Privacy Notice

Last updated: 8 September 2026. This notice applies to the public website at matcha.rovers.coffee and the LTBM event-registration experience.

1. Who controls your personal data

Rovers Coffee Corporation, operating the Let There Be Matcha concept in San Fernando City, La Union, Philippines, acts as the personal information controller for the processing described here.

Privacy enquiries and data-subject requests may be sent to ltbm@rovers.coffee. We may ask for reasonable information to verify identity before acting on a request.

2. Personal data we may collect

Depending on how you use the site, we may process:

• Event-registration information: name, email address, contact number, selected session, registration reference, admission/payment status, attendance status, and related event-management notes.
• Experience information: matcha experience level or other answers requested for a particular workshop.
• Optional dietary or allergy information: when an event asks for it. Because this can reveal health or other sensitive information, please provide only what is necessary for the event team to make reasonable preparations.
• Technical information: essential session identifiers, browser preference storage, basic server logs, and—only if you choose analytics—website-usage information collected through Google Analytics.
• Communications: information you provide when contacting LTBM about an event, booking, complaint, or other enquiry.

We do not ask you to submit passwords, payment-card numbers, government IDs, or unrelated sensitive information through public event forms.

3. Why and how we use personal data

We use personal data only for purposes reasonably connected with your interaction with LTBM, including to:

• create and manage event registrations, capacity, waitlists, confirmations, reminders, payment status, and check-in;
• communicate material event updates, schedule changes, registration status, and operational instructions;
• accommodate disclosed dietary or allergy needs where reasonably possible;
• prevent abuse, protect the website, investigate technical issues, and maintain service integrity;
• meet accounting, legal, regulatory, dispute-resolution, or recordkeeping obligations; and
• understand aggregate website usage when you have chosen analytics.

Where processing is necessary to provide a registration or service you requested, we process the information for that purpose. Where consent is the appropriate basis—such as optional analytics or certain optional information—you may withhold or withdraw that consent, subject to processing that remains permitted or required by law.

We do not currently use website registration data for automated decision-making that produces legal or similarly significant effects.

4. Who may receive personal data

Access is limited to people and service providers who reasonably need the information for the purposes above. This may include authorized LTBM/Rovers staff, hosting and email providers, technical support providers, and professional advisers where necessary. Google may receive analytics data only after analytics consent is given.

We do not sell personal data to advertisers.

5. How long we keep information

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including event administration, post-event operational records, accounting requirements, dispute handling, security, and applicable legal obligations. Data that is no longer needed should be deleted, anonymized, or otherwise minimized.

Optional dietary/allergy information should not be retained longer than reasonably necessary for the event and related safety or dispute needs. You may contact us if you want to ask how long a particular registration record is expected to be retained.

6. Security

We use administrative and technical safeguards intended to reduce unauthorized access, alteration, disclosure, or loss. These include access controls for administrative tools, protected storage areas, secure sessions, request validation, and transport encryption. No internet service can guarantee absolute security.

7. Your data-subject rights

Subject to the Data Privacy Act of 2012, its implementing rules, and applicable National Privacy Commission issuances, you may have rights including the right to be informed, access personal data, object to certain processing, request rectification, request erasure or blocking when legally warranted, exercise applicable data portability rights, seek damages, and file a complaint with the National Privacy Commission.

Some requests may be limited where continued processing is required or permitted by law—for example, to fulfill the purpose for which information was collected, comply with a legal obligation, establish or defend a legal claim, or pursue a legitimate business purpose consistent with applicable standards.

8. Children

This website is not designed to knowingly collect personal data from children without appropriate involvement of a parent, guardian, or other lawful basis. Event-specific age requirements, if any, should be shown on the relevant event page.

9. Third-party websites and maps

This site may link to or embed services such as Google Maps, social networks, and other third-party websites. Their processing is governed by their own privacy terms. Opening those services may allow the third party to receive information about your interaction with it.

10. Changes to this notice

We may update this notice as the website, events, vendors, or legal requirements change. A new effective date will be shown when material changes are published.

11. Contact and complaints

For a privacy request or concern, contact ltbm@rovers.coffee. You may also exercise your right to lodge a complaint with the National Privacy Commission where applicable.