Data Privacy Policy

Tambuli Seaside Resort and Spa

When you use our website (https://tambuliseasideresortandspa.com), this notice applies to you. Please read and understand it before providing us with your personal data.

Tambuli Seaside Resort and Spa (“TSRS”) is committed to safeguarding your personal information (“Personal Information”) in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission (“NPC”). We value your personal, sensitive, and privileged information and assure you that it shall be used solely for its intended purpose, or as required by applicable national and local laws, rules, and regulations. Such information shall be retained only for the agreed period and will be protected with appropriate measures against any unauthorized access, disclosure, or data privacy breach.

Collection

a. Type of data collected:

• Information relating to your identity, such as but not limited to your name, gender, place and date of birth, nationality, civil status, permanent and present residential address, contact details, and details of government-issued registrations;
• Information relating to your financial capacity, such as but not limited to credit history and/or credit card information;
• Information relating to your educational and professional background, such as but not limited to curriculum vitae, employment and medical history;
• Information about your visit and use of our websites.

b. Manner of data collection

• Cookie-based, upon use or access of our websites; and
• Consent-based, upon submission of any forms to our employees or duly-authorized representatives/agents or subscription to our newsletters.

c. Consent to data collection

By submitting your Personal Information pursuant to any of your dealings with TSRS or by accessing this website, you consent to the collection, use, storage and all other forms of processing of your Personal Information in accordance with this Privacy Statement. Any disclosure of Personal Information pertaining to another person (such as spouse, partners, dependents, or emergency contact persons) shall be construed as bearing the consent of such third party.

Use and Purpose

The Personal Information we collected from you will be used for the following intended purposes:

A. For clients of products/services, and hotel guests:

• Determine the qualification to avail of the Company’s products and/or services;
• Fulfill and monitor the status of contractual obligations of the clients and disseminate service and/or product related information and notices;
• Enable the Company to respond to clients and potential clients’ queries, requests and/or complaints;
• Enhance customer experience by delivering products and/or services suited to the specific requirements of the clients;
• Process information for statistical, analytical, advertising, and market opinion research purposes.

B. For employees, and job applicants:

• Identify the employees and applicants of the Company;
• Perform general administrative and personnel management actions such as, but not limited to, recruitment, assessment of suitability, performance appraisal, promotion, training, career development, remuneration, health and safety and discipline;
• Disseminate information regarding HR updates and company policies;
• Process information for statistical, analytical, advertising, and market opinion research purposes.

Sharing and Disclosure

With your consent, or when otherwise permitted by law, TSRS may share your Personal Information with its affiliates and subsidiaries for the purposes stated above.

Your information will be kept confidential. However, it may be necessary for TSRS to disclose this information to third-party service providers engaged to perform services on its behalf, including, but not limited to, the following:

• Government agencies such as SSS, PhilHealth, HDMF;
• Banking and financial institutions;
• Insurance providers;
• Storage facility providers;
• External advisors and other professional advisors, such as auditors and legal firms;
• Contractors or sub-contractors; and
• Such other service providers that may be appointed by the TPDI including background investigators.

Use of Cookies

We use cookies to improve and personalize your experience on our website. These small data files, stored by your browser on your device, help us identify visited areas of the site and customize content accordingly. Unless you change your browser settings to block cookies, they will be activated during your interaction with our website. Please note that we do not control how third parties use their own cookies. While most browsers allow you to disable cookies, doing so may affect certain site functions. We do not store any personal information in cookies.

Security

We implement a combination of technological, organizational, and physical safeguards to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures are designed to maintain the confidentiality, integrity, and availability of your data. Our key security practices include:

• Storing your information on secured servers protected by firewalls and other industry-standard security tools.
• Using encryption technologies on computer devices and during data transmission.
• Implementing physical access controls and surveillance in areas where data is stored.
• Conducting third-party website and application security testing prior to launch and on a regular basis.
• Limiting access to your data strictly to qualified and authorized personnel, including third-party service providers bound by confidentiality and data protection obligations.

Please also take note of the following:

• While we take all reasonable steps to secure your data, no method of electronic transmission or storage is completely secure. Potential risks may still include unauthorized access, disclosure, or misuse.
• You are responsible for keeping your account credentials (e.g., username and password) confidential. Do not share them and store them securely.
• We may revise this Privacy Notice from time to time as we add new features and purposes of data processing, or as laws change that may affect our company’s services. When we make material changes to this Privacy Notice, we will post the date it was last revised.
• If you suspect any compromise or breach of your personal information, please contact us immediately so we can take appropriate action.