NorthSouth Privacy Notice

1. Overview & Commitment

NorthSouth Philippines ("NorthSouth", "we", "us") is committed to upholding your privacy rights under Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission (NPC).

2. Information We Collect

When you initiate a registration for a NorthSouth promotion, preview, or event, we collect:

• Contact Identity: Your full name, email address, and mobile number.
• Verification Credentials: Cryptographic, single-use hashes of authorization tokens (raw tokens are never stored in plaintext).
• Consent Logs: Exact timestamp, IP hash, and policy version of both mandatory promo consent and optional marketing consent.
• Technical Metadata: Privacy-preserving hashed network identifiers and coarse campaign attribution parameters (e.g. UTM source) without storing persistent cross-site tracking cookies.

3. Purpose & Legal Basis of Processing

We process your personal information strictly for legitimate purposes based upon your explicit consent:

• To administer promotional entry, verify identity, and prevent automated abuse or duplicate entries.
• To deliver transactional single-use confirmation links via Resend email infrastructure.
• To issue verified admission passes at event venue doors.
• Where you explicitly and independently opt-in, to notify you regarding future NorthSouth culinary experiences and limited releases.

4. Data Retention & Anonymization

Registrations are retained for a maximum default period of 365 days from promotion conclusion, after which records are anonymized or purged. Unconfirmed pending registrations are automatically invalidated.

5. Security Measures

We implement comprehensive technical, physical, and organizational safeguards:

• HTTPS TLS 1.3 encryption in transit across all endpoints.
• SHA-256 cryptographic hashing of single-use tokens and salted client identifiers.
• Role-based access control protecting administrative databases.
• Rate limiting and defense against enumeration attacks.

6. Your Rights as a Data Subject

Under the Philippine Data Privacy Act, you have the right to be informed, access your data, object to processing, dispute inaccuracies, and request erasure or blocking. To exercise these rights or contact our Data Protection Officer: