.
• Right to damages — to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.
• Right to file a complaint — with the National Privacy Commission (NPC) if you believe your rights under the Data Privacy Act have been violated.

Celebrio may change this Privacy Notice from time to time. If Celebrio makes any significant change in the collection, use, or protection of personal data, Celebrio will provide you notice through the Services or by some other means, such as email. You are encouraged to periodically review this Privacy Notice for the latest information.

If you have any questions regarding this Privacy Notice, or wish to exercise any of your rights as a data subject, you may contact our Data Protection Officer:

You may also file a complaint with the National Privacy Commission (NPC) if you believe your rights under the Data Privacy Act have been violated. Visit privacy.gov.ph for details.

Celebrio will secure your consent prior to the collection and processing of your personal data, or as soon as practicable and reasonable in order to ensure continuation of the Services. Before you give your consent, you will be provided with an opportunity to read and review this Privacy Notice. If you are below eighteen (18) years old, Celebrio requires you to secure consent from your parents or legal guardians in order to use any of the Services. Celebrio does not specifically market to persons under eighteen (18) years old.