Data privacy

Nabulao Beach Hotel Corp. and the managed properties of Nabulao Beach Hotel Corp., committed to providing quality service to our guests, potential customers, business partners, employees, and future employees, respect the privacy of all our internal and external customers and business partners and treat all personal information as confidential.

This Personal Data Privacy Policy (the “Policy”) applies to personal data and information regarding guests and other individuals with whom we do business and to the management of that data and information in any form, whether electronic or written.

This Policy gives effect to our commitment to protect your personal information and has been adopted by all of the hotel and resort properties owned, managed, and/or operated by Nabulao Beach Hotel Corp. or its affiliated or associated companies. References to “Nabulao Beach Hotel Corp.”, “we”, “our”, and “us” hereinafter, depending on the context, collectively refer to those separate and distinct properties or entities.

We limit the collection, use, and retention of the Data to the specific information we need for legitimate purposes to administer our business, to provide you with quality service, and offer various products or services from Nabulao Beach Hotel Corp.

In order to protect your Data, we will require that you prove your identity to us in relation to your request to access your Data, which may consist of a copy of a government-issued identification, your signature, and correspondence address so we can check them against our records and satisfy ourselves as to your identity. The above information is required to create an audit trail of how the request has been handled. Where a request is made, any correspondence or application may be kept and added to your Data.

Collection of Personal Information

The term “personal data” in this Policy refers to personal information that we may ask you to voluntarily supply to us while providing you with a particular service. The types of personal data we process include: name, title, gender, contact details (including but not limited to email address, mailing address, mobile phone number, telephone number, and fax number, etc.); date and place of birth, nationality, passport number, identification number, and visa information; credit card information including the name of the cardholder, credit card number, and expiry date; loyalty program membership information, online user account details, profile or password details, and any frequent flyer or travel partner program affiliation; any information necessary to fulfill special requests on hotel arrangements; information you provide regarding your marketing preferences or in the course of participating in surveys, contests, or promotional offers; information collected through the use of closed-circuit television systems, card keys, and other security systems; contact and other relevant details concerning the employees of corporate accounts and vendors and other individuals with whom we do business (e.g., travel agents or meeting and event planners); and in limited cases, information relating to the credit of customers.

We collect personal data to deliver superior quality of service. Specific purposes include, but are not limited, to the following:

Guest reservations and/or requests for information or services

Payment processing

Product and Services sales

Membership program subscription

Sales calls and appointments

Communication facilitation

Vendor management

Marketing and Promotions planning and execution

Market research and analysis

Customer Satisfaction and Quality Assurance surveys

Credit Application

Safety and Security

Legal and Regulatory requirements

Job Application processing

Data we collect and how we use it:

When you request a particular service from us or otherwise interact with Nabulao Beach Hotel Corp., we will ask you to voluntarily provide us with Data that we need. For example, if you would like us to make a reservation at one of our hotels, we will request Data such as your name, address, telephone number, e-mail address, and credit card information for payment purposes (including credit card number, code, and expiry date). We will use your e-mail address to send an e-mail confirmation of your booking and a pre-arrival message summarizing your confirmation details and preferences. Such a pre-arrival message will include other information about the hotel, the area, and the weather.

The same types of information would be requested when you complete any purchase of Nabulao Beach Hotel Corp. gift certificates or merchandise, or make online inquiries.

For hotel reservations, we may also ask for your travel details (including flight number, arrival and departure dates and time, as well as country/point of origin and destination) and room preferences to better prepare ourselves for your arrival and to serve you better before your departure.

Browsing

When you browse this website, we do not collect Data unless you voluntarily and knowingly provide it to us, for example by accessing our website from a link in an e-mail that we send to you or where you have created a profile under My Nabulao Beach Hotel Corp. and you log-in to your account.

