Last updated: February 20, 2026
Vacation.ph ("we", "us", or "our") operates a vacation rental marketplace connecting guests with property hosts across the Philippines. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services, in compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.
We collect the following types of information: Personal Data: Name, phone number, email address, and profile information you provide during registration. Host Data: Business name, business type, KYC documents (business permit, valid ID), e-wallet details, and bank account information. Booking & Property Data: Property listings, room types, pricing, calendar availability, booking records, and guest communications. Co-Host Data: Co-host invitations, roles, and activity logs for properties you manage or co-manage. Device & Usage Data: IP address, browser type, device information, pages visited, and interaction data collected through standard web technologies.
We use your personal information to: - Process your host registration and KYC verification - Manage property listings and bookings - Facilitate communication between guests and hosts - Process and release payouts to your e-wallet - Send booking notifications, payout alerts, and service updates - Manage co-host access and activity logging - Improve our platform, features, and user experience - Detect and prevent fraud and unauthorized activity - Comply with legal obligations under Philippine law
Under RA 10173 (Data Privacy Act), we process your personal information based on: - Consent: When you create an account and agree to our Terms of Service - Contractual Necessity: To fulfill hosting agreements and process payouts - Legitimate Interest: To improve our services, prevent fraud, and ensure platform security - Legal Obligation: To comply with tax, regulatory, and law enforcement requirements
We share your information with the following third parties, only as necessary to provide our services: - PayMongo: Payment processing and payout disbursement. - Dexatel: SMS delivery for OTP verification and booking notifications. - Cloudflare: Content delivery, security, and image storage (R2). - Mapbox: Map display and location services for property listings. We do not sell your personal data to third parties. Guests receive your property details and name when they view your listing or make a booking.
We retain your personal information for as long as your account is active or as needed to provide our services. KYC documents are retained for the duration of your hosting relationship plus 5 years for regulatory compliance. Booking and financial records are retained for 5 years after completion for legal and tax compliance. You may request deletion of your account and personal data at any time, subject to our legal retention obligations.
Under the Data Privacy Act (RA 10173), you have the right to: - Access: Request a copy of your personal data we hold - Correction: Request correction of inaccurate or incomplete data - Erasure: Request deletion of your personal data (subject to legal retention requirements) - Portability: Receive your data in a structured, machine-readable format - Object: Object to the processing of your personal data for certain purposes - Lodge a Complaint: File a complaint with the National Privacy Commission (NPC) To exercise these rights, contact us at [email protected].
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete such information promptly.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after changes are posted constitutes your acceptance of the revised policy.
If you have questions about this Privacy Policy or wish to exercise your data subject rights, contact us: Email: [email protected] Data Protection Officer: Vacation.ph DPO You may also file a complaint with the National Privacy Commission (NPC) at https://www.privacy.gov.ph if you believe your data privacy rights have been violated.