Privacy Policy, in plain language.

Effective date: August 2026 · Replaces the May 2024 policy

AmanDagat Beach Resort is committed to safeguarding your privacy. This Policy explains how we collect, use, protect and share your personal information — whether you engage with us online, by phone or message, or during your stay — in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC).

1.Information We Collect

• Personal details: full name, contact number, email address, mailing address, and signature (collected at check-in).
• Identification: a valid government-issued ID presented at check-in, as required for guest registration and security.
• Booking information: dates of stay, number of guests, and any special requests.
• Vehicle details: description and plate number, where you arrive by private vehicle.
• Payment details: transaction confirmations only — we do not store full card numbers.
• Website usage: IP address, browser type, device data and pages visited (see Cookies, below).
• Feedback: reviews, comments or enquiries you submit voluntarily.

2.Why and On What Basis We Use Your Information

We process personal information only where the Data Privacy Act allows, namely:

• To perform our contract with you — processing and confirming reservations, providing your stay and related services;
• With your consent — for example, sending occasional promotions (you may opt out at any time);
• To comply with legal obligations — including guest registration, tax and accounting requirements;
• For our legitimate interests — resort security, service improvement and fraud prevention, balanced against your rights.

3.Data Sharing

We do not sell your personal information. We share it only with:

• Trusted partners such as booking platforms and payment processors, to complete your reservation;
• Service providers that support resort operations under confidentiality obligations;
• Authorities, where required by law or to protect safety.

All third parties processing data on our behalf are contractually required to keep your information confidential and secure, as the Act requires.

4.Data Security

We apply reasonable organisational, physical and technical safeguards to protect your personal information against loss, misuse and unauthorised access. No system is completely foolproof, but we take the precautions the law requires to minimise risk.

5.Data Retention

We keep personal information only as long as needed for the purposes above — typically for the duration of your booking relationship with us and thereafter as required by law (for example, tax and accounting records). When no longer needed, records are securely deleted or disposed of.

6.Your Rights

Under the Data Privacy Act, you have the right to:

• Be informed about how your data is processed;
• Access and request a copy of your personal data;
• Correct inaccurate or outdated information;
• Erasure or blocking of data that is unlawfully processed or no longer necessary;
• Object to processing, including withdrawing consent to promotional messages;
• Data portability — an electronic copy of data you provided;
• Damages, where you suffer harm from inaccurate or unauthorised use of your data;
• Lodge a complaint with the National Privacy Commission (privacy.gov.ph).

To exercise any of these rights, contact us at info@amandagat.com. We will respond within the periods the law provides.

7.Data Breach

In the unlikely event of a data breach likely to cause serious harm, we will notify the National Privacy Commission and affected guests within the timeframes required by NPC rules, and take immediate steps to contain and remedy the breach.

8.Cookies

Our website uses cookies to improve your experience. Where required, we ask for your consent before setting non-essential cookies, and you can change your preferences at any time via the site’s cookie settings or your browser. Disabling cookies may limit some features.

9.External Links

Our website may link to third-party sites. We are not responsible for their privacy practices or content.

10.Children

Our services are booked by adults. We collect children’s details (such as ages for occupancy) only from a parent or guardian, and only as needed for the stay.

11.Changes to This Policy

We may update this Policy from time to time. Significant changes will be posted on this page with a new effective date. Continued use of our services indicates acceptance of the updated Policy.

12.Contact Us

AmanDagat Beach Resort — P-5 Sitio Linasin, Brgy. Sindol, San Felipe, 2204 Zambales, Philippines.

Privacy contact: info@amandagat.com · 0917 680 1800 · www.amandagat.com

You may also reach the National Privacy Commission at privacy.gov.ph.

Data Privacy Act Compliance Notice — Republic Act No. 10173

What the law is

The Data Privacy Act of 2012 (Republic Act No. 10173) protects the personal information of individuals in the Philippines. It applies to any organisation that collects or processes personal data — including resorts registering guests — and is enforced by the National Privacy Commission (NPC).

The principles we follow

Under Section 11 of the Act, personal data must be processed with transparency (you are told what we collect and why), for a legitimate purpose (declared, lawful purposes such as your booking, guest registration and security), and with proportionality (we collect only what is necessary, and no more).

Sensitive personal information

The Act gives stronger protection to sensitive personal information — such as government ID numbers and health information (Section 13). We collect a government-issued ID at check-in as the law and security practice require, and health information only where you tell us. Such information is used only for the purpose you gave it, and shared only where the Act allows.

Your rights as a data subject

Sections 16 to 18 give you the right to be informed; to access your data; to correct it; to erasure or blocking; to object to processing; to data portability; and to be indemnified for damages caused by unlawful processing. Start with an email to info@amandagat.com.

Security, accountability and penalties

Sections 20 and 21 require us to keep your data secure and make us accountable for data we transfer to third parties, who must protect it to the same standard. Serious breaches must be reported to the NPC and to affected individuals. The Act imposes criminal penalties (Sections 25 to 34) for unlawful processing — obligations we take seriously.

Where to learn more or complain

The full text of RA 10173 and its Implementing Rules is at privacy.gov.ph. If you believe your rights have been violated, contact us first at info@amandagat.com — and you always have the right to complain directly to the NPC.