Privacy policy
This policy explains which personal data we process when you use the Udo's app (Android, iOS and web) and your member account, why we do it and what rights you have. We follow the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
1. Who is responsible
Udo's Bar & Restaurant, Alona Beach, Tawala, Panglao, Bohol, Philippines.
E-mail: [email protected]
Shared account: your member account is one account for Udo's Bar & Restaurant and our sister venue Smoky Club & Lounge (smokys.club). You can log in with the same account in both apps and your points balance is shared. Both venues are responsible for the data they use.
The app and the servers are operated for us by our technical service provider MAC-Solution, who processes the data only on our behalf.
2. What data we process
- Account: first and last name, date of birth (you must be 18 or older), username, e-mail address, mobile number (optional for foreign guests), password (stored only as an encrypted hash), gender, nationality and favourite drink (all optional).
- Profile photo: a small selfie, so our team can recognise you at the bar. We do not store ID card numbers or copies of IDs – if we verify your age in person, we only note that and when you were verified.
- Membership: member number, points, tier, check-ins, redeemed rewards and vouchers.
- Orders and reservations: items ordered at your table or in the app, bills, reservations and VIP bookings.
- Delivery orders: delivery area, place/resort name, room or unit, landmark, contact phone and – only if you tap “share my location” – your device location at that moment, so our rider finds you. We do not track your location in the background.
- Payments: online payments (GCash, Maya, card) are processed by our payment provider PayMongo. We only receive the payment status, amount and method – never your card number or e-wallet login.
- Technical data: login tokens on your device, and server logs (IP address, time, error messages) for security and troubleshooting.
3. Why we use it
- creating and running your member account and member card,
- collecting and redeeming points and rewards,
- taking your orders, reservations and payments,
- preparing and delivering your delivery orders and showing the estimated arrival time,
- checking that members are at least 18 years old,
- sending you login codes and important account messages by SMS or e-mail,
- keeping our sales and accounting records as required by law,
- security, preventing fraud and fixing errors.
We process your data because it is necessary for the membership you signed up for, because you agreed to it at registration, or because the law requires it (e.g. accounting records). We do not sell your data, do not show ads in the app and do not use advertising or tracking tools.
4. Who receives data
- our sister venue Smoky Club & Lounge (shared member account, see above),
- MAC-Solution – technical operation of app and servers,
- PayMongo Philippines – online payments,
- our SMS provider (Semaphore, Philippines) – login codes to Philippine numbers,
- our e-mail provider – login codes and account e-mails,
- Cloudflare – network security and fast delivery of the app,
- authorities, only where the law obliges us.
Our servers are located in the European Union. Where data is processed outside the Philippines, we make sure it stays protected at least as well as required by the Data Privacy Act.
5. How long we keep it
We keep your account data as long as you have an account. When you delete your account, your personal data (name, contact details, photo, date of birth, points, login) is deleted right away. Sales and payment records that we must keep for tax and accounting reasons are kept without your name for as long as the law requires. Server logs are deleted after a short time.
6. Your rights
You have the right to be informed, to access your data, to correct it, to object, to have it deleted or blocked, to data portability, and to complain to the National Privacy Commission (privacy.gov.ph). Most data you can see and change yourself in the app under Profile. For anything else, write to [email protected].
7. Deleting your account
You can delete your account at any time in the app (Profile → Delete account) or by e-mail. Details: Delete your account.
8. Children
The app is only for guests aged 18 and over. We do not knowingly collect data from anyone younger.
9. Changes
If we change this policy, we publish the new version on this page with a new date.