Last updated: February 20, 2026
Vacation.ph ("we", "us", or "our") operates a vacation rental marketplace connecting guests with property hosts across the Philippines. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services, in compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.
We collect the following types of information: Personal Data: Name, phone number, email address, and profile information you provide during registration. Booking Data: Property selections, booking dates, guest count, payment details, and booking history. Device & Usage Data: IP address, browser type, device information, pages visited, and interaction data collected through standard web technologies. Location Data: Approximate location based on IP address, and precise location if you enable the "Near me" search feature (with your explicit consent).
We use your personal information to: - Process and manage your bookings - Facilitate communication between guests and hosts - Process payments securely through our payment partners - Send booking confirmations, reminders, and service updates via SMS or email - Improve our platform, features, and user experience - Detect and prevent fraud and unauthorized activity - Comply with legal obligations under Philippine law
Under RA 10173 (Data Privacy Act), we process your personal information based on: - Consent: When you create an account and agree to our Terms of Service - Contractual Necessity: To fulfill booking transactions between guests and hosts - Legitimate Interest: To improve our services, prevent fraud, and ensure platform security - Legal Obligation: To comply with tax, regulatory, and law enforcement requirements
We share your information with the following third parties, only as necessary to provide our services: - PayMongo: Payment processing (GCash, Maya, credit/debit cards). PayMongo processes your payment information under their own privacy policy. - Dexatel: SMS delivery for OTP verification and booking notifications. - Cloudflare: Content delivery, security, and image storage (R2). - Mapbox: Map display and location search functionality. We do not sell your personal data to third parties. Property hosts receive your name and contact information only when you make a confirmed booking.
We retain your personal information for as long as your account is active or as needed to provide our services. Booking records are retained for 5 years after completion for legal and tax compliance purposes. You may request deletion of your account and personal data at any time, subject to our legal retention obligations.
Under the Data Privacy Act (RA 10173), you have the right to: - Access: Request a copy of your personal data we hold - Correction: Request correction of inaccurate or incomplete data - Erasure: Request deletion of your personal data (subject to legal retention requirements) - Portability: Receive your data in a structured, machine-readable format - Object: Object to the processing of your personal data for certain purposes - Lodge a Complaint: File a complaint with the National Privacy Commission (NPC) To exercise these rights, contact us at [email protected].
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete such information promptly.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after changes are posted constitutes your acceptance of the revised policy.
If you have questions about this Privacy Policy or wish to exercise your data subject rights, contact us: Email: [email protected] Data Protection Officer: Vacation.ph DPO You may also file a complaint with the National Privacy Commission (NPC) at https://www.privacy.gov.ph if you believe your data privacy rights have been violated.