XCLV Corporation

Privacy Policy

Last updated: August 31, 2026

XCLV CORPORATION (“we,” “us”), with principal office at JP Laurel, Bajada, Davao City, is the Personal Information Controller for the data described here. We respect your privacy and handle your personal data in accordance with the Data Privacy Act of 2012 (RA 10173), its IRR, and the issuances of the National Privacy Commission (NPC).

1. Personal data we collect

Identity & contact: name, mobile number, email address.
Booking details: reservation date, arrival time, party size, table, special requests, and ticket/pre-order records.
Transaction data: payment reference and status from our payment provider (we do not store full card numbers).
On-premises data: CCTV footage and security-related records when you visit the venue.
Website data: basic technical/usage data (e.g., device and log data) needed to operate the site.
Loyalty & rewards data: membership status and tier, qualifying spend totals, and gift-voucher balances, kept in a single guest record shared across XCLV Club branches.
Feedback: your responses to our post-visit survey (ratings and comments), where you choose to answer it.
Chat messages: what you type to the website chat assistant.
Event photography & video: photos and footage our team captures at the venue and at events, in which you may appear.

2. How we collect it

Directly from you when you make a reservation or buy a ticket (online or through our staff); automatically through our website; and from our payment provider when a transaction is processed.

3. Why we use it, and our legal basis

We process your data under RA 10173 to:

perform our contract with you — create and confirm reservations, sell and validate tickets, process pre-orders and payments, operate your loyalty membership and gift-voucher balance, and send you confirmations, receipts, and reminders by email/SMS;
improve our service with your input — post-visit survey responses, and chat-assistant conversations used to answer your questions and improve the assistant;
pursue legitimate interests — venue safety and security, fraud prevention, and improving our service;
promote the Club using photos and video captured at our events — with the opt-out described in our Terms & Conditions (Clause A.6.7);
comply with legal obligations — tax/accounting record-keeping (e.g., BIR), and lawful requests from authorities;
with your consent — where we ask for it separately (e.g., marketing, if any).

4. Sharing and disclosure

We share personal data only as necessary with: our payment provider; our email/SMS notification providers; our AI provider, to generate the website chat assistant’s replies; on-site security personnel; and government agencies, regulators, or courts when required by law. We do not sell your personal data.

5. Website chat assistant

The chat on xclvclub.com is automated and powered by artificial intelligence. Your messages are processed by our AI provider to generate replies, and are not used by that provider to train its models. Please do not type card numbers, passwords, or other sensitive data into the chat. The assistant’s answers are for convenience — where they differ from our booking system or our staff, the booking system and staff prevail.

6. Retention

We keep your data only as long as necessary for the purposes above and for periods required by law (for example, financial records for the period mandated by the BIR). After that, data is securely deleted or anonymized.

7. Your rights

Under RA 10173 you have the right to be informed, to access, object, rectify, erase or block, request data portability, be indemnified for damages, and to file a complaint with the NPC. To exercise any of these, contact us at info@xclvclub.com.

8. Security

We apply reasonable organizational, physical, and technical measures to protect your data against unauthorized access, loss, or misuse, and limit access to authorized personnel only.

9. Minors

Our venue and events are 18+. We do not knowingly collect personal data from anyone under 18.

10. International processing

Some service providers (e.g., payment or messaging) may process data outside the Philippines; where they do, we require safeguards consistent with RA 10173.

11. Changes

We may update this Policy; the current version is always posted here.

Data Protection concerns: info@xclvclub.com · XCLV CORPORATION, JP Laurel, Bajada, Davao City. Unresolved concerns may be raised with the National Privacy Commission (NPC).