ALESEA PRIVACY POLICY

Here at Alesea, Inc. (including its employees, agents, consultants, or other personnel), we respect your privacy and are committed to safeguarding your personal data. This Privacy Policy outlines how we collect, use, and protect your personal data when you interact with our website and avail of our services, in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (the "DPA"). Any information you provide to us indicates your express consent to our Privacy Policy.

1. What Data Do We Collect?

To perform our services, we may collect personal data and information from you, including, but not limited to, the following:

Personal Information: Name, birthdate, nationality, civil status, gender, ID details, email address, residence, contact number, office and mailing address, tax identification number, Booking details (check-in/check-out dates, villa/room type, preferences), and other information you voluntarily provide (e.g., feedback, inquiries, or survey responses).

Financial Information: Credit card information, bank account information, and other payment details. 

Technical Information: IP address, device type, browser type, browsing, and social media behavior on our website or when you tag or mention us on your social media accounts.

Other Information: Any additional data you voluntarily provide to our operations, legal, and marketing teams to update your personal data or information on record; in relation to your inquiries or requests made to our employees and/or agents; when you visit, interact, and connect to our website and social media pages; or any other event or activity that may be similar or related to any of the foregoing.

2. How Do We Use Your Data?

Your personal data may be used by Alesea its employees, agents, consultants, or other personnel handling your transactions, services, or requests, for the following purposes:

• Processing reservations, bookings, and payments

• Managing your stay and personal preferences

• Responding to your inquiries, requests, or feedback

• Providing you with updates, promotions, and offers (with your consent)

• Improving our website, services, and customer experience

• Complying with legal and regulatory requirements

• Ensuring the safety and security of our guests, staff, and property

• Record-keeping, billing, and auditing purposes

To comply with legal and regulatory obligations, including those under the DPA.

3. Legal Basis for Processing

We process personal information based on the following lawful grounds under the DPA:

• Consent – You have given clear permission to process your data.

• Contractual necessity – The processing is necessary to fulfill your booking or reservation.

• Legal obligation – The processing is required to comply with applicable laws and regulations.

• Legitimate interest – The processing is necessary for the Company’s operational and business interests, provided it does not override your fundamental rights.

4. How Do We Protect Your Data?

We implement appropriate technical, physical, and organizational measures, such as limiting access to personal data and information on a need-to-know basis, to protect your personal data from unauthorized access, unlawful processing, accidental loss, destruction, or damage. These measures are regularly reviewed and updated to ensure the highest standards of data protection.

5. Who Do We Share Your Data With?

We do not share your personal data with third parties, except when necessary to:

• Provide our services to you, including financial, administrative, technical, and ancillary services (e.g., payment processing, payment of taxes and other necessary fees, etc.).

• Comply with laws, rules, or regulations that require us to disclose your personal data and information.

• Protect the rights, property, or safety of Alesea, our employees and agents, clients, or others.

6. Your Rights

Under the DPA, you have the following rights regarding your personal data:

• Right to be Informed: You are being informed that your personal data and information are being processed.

• Right to Access: You may request access to and a copy of the personal data we hold about you, the manner and reason for data processing, how the data and information were obtained, and by whom it is being processed.

• Right to Correction: You may request the correction of any inaccuracies in your personal data unless the request is vexatious or otherwise unreasonable.

• Right to Suspend, Withdraw, Erasure, and Blocking: You may request the suspension, withdrawal, removal, deletion, or order the blocking of your personal data under certain conditions provided under the DPA.

• Right to Damages: You may be indemnified for any damages sustained due to such inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal information.

• Right to Object: You may object to our processing of your personal data, including processing for direct marketing purposes.

• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.

You may be indemnified for any damages sustained due to such inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal data.

To exercise any of these rights, please contact us at dpo@alesea.co. We will respond to your request in accordance with applicable laws and regulations.

7. Cookies

We use cookies to enhance your experience on our website. Cookies help us understand how you use our site and improve its functionality. You can set your browser to refuse cookies or to alert you when cookies are being sent. Please note that some parts of our website may not function properly if you disable cookies.

8. Retention of Data

We retain your personal data only as long as necessary for the purposes outlined in this Privacy Policy unless a longer retention period is agreed upon by the parties to a contract, or as required or permitted by law. We will securely delete or anonymize your data when it is no longer needed.

9. Data Protection and Security

We implement organizational, physical, and technical security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. While we strive to protect your data, no electronic storage or transmission method is 100% secure.

10. Links to Other Websites

Our website may contain links to third-party websites (e.g., booking portals, social media pages). 

We are not responsible for the privacy practices or content of those external sites. We encourage you to review their respective privacy policies.

11. Changes to This Policy

We may update this Privacy Policy periodically by posting a new version on our website. We encourage you to review this page regularly to stay informed of any changes. Significant changes will be communicated to you directly, where possible.

12. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact:

Data Protection Officer (DPO)

Alesea, Inc.

Picadilly Star Building, BGC, Taguig City, Philippines

Email: dpo@alesea.co