Privacy Policy

Last Updated: 7 September 2026

Climb Shack (a trade name of JET Physical Corporation) Website URL: https://climbshackph.com

At Climb Shack, protecting the privacy of our members, guests, and website visitors is a priority. This Privacy Policy explains what personal information we collect through https://climbshackph.com (the “Website”), why we collect it, how we use and protect it, and what rights you have over it.

This Policy applies to information collected through the Website, including when you browse the site, book or purchase a day pass or membership, submit an inquiry through our Contact Us page, or otherwise interact with us online. It does not cover information collected offline (e.g., at our front desk or on paper waiver forms), which is governed by our in-gym data handling practices and, where applicable, a separate on-site waiver and release form.

PLEASE READ THIS PRIVACY POLICY CAREFULLY BEFORE USING THE WEBSITE. BY ACCESSING OR USING THE WEBSITE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS PRIVACY POLICY. IF YOU DO NOT AGREE, PLEASE DO NOT USE THE WEBSITE.

1. Consent

By using our Website — including by creating an account, purchasing a pass or membership, or submitting a form — you consent to the collection, use, and processing of your personal information as described in this Policy, in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

2. Information We Collect

We collect information in the following ways:

a) Information you give us directly

Account & membership details: full name, email address, mobile number, date of birth, billing/mailing address.
Emergency contact information: name, relationship, and contact number, which we require for climbing safety purposes.
Health and fitness disclosures: information you voluntarily provide about medical conditions, injuries, or physical limitations relevant to your climbing activity (e.g., in an online waiver or intake form). This is treated as sensitive personal information under RA 10173 and is subject to heightened protection (see Section 7).
Contact/inquiry information: anything you submit via our Contact Us or FAQs page, including the content of your message.
Guardian/parental information: if you are booking or signing up on behalf of a minor, we collect the guardian’s name and contact details and the minor’s name and age.

b) Payment information When you purchase a day pass or membership, you are redirected to a secured third-party payment gateway to complete your transaction. Climb Shack does not collect, process, or store your full card number, CVV, or other sensitive payment credentials on our servers — these are handled entirely by our payment partner, which maintains its own security standards (e.g., PCI-DSS compliance). Please see Section 6 below.

c) Information collected automatically

Log data: IP address, browser type, internet service provider, date/time stamps, pages visited, and referring/exit pages.
Cookies and similar technologies: see Section 5.

3. How We Use Your Information

We use the information we collect to:

Process your day pass or membership purchase and manage your account;
Verify your identity and eligibility to climb (including age and, where relevant, guardian consent);
Contact you regarding safety notices, schedule changes, class or event bookings, and membership renewals or expirations;
Respond to inquiries submitted through our Contact Us page;
Send you promotional or marketing communications, where you have opted in (you may unsubscribe at any time);
Improve, personalize, and troubleshoot the Website;
Analyze usage trends and website performance;
Detect and prevent fraud, abuse, or unauthorized transactions;
Comply with legal, tax, insurance, and regulatory obligations.

We do not sell your personal information to third parties.

Climb Shack does not knowingly collect personal information from children under 13 through the Website without parental/guardian involvement. Where a minor participates in climbing activities, registration and consent must be completed by a parent or legal guardian. If you believe a child has provided us with personal information without appropriate consent, please contact us so we can address it promptly.

4. Log Files

Like most websites, Climb Shack’s hosting provider automatically logs visitor data (IP address, browser type, ISP, timestamps, pages visited) as part of standard analytics. This information is not linked to information that personally identifies you and is used only to analyze trends, administer the Website, and gather aggregate usage statistics.

5. Cookies and Similar Technologies

Climb Shack uses cookies to:

Remember your preferences and login session;
Understand how visitors use the Website (analytics);
Support the booking and checkout process.

You can disable cookies through your browser settings; note that some features of the Website (such as booking or checkout) may not function properly if cookies are disabled. We do not currently use cookies for third-party advertising targeting.

6. Third-Party Payment Processing

All pass and membership payments on climbshackph.com are completed through a secured third-party payment channel/gateway. When you proceed to payment, you leave the Climb Shack Website and are subject to that payment provider’s own privacy policy and terms of service, which we encourage you to review. Climb Shack is not responsible for the privacy practices, security incidents, or content of third-party payment platforms. We only receive confirmation of successful/failed transactions and limited transaction reference data necessary to activate your pass or membership — we do not receive or store your full card details.

7. Sensitive Personal Information (Health/Medical Data)

Because indoor climbing carries inherent physical risk, we may ask you to disclose relevant health conditions, injuries, or physical limitations as part of your waiver or intake process. This is classified as sensitive personal information under RA 10173. We:

Collect this information only for safety, risk-assessment, and emergency-response purposes;
Limit access to authorized gym staff who need it to ensure your safety on the climbing floor;
Do not use this information for marketing purposes;
Retain it only for as long as necessary for safety and legal record-keeping, after which it is securely disposed of.

8. Data Sharing and Disclosure

We may share your personal information with:

Service providers who help us operate the Website, process payments, send communications, or manage bookings, under confidentiality obligations;
Insurance providers, in the event of an incident or claim requiring documentation;
Government or regulatory authorities, where required by law, court order, or valid legal process;
A successor entity, in the event of a merger, acquisition, or sale of business assets, subject to the same privacy commitments.

We do not share your sensitive personal information (e.g., health disclosures) with third parties except as required for emergency medical response, insurance claims, or legal compliance.

9. Data Retention

We retain personal information for as long as your account or membership is active, and for a reasonable period afterward to comply with legal, accounting, tax, and insurance requirements, resolve disputes, and enforce our agreements. Waiver and health-related records are generally retained for the period required by our insurance and liability obligations, after which they are securely deleted or anonymized.

10. Data Security

We implement reasonable organizational, physical, and technical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Your Rights Under the Data Privacy Act of 2012 (RA 10173)

As a data subject, you have the right to:

Be informed that your personal data will be, are being, or have been processed;
Access your personal data that we hold;
Object to the processing of your personal data, including for direct marketing;
Correct any inaccurate or incomplete personal data;
Erasure or blocking of your personal data under certain conditions (e.g., data no longer necessary for the purpose collected, or unlawfully obtained);
Data portability, to obtain a copy of your data in electronic format, where applicable;
File a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated;
Damages, for any harm suffered due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.

To exercise any of these rights, please contact us using the details in Section 14. We will respond within the timeframe required by applicable law.

12. International Users

While Climb Shack primarily serves visitors and members within the Philippines, if you access the Website from outside the Philippines, your information will be processed in the Philippines in accordance with this Policy and Philippine law.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated version will be posted on this page with a revised “Last Updated” date. Your continued use of the Website after changes are posted constitutes your acceptance of the revised Policy. If a conflict arises between an earlier and later version, the most recent version will govern unless expressly stated otherwise.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please reach out through the Contact Us page on https://climbshackph.com, or climbshackph@gmail.com.

PRIVACY POLICY