Privacy policy

This policy explains what personal information Blue Heaven Resort and Transient House (“Blue Heaven”, “we”, “us”) collects through this website, why we collect it, and the rights you have over it under the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

What we collect

When you request a booking: your full name, email address and phone number; your country and any notes you add, if you choose to; your dates, the number of adults and children, the rooms and any add-ons you choose.

When you write to us through the contact form: your name, email address, your phone number if you give it, and your message.

When you join our newsletter: your email address.

Automatically: like any website, the servers that deliver this site and our booking system record technical information such as your IP address, browser type and the pages requested. These records are used to keep the service running and secure. This website does not use analytics or advertising trackers. See Cookies below.

We do not ask for payment card details on this website. You pay at the resort.

Why we use it

• To handle your booking: to check availability, hold your rooms, confirm your stay with you by phone or email, and prepare for your arrival. This is necessary to provide the stay you asked for.
• To answer your messages and enquiries, including events and functions you ask us about.
• To send our newsletter, only if you signed up. You can stop it at any time.
• To meet our legal obligations, such as keeping accounting and tax records and answering lawful requests from the authorities.
• To protect our guests, our property and this website from fraud and misuse.

We do not sell your personal information, and we do not use it for automated decisions about you.

Who helps us

We share your information only with those who help us run the resort and this website, under agreements that require them to protect it and use it only on our instructions:

• Search N Book, operated by Brand N Build Services, which provides our booking and website system and stores booking, contact and newsletter records for us.
• Brevo, which delivers the emails about your booking.
• Cloud hosting providers that run these services.

The maps on this website are embedded from Google Maps. They load only if you accept cookies; when one does, Google receives your IP address and may set its own cookies under its own privacy policy. The “Get directions” link opens Google Maps directly.

We will also disclose information when the law requires it, or when it is needed to establish, exercise or defend a legal claim.

Cookies

This website sets one cookie of its own, which remembers whether you accepted or declined cookies. The only other cookies come from Google Maps, and only after you accept them. You can decline and still use the whole website, including booking, and change your choice at any time. Our cookie policy lists the cookies and explains how to change your choice.

Where it is kept

Some of these providers store data on servers outside the Philippines. Wherever your information is processed, we require it to be protected to the standard the Data Privacy Act sets.

How long we keep it

• Booking records: for five years after your stay, which covers our accounting and tax obligations.
• Booking requests that were never confirmed, and messages sent through the contact form: for up to one year.
• Newsletter addresses: until you unsubscribe.

After that we delete the information or anonymise it.

How we protect it

Information travels to and from this website over encrypted connections. Access to booking and guest records is limited to the resort staff who need it, each with their own account. No method of storage or transmission is completely secure, but we work to protect your information and will tell you and the National Privacy Commission of any breach the law requires us to report.

Your rights

Under the Data Privacy Act you have the right to:

• be informed about how your personal information is processed;
• access the information we hold about you;
• have inaccurate or incomplete information corrected;
• object to processing, and withdraw consent you have given, such as for the newsletter;
• have your information erased or blocked when it is no longer needed or was processed unlawfully;
• receive your information in a commonly used electronic format;
• be indemnified for damages caused by inaccurate, incomplete or unlawfully obtained information.

To use any of these rights, contact us using the details below. We may need to confirm your identity first. If you are not satisfied with our answer, you may complain to the National Privacy Commission (privacy.gov.ph).

Children

Our website is meant for adults making bookings. A child’s details, such as their age for a booking, should be given by a parent or guardian.

Changes to this policy

We may update this policy. The date at the top shows when it last changed. If a change affects how we use information you have already given us, we will tell you before it takes effect.

Contact us and our Data Protection Officer

For any question about this policy or your personal information, contact our Data Protection Officer through the details below.