Privacy Policy

1. Introduction

Travela Siargao (“Platform,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal data in accordance with the Philippine Data Privacy Act of 2012 and regulations of the National Privacy Commission.

By accessing or using our Platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

2. Information We Collect

• Full name
• Contact number
• Email address (if provided)
• Travel and booking details
• Payment confirmation information
• Device and browser information
• IP address and system logs

You are responsible for ensuring that the information you provide is accurate and complete.

3. Discount Verification (Optional ID Collection)

For passengers claiming senior citizen, PWD, student, or other legally recognized discounts, we may require submission of a valid government-issued identification card strictly for verification purposes.

• Submission of identification is voluntary and required only for discount eligibility.
• We do not collect identification documents unless a discount is being claimed.
• Failure to provide valid identification may result in denial of the discounted rate.
• Identification information is used solely for verification and regulatory compliance.

4. Purpose of Processing

• Ticket booking and issuance
• Passenger manifest submission
• Compliance with maritime and port regulations
• Payment verification
• Refund and rescheduling requests
• Fraud prevention and system security
• Customer support

We do not sell or trade personal data.

5. Third-Party Sharing and Disclosures

• Independent vessel operators
• Maritime and port authorities
• Payment processors
• Government agencies or law enforcement when legally required

The Platform operates solely as a booking intermediary and does not control how independent vessel operators manage or secure their internal systems.

6. Infrastructure and Data Storage

The Platform utilizes secure cloud infrastructure and managed database services provided by reputable third-party providers, including Supabase.

These providers implement their own technical and organizational safeguards, including encrypted transmission and controlled server environments.

While we select service providers that maintain commercially reasonable security standards, we do not directly control the internal infrastructure, security configurations, or operational practices of third-party systems.

7. Security Measures and Risk Acknowledgment

• Encrypted data transmission (HTTPS)
• Role-based administrative access controls
• Authentication and credential protections
• Managed cloud database infrastructure

However, no method of transmission over the internet is completely secure, and no electronic storage system is immune from cyber threats. Unauthorized access, data breaches, or system compromises may occur despite safeguards.

By using the Platform, you acknowledge that digital transactions inherently involve risk, absolute security cannot be guaranteed, and the Platform shall not be liable for unauthorized access, cyber-attacks, data interception, system intrusion, or third-party infrastructure breaches beyond our reasonable control.

8. Data Retention

• Regulatory compliance
• Financial record-keeping
• Operational auditing
• Legal defense and dispute resolution

After the applicable retention period, data may be securely deleted or anonymized.

9. Limitation of Liability

• Indirect, incidental, or consequential damages
• Data misuse by independent third parties
• Unauthorized access resulting from cyber incidents beyond our reasonable control
• Damages arising from failures or compromises of third-party infrastructure providers

Nothing in this Privacy Policy limits rights granted under applicable Philippine law.

10. User Consent

By accessing or using the Platform, you consent to the collection, use, disclosure, and processing of your personal information as described in this Privacy Policy.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Continued use of the Platform after any changes constitutes acceptance of the revised policy.