Draft for review
Privacy Notice
Last updated: October 2, 2026. This draft explains the intended handling of information for Cebu Verified Stays. Have a Philippine privacy professional review it before collecting identity documents, accepting payments, or launching an owner portal.
Information we may receive
Guests may provide a name, contact method, dates, guest count, budget, selected listing, and booking request details. Property owners may provide their name, contact details, property information, photos or document links, calendar method, and a private iCal/ICS feed URL. We may also receive technical information such as approximate device/browser information, referral URLs, UTM campaign values, and basic security logs.
Why we use it
- To respond to a stay request and coordinate availability with the relevant owner.
- To review and approve properties, prevent fraud, and investigate disputes.
- To attribute inquiries to a listing and reconcile agreed referral fees.
- To protect the service, measure general traffic, and improve the directory.
Who may receive it
We may share the minimum information needed with the relevant property owner, the Cebu OK Travel operating team, and service providers that help us host, email, secure, or operate the site. We should not publish private owner documents, private addresses, calendar feed URLs, or guest contact details. We do not sell personal information.
Calendar-feed safety
A calendar feed URL can act like a secret. Owners should share only an integration-specific private feed and never a password. Once a database is connected, feed URLs must be encrypted at rest, access-controlled, revocable, and excluded from logs and email notifications.
Storage and retention
The current static site uses an email-draft fallback and browser storage for referral attribution. It does not yet provide a persistent owner database. Before launch of a dashboard, define retention periods for applications, booking records, documents, logs, and commission statements; delete or anonymize information when it is no longer needed, subject to legal and accounting requirements.
Your choices
Guests and owners may request access, correction, deletion, or clarification about information held about them, subject to identity checks and applicable law. Contact hello@cebuoktravel.com. A formal privacy notice should identify the responsible entity, lawful basis, data-protection contact, processors, cross-border transfers, and complaint process before launch.
Children and sensitive information
The service is intended for adults arranging accommodation. Do not submit passwords, payment-card numbers, government IDs, or unnecessary sensitive information through the public form. If identity verification becomes required, use a protected upload flow with limited access and a defined deletion schedule.