Privacy Policy

Scandi Luxury Apartment - Boracay Island

Effective Date: August 27, 2025

1. Information We Collect

When you make a booking inquiry through our website, we collect:

  • Personal Information: Full name, email address
  • Booking Details: Check-in/out dates, number of guests, special requests
  • Technical Data: IP address, browser type, device information
  • Cookies: For security and site functionality (with your consent)

2. How We Use Your Information

We process your personal data for the following purposes:

  • Booking Management: To process and respond to your accommodation inquiries
  • Communication: To contact you about your booking and provide customer service
  • Legal Compliance: DOT accreditation requirements for Boracay Island tourism
  • Security: To protect against spam and fraudulent bookings

3. Legal Basis for Processing

We process your personal data based on:

  • Legitimate Interest: To manage booking inquiries and provide accommodation services
  • Consent: For cookies and marketing communications (where applicable)
  • Legal Obligation: DOT tourism compliance requirements

4. Data Sharing and Third Parties

We share your information only with:

  • Google LLC: Form submissions are processed through Google Forms
  • Google reCAPTCHA: For bot protection (only with consent)
  • Legal Authorities: When required by law or DOT regulations

We do not sell or rent your personal information to third parties.

5. Cookies and Tracking

Our website uses cookies for:

  • Essential Cookies: Basic site functionality
  • Security Cookies: reCAPTCHA protection (requires consent)
  • Preference Cookies: Remember your cookie consent choice

You can manage your cookie preferences through the consent banner or your browser settings.

6. Data Retention

  • Booking Inquiries: Retained for 2 years after your stay or inquiry
  • Communication Records: Retained for business and legal requirements
  • Cookies: As specified in our cookie consent notice

7. Your Rights (GDPR)

Under EU data protection law, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a portable format
  • Object: Object to processing based on legitimate interests
  • Withdraw Consent: For cookies and marketing

8. Data Security

We implement appropriate security measures including:

  • Secure data transmission (HTTPS)
  • Limited access to personal information
  • Regular security updates and monitoring
  • Google's enterprise-grade security infrastructure

9. International Data Transfers

Your data may be processed in countries outside the EU/EEA, including:

  • Philippines: Where our accommodation is located
  • United States: Google LLC servers for form processing

All transfers are protected by appropriate safeguards including Google's compliance with international data protection frameworks.

10. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16 years of age.

11. Contact Information

For questions about this Privacy Policy or to exercise your rights, contact us:

12. Updates to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with the effective date updated accordingly.

Back to Website