When you open an account: your email address, your name, your date of birth, and your gender, region and city. The email address and name are so we can reach you and know you at the door. The date of birth is the age check, and only your age is ever read from it. Region and city tell us which towns our guests come from, which is how we decide where to open next. Nothing narrower is asked, and we do not ask for a street address at all.

When you book a table: the branch, the time, the size of your party, a contact number for that booking, and anything you tell us in the notes.

When you register for an event: which night, who you are bringing, and whether the door checked you in. Attendance is kept because we intend to recognise regulars for it later.

When you book the taproom for an event: the branch, the date and time, the package and add-ons, the kind of event, how many guests, the host's and coordinator's names, a contact number, and anything you tell us in the notes. We use it to arrange the event and to reach you about it, and share it with nobody outside the taproom.

When you hold a voucher: which voucher it is, how it reached you (a code you typed, an offer you claimed, a thank-you after an event, or one we gave you), and when the counter used it. We use it so each voucher is used once, and to see which offers our guests actually use.

That is the whole of it. We do not take payments here, so we never see a card. We do not track you around the internet and there is no advertising on this site.

If you invite someone to an event you give us their email address, and we write to them once with the invitation and a link to answer it. We use it for that and nothing else, and we do not add them to anything.

Please only put down people who would expect to hear from you. If somebody has been invited and would rather we had not written, tell us and we will remove the address.

News about the taproom is a separate question from opening an account, asked in its own words with its own box on the same screen. That box starts ticked, so if you would rather not hear from us, untick it; you can also switch it off at any time from your account, in one tap, and every email we send has a way out in it. Saying no costs you nothing: your account, your bookings and your places at events all work the same either way. We do not sell or share your address, and we do not pass it to anyone for their own marketing.

You can turn it off whenever you like, from the same screen you turned it on. We keep a record of when you asked and when you stopped, which is how we can show the asking was yours.

Our database and sign-in run on a database provider's servers in Singapore. Our emails go out through an email delivery service. This site is served by a web host. Each handles your details only to do that job for us and may not use them for anything of its own.

Three more see something, none of it about you. The sign-in provider our staff use for the staff app learns that a member of staff signed in, and nothing else. The service that delivers the staff app's code updates sees the app's version and platform. And the company whose store distributes the iPhone version of that app. The staff app is described below.

Nobody else. We do not sell your details and we do not share them for anyone else's marketing.

We keep your account and its bookings for as long as the account is open, and event records for as long as we need them to run the events and settle anything that comes of them. Ask us to delete yours and we will.

The Data Privacy Act gives you the right to be told what we hold, to see it, to have it corrected, to have it blocked or erased, to object to how it is used, to be given a copy you can take elsewhere, and to be compensated for damage caused by mishandling it.

Ask us and we will do it. If you would rather not ask us, or you are unhappy with how we answered, you can complain to the National Privacy Commission at privacy.gov.ph.

Your sign-in, so you are not asked for a link on every page. And, for the length of one visit, a note of which event pop-up you have already closed so it does not reappear. That is all. There are no advertising or analytics cookies.

Like any website, ours leaves a trace on the servers that run it: the providers above keep ordinary technical logs (the address your connection came from, the browser, the page, the time) to keep the service up and secure. We do not read those to build a picture of you, and nothing on this site follows you elsewhere.

The people who work here use a phone app, Alcalde Taproom, that reads the same bookings and door lists as this site. Guests never use it. In it, staff see what they need to seat you and let you in: your name, the size of your party, when you booked and for which branch, your contact number and email so they can reach you about that booking, and whether your pass has been scanned. The guests screen shows who holds an account, with an age worked out from the date of birth rather than the date itself. Staff who work one branch see only that branch's guests.

The app's camera reads the QR code on a pass at the door, or on a voucher at the counter, and keeps no pictures. When a member of staff adds a poster to an event, the one picture they choose is uploaded and nothing else from their phone is. The app checks its update service for new versions of its own code; that request carries the app's version and platform and a random installation identifier, and nothing about any person. There is no analytics and no advertising in it. Nothing in the app can do anything the website's staff page could not, and the same rules about who is allowed to see what apply to both.

Write to hello@alcaldebrewery.com about anything in this notice, including any of the rights above. You can also ask at either taproom; the addresses and numbers are on the Visit page.