Making a reservation and check-in at a Nabulao Beach Hotel Corp. Hotel

The Data that you provide to us for making a reservation is made available to the applicable hotel for the purpose of completing your reservation request. We may also need to collect information as required by local laws such as passport numbers, type of entry visa, and driver’s license. Upon check-in, your Data will be verified by our staff, and you will be requested to indicate whether you wish to opt in and receive hotel promotional literature. At times, we may make certain Data available to strategic business partners such as mailhouses and e-mail service providers for the sole purpose of mailing and dissemination of promotional materials for Nabulao Beach Hotel Corp. Hotels and its related facilities only. Data will not be shared with third parties for their marketing purposes.

During your stay at a Nabulao Beach Hotel Corp. Hotel

We record your itemized spending to properly assemble your folio during your stay, which includes your room rate and other expenses billed to your room. We also record this information to comply with financial reporting requirements and those imposed by our auditors and government authorities. In order to assure your future comfort and attention to your individual needs, other stay-specific information may also be stored in the property management system at the particular hotel, such as your food and beverage preferences and other special requests. Certain information regarding your service preferences may be made available to other Nabulao Beach Hotel Corp. Hotels through our central database.

Making a purchase on our website

When making a purchase such as a gift certificate or Nabulao Beach Hotel Corp. merchandise, you will be asked to complete a form that includes your name, e-mail address, delivery address, and credit card details for payment purposes. When the form is complete, your credit card number will be verified using a checking sequence to complete the transaction. Credit card information and Data are transferred over a Secure Socket Layer (SSL) connection. Doing so protects the confidentiality of your Data while it is transmitted over the Internet. Purchasing transactions are assisted by third-party processors who are required by contract to protect the privacy of your Data. SSL is an industry standard for encryption over the Internet to protect Data supplied to us. We will use that information to assist in any inquiries about your transaction.

Accessing Our Website from Web-enabled Mobile Devices

You can access our website from a web-enabled mobile device to find a Nabulao Beach Hotel Corp. Hotel and/or restaurants operated by Nabulao Beach Hotel Corp. You can make a reservation from a web-enabled device. When you make a reservation, you may need to provide certain Data such as name, e-mail address, and credit card information for guarantee purposes. You may also enroll in My Nabulao Beach Hotel Corp. Elite from a web-enabled device.

Creating and Updating your My Nabulao Beach Hotel Corp. Elite Account Information

For hotel-related services, upon completing an online room reservation, you can set up, review, or update your My Nabulao Beach Hotel Corp. Elite information online. When enrolling in My Nabulao Beach Hotel Corp. Elite, you will be required to provide certain Data such as name, e-mail address, mailing address, room preferences, and service requests.

Food and Beverage Outlet Reservations

We collect Data such as your name and phone number when you make a reservation at our food and beverage outlets. If you are a repeat guest at our food and beverage outlets or have filled out our food and beverage questionnaire, we may store your Data in our Customer Information System to serve you better upon your return.

Spa Reservations

We collect Data such as your name, contact details, and where necessary, credit card information for payment purposes when you make a spa reservation. In addition, we may also collect information relating to your health, allergies, and treatment preferences before the spa treatment is commenced to ensure that your spa treatment is conducted under safe conditions.

Fraudulent E-mails

Please note that Nabulao Beach Hotel Corp. will never send you an e-mail requesting your password, credit card number, or passport, personal identity card, or social security number. If you receive any suspicious e-mails that look like they are from our group but ask you for your credit card number or passport, personal identity card, or social security number, it is a fraudulent e-mail or “phishing.” We recommend that you do not reply to the e-mail or click onto any links or pop-up messages and report to the local authorities which handle fraudulent e-mails. If you believe “phishers” have gained access to your personal or financial information, we recommend that you also change your password(s), alert your credit card service provider and bank, and review credit card and bank account statements to check for unauthorized charges.

Unsecure Communication

It is important to note that all e-mail communication is not secure. There is a risk inherent in the use of e-mail. Please be aware of this when requesting information or sending forms to us by e-mail, for example, from the “Contact Us” section of our website. We recommend that you do not include any sensitive information including credit card details when using e-mail or using any public computers/public WIFI. Our e-mail responses to you may not include any sensitive or confidential information. Please bear in mind that no security system or system of transmitting information over the Internet is guaranteed to be secure.

