Privacy Policy

Last Updated: November 2024

1. Introduction & Scope

Crazy Bears Hostel ("we," "us," "our," or the "Hostel") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and stay at our accommodation in Moalboal, Cebu, Philippines.

This policy complies with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and other applicable Philippine laws.

2. Information We Collect

Personal Information:

  • Full name, email address, phone number
  • Mailing address and country of origin
  • Date of birth
  • Passport or government-issued ID details

Payment Information:

  • Credit/debit card details (securely encrypted)
  • Billing address
  • Payment transaction history

Booking Information:

  • Reservation dates and room preferences
  • Special requests and accessibility needs
  • Tour and activity bookings

Security & Communications:

  • CCTV footage from common areas (not in private rooms, bathrooms, or dormitories)
  • Email communications and inquiries
  • Phone call records for booking confirmations
  • IP addresses and device information from website visits

3. Legal Basis & Purpose

We process your information for the following lawful purposes:

  • Performance of Contract: To complete and manage your booking, process payments, and provide accommodation services
  • Legal Compliance: To comply with government registration requirements and tourism regulations
  • Legitimate Business Interests: To prevent fraud, ensure safety and security, and investigate disputes
  • Consent: To send promotional communications (only when you've opted in)

4. Your Consent

By making a booking and staying at Crazy Bears Hostel, you consent to the collection and processing of your personal information as described in this Privacy Policy.

For marketing communications, we will obtain your explicit consent via checkbox or email opt-in. You can withdraw consent at any time by emailing crazybearshostel@gmail.com.

5. How We Use Your Information

  • To process and confirm your booking
  • To process payments securely
  • To communicate about your reservation and stay
  • To provide customer support and respond to inquiries
  • To ensure safety and security of guests and property
  • To prevent fraud and unauthorized access
  • To comply with legal and regulatory obligations
  • To improve our services (with anonymized data)
  • To send promotional offers (only with your consent)

6. Data Sharing with Third Parties

We only share your information with trusted service providers:

Payment Processors:

Secure payment gateways that process credit card transactions

Booking Platforms:

Booking.com, Hostelworld, Agoda, and similar platforms for reservation management

Government Authorities:

Only when legally required (tax obligations, law enforcement)

Service Providers:

Cleaning staff, maintenance contractors (limited access, bound by confidentiality)

We will NEVER sell, rent, or trade your personal information.

7. Data Security Measures

We implement robust security measures to protect your information:

  • SSL encryption for all website transactions
  • PCI DSS compliance for payment card data
  • Secure storage of identification documents
  • Restricted access to personal data (staff authorization only)
  • Regular security audits and updates
  • Confidentiality agreements with all staff members

While we implement industry-standard security measures, no system is completely secure. We encourage you to use strong passwords and keep your booking confirmation private.

8. Data Retention Periods

Guest Registers: 6 months minimum (as required by Philippine law)

CCTV Footage: 30 days minimum (then automatically deleted)

Financial Records: 5 years (for tax and audit purposes)

Marketing Data: Until you unsubscribe

Payment Card Data: Not stored (processed securely by third parties)

9. Your Data Subject Rights

Under the Data Privacy Act, you have the right to:

  • Access: Request and receive a copy of your personal data
  • Rectification: Correct inaccurate or incomplete information
  • Erasure: Request deletion of your data (with certain limitations)
  • Data Portability: Receive your data in a structured format
  • Object: Oppose processing of your data for certain purposes
  • Withdraw Consent: Stop receiving marketing communications

To exercise any of these rights, email crazybearshostel@gmail.com with your request. We will respond within 14 days.

10. CCTV & Video Surveillance

CCTV cameras are operational in the following areas:

✓ Monitored Areas:

  • Reception area
  • Common areas (bar, lounge)
  • Hallways and stairways
  • Entrance and outdoor areas

✗ NOT Monitored:

  • Private rooms or bathrooms
  • Shared dormitories

CCTV footage is retained for 30 days only for safety and security purposes, then automatically deleted. This is subject to the Anti-Photo and Video Voyeurism Act.

11. Data Breach Notification

In the unlikely event of a data breach, we will notify affected guests and the National Privacy Commission (NPC) within 72 hours as required by Philippine law.

National Privacy Commission Contact: +63 2 8888-6167 or www.privacy.gov.ph

12. Children's Privacy

Crazy Bears Hostel is designed for adults (18 years and older). We do not knowingly collect information from children. Minors staying at the hostel require parental consent and must stay in private rooms only.

13. International Data Transfers

Some of your data may be processed by booking platforms or payment processors outside the Philippines. When data is transferred internationally, we ensure appropriate safeguards are in place through Data Processing Agreements and contractual protections.

14. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated policy will be posted on our website with the "Last Updated" date. Your continued use of our website and services after updates constitutes your acceptance of the revised policy.

15. Contact Us

Address:

Panagsama Rd., Basdiot, Moalboal, Cebu 6032, Philippines

Data Protection Concerns:

Contact the National Privacy Commission at www.privacy.gov.ph

16. Legal Compliance

This Privacy Policy complies with:

  • Republic Act No. 10173: Data Privacy Act of 2012
  • NPC Implementing Rules and Regulations (IRR): Data Privacy guidelines
  • Republic Act No. 7394: Consumer Act of the Philippines
  • Republic Act No. 9593: Tourism Act of 2009
  • Presidential Decree No. 856: Code on Sanitation

Questions about our privacy practices? Contact us at crazybearshostel@gmail.com. We're here to help!