Restorya Stays — Privacy Policy

Effective Date: [June 2, 2026] Last Updated: [July 4, 2026]

This Privacy Policy explains how Restorya Stays (“we,” “us,” “our”) collects, uses, shares, and protects personal information from guests, users, and visitors of our website, booking pages, inquiry forms, and related services. It applies to restoryastays.com and all booking, inquiry, and customer support services we offer.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, “DPA”), the Personal Information Controller is [Restorya Stays OPC / your full registered business name], with registered address at [address], SEC Registration No. 2026030244143-12, and BIR TIN 802686002.

1. Personal Information We Collect

We may collect personal information when you submit an inquiry, create an account, make a booking, request support, sign up for updates, or communicate with us through forms, chat, email, phone, or social media. This may include your:

• Full name
• Email address
• Mobile number
• Billing details
• Booking and guest stay details
• Payment-related information
• Government-issued identification, where required for booking verification or building compliance
• Any other information you voluntarily provide

Some of the above (such as government-issued ID) is sensitive personal information under the DPA, and we handle it with additional care and only where necessary. You may browse the website anonymously, but some features are unavailable without providing the required information.

2. Information We Collect Automatically

When you interact with our website, we may automatically collect non-identifying technical information such as browser type, device type, operating system, internet service provider, IP address, pages visited, time spent, referral source, and general usage data. This helps us understand how the site is used and improve it.

3. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience, remember preferences, analyze traffic, and support site functionality. We may also use third-party analytics and advertising tools such as Google (Analytics/Ads), the Meta (Facebook) Pixel, and Reddit and Snapchat pixels, where enabled, to measure performance and show relevant ads.

You can disable cookies in your browser settings and opt out of interest-based advertising through each provider’s tools, though some parts of the website may not function properly if cookies are disabled.

4. How We Use Your Information

We use collected information to:

• Process and manage bookings
• Respond to inquiries and support requests
• Verify guest identity and reservation details
• Send booking confirmations, reminders, and service-related messages
• Improve website functionality and guest experience
• Personalize content and offers
• Send marketing updates, where you have consented (see Section 5)
• Comply with legal, tax, accounting, building, and regulatory requirements
• Prevent fraud, misuse, or unauthorized activity

Legal basis for processing. We process personal data where it is necessary to perform your booking, to comply with our legal and tax obligations, for our legitimate business interests (such as security and service improvement), or on the basis of your consent (for marketing).

5. Marketing Communications and Consent

We send marketing or promotional messages only where you have given clear, opt-in consent — for example, by subscribing to updates. We do not use pre-ticked boxes. You may withdraw your consent and unsubscribe at any time using the link in our emails or by contacting us, without affecting your bookings.

6. Payment Information

Payments made through our website are processed by third-party payment providers or gateways. We do not store full card details unless specifically provided through a secure, authorized payment process. Payment-related information is shared only as necessary with authorized payment processors and banking partners to complete transactions and maintain proper records.

7. How We Share Your Information

We do not sell, trade, or rent your personal information. We may share information only when necessary with:

• Payment processors and banking partners
• Website, hosting, and technical service providers
• Customer support tools
• Property partners or building/admin personnel, where required for booking fulfillment or guest access
• Legal, regulatory, tax, or government authorities, where required by law
• Other service providers assisting in operating the business

We may share aggregated, non-identifying information for analytics and reporting. Where we share data with processors, we require them to protect it to standards consistent with the DPA.

8. Cross-Border Data Transfers

Some of our service providers — including web hosting, payment gateways, and analytics or advertising platforms — may store or process data on servers located outside the Philippines. Where this happens, we remain accountable for your data and take reasonable steps to ensure it receives a comparable level of protection.

9. Data Retention

We retain booking, payment, inquiry, and customer records for as long as you maintain a relationship with us and for as long afterward as required for legitimate business, dispute-handling, security, legal, accounting, and tax purposes (including retention periods required by the BIR). When data is no longer needed, we securely dispose of it.

10. How We Protect Your Information

We adopt reasonable and appropriate organizational, physical, and technical measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. However, no online system is completely secure, and while we take reasonable precautions, we cannot guarantee absolute security.

In the event of a personal data breach that poses a real risk of serious harm, we will notify the National Privacy Commission and affected individuals as required under the DPA.

11. Your Rights as a Data Subject

Under the DPA, you have the right to:

• Be informed about how your personal data is collected and processed
• Access the personal data we hold about you
• Object to the processing of your data, including for direct marketing
• Rectify inaccurate or outdated data
• Erasure or blocking — to suspend, withdraw, or order the removal of your data under certain conditions
• Data portability — to obtain a copy of your data in a usable format
• Damages — to be compensated for harm caused by unlawful or negligent processing
• File a complaint with the National Privacy Commission (see Section 14)

To exercise any of these rights, contact our Data Protection Officer (Section 13). We will respond within a reasonable period as required by law.

12. Children’s Privacy

Our services are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal data, please contact us, and we will take appropriate steps to remove it.

13. Data Protection Officer and How to Contact Us

For any questions, requests, or concerns about this Policy or your personal data, contact our Data Protection Officer:

• Data Protection Officer: Restorya Admin
• Email: privacy@restoryastays.com
• Phone: N/A

14. Complaints to the National Privacy Commission

If you believe your data privacy rights have been violated and are not satisfied with our response, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines (privacy.gov.ph).

15. Third-Party Websites and Services

Our website may link to third-party websites, booking engines, payment pages, or services. We are not responsible for their privacy practices, and you should review their policies separately.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date above. We encourage you to review this page periodically.

17. Your Acceptance of This Policy

By using our website, making a booking, or submitting your information to Restorya Stays, you acknowledge that you have read and understood this Privacy Policy. Marketing consent, where applicable, is handled separately as described in Section 5. If you do not agree with this Policy, please do not use our website or services.