To be prudent, it is advisable to always close your browsers when you have finished completing a form or a reservation. Although the session will automatically terminate after a short period of inactivity, it is easier for a third party to gain access to your profile while you are logged onto our website and making a reservation.

Disclosures of Your Personal Information

From time to time, we may disclose and transfer your personal data and information to any Nabulao Beach Hotel Corp. hotels and resorts, both local and international, travel-related companies (e.g. airline companies, car rental companies, and excursion tour companies), and vendor partners who provide administrative, telecommunications, payment, fulfillment, or other services to any of the Nabulao Beach Hotel Corp. hotels and resorts to facilitate your requests or provide you with goods and services you require and for the purposes described under the section “How we use Personal Information”. The recipients of any such data are contractually prohibited from using personal data and information for any purpose other than for the purpose Nabulao Beach Hotel Corp. specifies.

We reserve the right to disclose any personal data and information when compelled to do so by a court of law or requested to do so by a governmental entity or if we determine it is necessary or desirable to comply with the law or to protect or defend our rights or property. We also reserve the right to retain information collected and to process such information to comply with accounting and tax rules and regulations.

We may share aggregated demographic information with business partners, affiliates, or other entities. This aggregate information is not linked or traceable to any personally identifiable information about you.

Except as described herein, we do not permit the sale or transfer of personally identifiable information to third parties.

Disclosure of Information to Third Parties

In addition to the required information sharing described above, we use the services of third-party agents, such as e-mail service providers and mailhouses, for the purpose of mailing materials to our patrons. These parties are contractually prohibited from using Data for any purpose other than for the purpose specified in their respective contracts. We do provide non-personally identifiable information to certain service providers for their use on an aggregated basis for the purpose of performing their contractual obligations to us. We do not permit the sale of Data to entities outside of Nabulao Beach Hotel Corp. for any use unrelated to our group operations or use of Data by third party for their own purposes. Nabulao Beach Hotel Corp. will implement, where necessary appropriate measures, including contractual clauses, to secure the transfer of your Data to the third party service providers both local and international. Nabulao Beach Hotel Corp. will with a level of protection different from the one existing in the country in which your Data is collected.

Data Storage

We store certain customer information and reservation details in our Customer Information System and Reservation System. Both systems are secure customer databases stored on a dedicated server located in data centers hosted by a third-party service provider. The stored database includes Data such as guest name, address, phone numbers, position, company name, and credit card information. We may also store other information such as your room, food and beverage, other service preferences, and transaction history. This information may be shared within our group individual hotels to better anticipate your needs prior to and during your stay.

We implement IT and network security policies to protect your data from unauthorized access limited by the capability of IT and network equipment we utilize. Our server resides behind firewalls to protect the Data collected from you against unauthorized or accidental access. Because laws applicable to personal information vary by country, our hotels or other business operations may put in place additional measures that vary depending on the applicable legal requirements.

In our marketing database

Some of our group operations maintain a database of customer information that is used for marketing, promotion, research, understanding, and analyzing customer behavior and customer profiling to improve our services. You will receive marketing and promotional materials if you have already given your express and specific consent in some data collection forms. You may elect to unsubscribe from receiving future e-mail promotions at any time.

Secure Transmission and Storage of Data

We treat all Data that you provide to us as confidential information. To prevent Data from unauthorized access or leakage, we have adopted and regularly monitor our group’s security and data privacy policies and procedures. We use SSL protocol – an industry standard for encryption over the Internet, to protect the Data. When you type in sensitive information such as credit card details, it will be automatically encrypted and transferred over an SSL connection. This ensures that your sensitive Data is encrypted as it travels over the Internet. You will know that you are in a secure mode when the security icon (such as a lock) appears on the computer screen.

Direct Marketing

We intend to use your personal information (including your name, address, telephone numbers, email, and other contact details) to send you marketing communications