Privacy Policy

Endyur is a race registration and event operations platform for endurance and multisport events in the Philippines. We are committed to protecting your personal data and handling it in accordance with the Philippine Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission.

Account and profile data: name, gender, date of birth, email address, mobile number, and Philippine address details.

Safety data: emergency contact name, relationship and contact number, and any medical notes you choose to provide.

Security data: account credentials (stored hashed) and multi-factor authentication settings.

Registration data: events and categories entered, kit size selections, bib number, QR confirmation token, and waiver acceptance records including version and timestamp.

Payment data: proof-of-payment receipts you upload, reference numbers and the payment method used. We do not collect or store card numbers or banking credentials.

To create and manage your account, process event registrations, generate bib numbers and QR confirmations, and record waiver acceptance.

To communicate with you about your registrations, payment status and race-day information.

To enable Organizers to manage the registrants of their own events, including verifying payments and preparing start lists.

To produce aggregate platform reporting and improve the service.

Registration, contact and emergency-contact details for a specific event are shared with that event's Organizer for the purpose of operating the event. Organizers are required to use this data only for that purpose.

We use service providers for hosting, database, storage and email delivery, who process data on our instructions.

We may disclose data where required by law or valid legal process. Endyur does not sell personal data to third parties.

Registration and event records are retained for as long as needed to operate the event and to meet legal, accounting and dispute-resolution requirements — generally up to five (5) years after the event date. Account data is retained while your account is active and deleted or anonymised on request, subject to those retention obligations.

We apply password hashing, optional multi-factor authentication, encrypted transport, row-level access controls in our database, and restricted access to uploaded documents such as payment receipts, which are stored privately and viewable only by you, the relevant Organizer, and authorised Endyur staff.

You have the right to be informed, to access your personal data, to correct inaccurate data, to object to processing, to request erasure or blocking, to data portability, and to be indemnified for damages.

You may exercise these rights by contacting our Data Protection contact below. You also have the right to lodge a complaint with the National Privacy Commission.

We use only essential cookies and browser storage needed to keep you signed in and to remember basic preferences. We do not use advertising or cross-site tracking cookies.

Endyur accounts are intended for users aged 18 and above. Minors may only be registered for an event by a parent or legal guardian, who must accept the event waiver on their behalf and where required by the Organizer's eligibility rules.

We may update this policy from time to time. Material changes will be posted on this page with a revised effective date.

Data Protection contact, Endyur — Gingoog City, Misamis Oriental, Philippines. Email: support@endyur.com