Privacy policy
What we collect when you enquire, book or stay, why we keep it, and how to ask us to change or delete it.
Who we are
This website and the resort are run by Eastwind Beach Villas, Sitio Guinling, Barangay San Fernando, El Nido, Palawan 5313, Philippines. We are the personal information controller for the details you give us, under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
For anything in this policy, write to [email protected] or call +63 945 120 5706.
What we collect
Enquiry form. Your name, email address, the dates and villa you are asking about, the number of guests, and anything you write in the note.
Bookings. Villa bookings are made on our booking page, which Cloudbeds runs for us. It collects your name, country, email, phone number, estimated arrival time, the names of any additional guests, and your payment details.
Messages. If you contact us on WhatsApp, by email or by phone, we keep the conversation so we can follow up on it.
During your stay. The details needed to register you at check-in, any requests you make, and recordings from CCTV cameras that cover the common areas of the property (never the inside of the villas).
This website. Our server keeps standard technical logs (IP address, browser, pages requested) for security. The site does not use advertising or analytics trackers.
Why we use it
To answer your enquiry, take and manage your booking, prepare for your arrival, look after you during your stay, and meet our legal obligations, including tax and tourism records. We rely on your consent when you send an enquiry, on our contract with you when you book, and on our legitimate interest in keeping guests and the property safe.
We do not sell your details, and we only send you news or offers if you ask us to.
Who we share it with
Cloudbeds runs our booking page and stores reservation and payment details in a PCI-compliant vault. Their own privacy policy applies on the booking page.
Payment providers (card, GCash, Maya or PayPal, depending on how you pay) receive what they need to process the payment.
Service providers that host this website and our email, under confidentiality terms.
Authorities, where the law requires it, for example for tourism registration or a lawful request from the police.
Some of these providers store data outside the Philippines. Where they do, we only use providers bound to protect it to a standard comparable to Philippine law.
Cookies
This site sets only the cookies it needs to work, for example to keep a form submission secure. The Cloudbeds booking page and WhatsApp set their own cookies when you use them, and their policies explain what those do. You can clear or block cookies in your browser settings at any time.
How long we keep it
Enquiries that do not become bookings are deleted after 12 months. Booking and payment records are kept for as long as Philippine tax law requires. CCTV footage is overwritten automatically after a short period unless it is needed for an incident.
Your rights
You can ask to see the personal information we hold about you, correct it, have it deleted or blocked, object to how we use it, or withdraw consent you gave us. Write to [email protected] and we will reply within 15 working days.
If you are not satisfied with our answer, you can complain to the National Privacy Commission at privacy.gov.ph.
Keeping it safe
Access to guest information is limited to the staff who need it. Payment details are handled by our payment providers and are never stored on this website. If a breach ever puts your information at risk, we will tell you and the National Privacy Commission as the law requires.
Changes to this policy
If we change this policy, we will post the new version here with a new date.