Last updated: 30 September 2026
Hammerspace, Inc. (“GalawGo”, “we”, “us”) respects your privacy and is committed to protecting your personal data in line with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC). This Privacy Policy explains what personal data we collect on galawgo.com, why, how we protect it, and the rights you have.
1. Who we are
For personal data collected through galawgo.com, GalawGo is the personal information controller.
Hammerspace, Inc.
Unit 127, Mile Long Building, Amorsolo St. Pio Del Pilar Makati City 1230
Data Protection Officer: Rolando Nicomedes Jr
Email: dpo@hammerspacemedia.com
2. Personal data we collect
When you browse
- Technical data: IP address, browser and device type, pages visited, date and time, and referring site, collected through server logs and cookies.
- Search and filter choices, such as city, sport or date, to show relevant results.
When you create an account
- Your name, email address and password. Passwords are stored in encrypted (hashed) form and we cannot see them.
- A record of your consent to these terms: date, time, policy version and IP address.
When you add or claim a page
- Listing details you choose to publish: club, gym or event name, schedule, prices, address and map location, photos, social media links, and contact numbers or emails.
- For claims: your role and any verification details you give us.
When you contact us
- Your name, email and the content of your message, including advertising enquiries.
We do not intentionally collect sensitive personal information, such as health records, government-issued ID numbers, religion or political affiliation. Please don’t include it in listings or messages.
3. How we collect it
Directly from you through our forms, automatically through cookies and server logs when you use the site, and from the club, gym or organiser who creates a page that mentions you (for example, a coach profile).
4. Why we use it, and our legal basis
- To create and run your account, let you manage your pages, and send service emails (page approved, page transferred, claim updates). Basis: fulfilling our agreement with you (Sec. 12(b), DPA).
- To publish listings you submit so the public can find them. Basis: your consent (Sec. 12(a)) and our agreement with you.
- To review pages and claims, prevent fraud and spam, and keep the site secure, including by using a captcha. Basis: our legitimate interests (Sec. 12(f)).
- To improve GalawGo using aggregated usage statistics. Basis: legitimate interests.
- To comply with the law and respond to lawful requests from authorities. Basis: legal obligation (Sec. 12(c)).
We only collect what we need for these purposes. We will ask for your consent again before using your data for any new, unrelated purpose. We do not sell your personal data, and we do not use it for automated decisions that significantly affect you.
5. Who we share it with
- The public: anything you publish on a listing, such as name, schedule, location, photos and contact details, is visible to everyone and may be indexed by search engines.
- Service providers that process data for us under agreements requiring them to protect it: our web host, Cloudflare (captcha and security), Google (maps and location search), and our email delivery provider.
- Authorities, when required by law, court order or a lawful government request.
6. Transfers outside the Philippines
Some of our service providers store or process data on servers outside the Philippines. When this happens, we remain accountable for your data under Section 21 of the DPA and use providers that apply comparable levels of protection.
7. How long we keep it
- Account and listing data: while your account is active. Deleted or anonymised within 30 days after you close your account, unless we must keep it longer by law.
- Consent records: for as long as your account exists and for up to 3 years after, so we can show we had your consent.
- Claim requests: up to 1 year after a decision.
- Server logs and security data: up to 12 months.
- Messages and enquiries: up to 2 years.
After these periods, data is securely deleted or anonymised.
8. How we protect it
We use organisational, physical and technical security measures, including encrypted connections (HTTPS), hashed passwords, captcha protection on log in and sign up, role-based access so owners can only edit their own pages, limited staff access, and regular software updates. If a personal data breach puts your rights at real risk, we will notify the NPC and affected individuals within 72 hours of learning about it, as required by NPC rules.
9. Your rights as a data subject
Under the DPA, you have the right to:
- Be informed whether and how your personal data is processed.
- Access your personal data and get a copy.
- Object to processing, including for marketing, and withdraw consent at any time.
- Correct inaccurate or outdated data. You can edit most of it yourself at My Pages.
- Erase or block data that is incomplete, outdated, unlawfully obtained or no longer needed.
- Data portability: get your data in an electronic, commonly used format.
- Be compensated for damages caused by inaccurate, incomplete, outdated, false or unlawfully obtained data, or its unauthorised use.
- File a complaint with the National Privacy Commission.
To exercise these rights, email our Data Protection Officer at dpo@hammerspacemedia.com. We may need to verify your identity first. We aim to respond within 15 working days. Withdrawing consent won’t affect processing already done, but it may mean we can no longer keep your account or listings live.
10. Cookies
We use essential cookies to keep you logged in, remember a page you’re claiming, and protect forms. Our captcha and map providers may set their own cookies. We don’t use cookies to sell advertising profiles. You can block or delete cookies in your browser settings, but logging in and some features may stop working.
11. Children
Accounts are for people 18 and over, or younger users with a parent or guardian’s consent. If you believe a minor has given us personal data without consent, contact us and we will delete it.
12. Links to other sites
Listings link to clubs’ and organisers’ own websites and social pages. Their privacy practices are their own responsibility, so please review their policies.
13. Changes to this policy
We may update this Privacy Policy. We’ll post changes here with a new “Last updated” date and, for significant changes, notify account holders by email.
14. Contact and complaints
For questions, requests or concerns, contact our Data Protection Officer:
Rolando Nicomedes Jr · dpo@hammerspacemedia.com
Unit 127, Mile Long Building, Amorsolo St. Pio Del Pilar Makati City 1230
If you’re not satisfied with our response, you can file a complaint with the National Privacy Commission at privacy.gov.ph.
