Privacy Policy

Last updated: March 12, 2026

Cebu-Connect Travel and Tours (“CCT,” “we,” “us,” or “our”) values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your data when you use our website, booking platform, and related digital services.

By accessing our website or submitting any personal information, you acknowledge that you have read and understood this Policy. If you do not agree, please discontinue use of our services

1. Scope of This Policy

1.1 This Policy applies to all personal information collected from:

Guests and customers who inquire about or book tours through CCT;

Partner tour providers, guides, and transport operators affiliated with our platform; and

Visitors who interact with our website, mobile pages, social media channels, or communication tools.

1.2 This Policy complements our Terms and Conditions and other notices you may receive in connection with your booking.

1.3 Links to third-party websites, platforms, or partner pages are provided for convenience. CCT is not responsible for their privacy practices. Please review their policies before sharing personal data.

1.4 Platform Role

CCT operates as a travel booking and coordination platform, connecting guests with independent local tour providers, guides, transport operators, and related tourism service partners.

Unless expressly stated otherwise, CCT does not directly own, manage, or operate the tours, transportation services, or activities offered through the platform. These services are delivered by independent providers who are responsible for their own operations, safety standards, permits, insurance, and service execution.

In order to facilitate bookings and deliver the requested travel experience, CCT may collect and share relevant personal information with these independent providers.

Once such information is shared, the respective provider becomes responsible for handling personal data in accordance with their own privacy policies and applicable laws.

2. What We Collect

We collect personal information that you voluntarily provide or that is automatically generated through your use of our services, including:

2.1 Information You Provide

Name, nationality, age, contact number, and email address;

Booking details such as number of guests, tour dates, and preferred pick-up or drop-off points;

Identification data (e.g., passport or ID number) if required by tour providers;

Payment information and billing details (handled securely by our payment partners);

Special requests, dietary or health notes (when relevant to a specific tour); and

Reviews, feedback, and communication records with our team.

2.2 Information from Partners and Affiliates

When you book a service that is executed by a verified local provider, we may receive or share necessary booking information with them to confirm reservations and coordinate logistics.

2.3 Automatically Collected Data

When you visit our website or digital platform, we may automatically collect:

IP address, browser type, device identifiers, and operating system;

Browsing behavior such as pages visited, time spent, and clicks; and

Location information (when enabled by your device).

We use cookies and similar technologies to improve user experience. You can disable cookies through your browser settings.

2.4 Payment Information Handling

CCT does not directly store or process full payment credentials such as credit card numbers.

Payments are handled through:

• third-party payment processors, or

• manual payment methods such as bank transfer, GCash, or Maya

When payments are facilitated through external platforms (e.g., payment gateways, digital wallets, or forms), the processing of financial data is subject to the privacy and security practices of those providers.

CCT shall not be liable for any data exposure, breach, or issue arising from third-party payment platforms outside its direct control.

3. How We Use Your Information

3.1 We collect and process your personal data to:

Confirm and manage your tour bookings and payments;

Communicate updates, confirmations, and reminders about your tours;

Coordinate with verified local guides and transport providers to deliver your chosen experience;

Handle customer service inquiries, feedback, and refund requests;

Send relevant travel updates, promotions, and news (only if you have opted in);

Improve our website, services, and user experience;

Comply with legal and regulatory obligations under Philippine law.

We process data based on one or more of the following legal grounds:

Your consent;

Necessity for contract performance (booking fulfillment);

Legitimate business interest (service improvement, fraud prevention);

Legal obligation (tax, record-keeping, or law enforcement compliance).

3.2 Fraud Prevention and Security Monitoring

To maintain the integrity and safety of our platform, CCT may use personal information and system-generated data to detect, prevent, and investigate fraudulent transactions, unauthorized access, misuse of services, or activities that may violate our policies or applicable laws.

This may include monitoring booking patterns, payment activities, device identifiers, and other technical information to identify suspicious behavior or protect both guests and partner providers from potential fraud or abuse.

When necessary, CCT may temporarily restrict, suspend, or investigate accounts or transactions that appear to involve fraudulent or unauthorized activity.

4. Data Sharing and Disclosure

4.1 We do not sell or rent your personal data. However, we may share it in limited cases to fulfill legitimate purposes:

Partner Providers – to fulfill and deliver your booked services;

Payment Processors – for secure payment and refund transactions;

Customer Support Services – when handling booking changes or inquiries;

Legal Authorities – when required by law or government regulation;

Affiliated Service Providers – for system hosting, analytics, and communication delivery.

Once personal data is shared with third-party providers, CCT does not control how such data is stored, processed, or secured by those providers.

All third parties handling your information are required to observe strict confidentiality and comply with the Data Privacy Act of 2012 (RA 10173).

4.2 International Data Processing

CCT may utilize global technology providers, cloud hosting services, payment processors, analytics tools, and communication platforms to operate its website and booking system.

As a result, certain personal information may be processed or stored on servers located outside the Philippines. When such transfers occur, CCT ensures that appropriate safeguards and security measures are in place to protect personal data in accordance with applicable privacy regulations and the Data Privacy Act of 2012 (RA 10173).

By using our services, you acknowledge and consent to the possible transfer, storage, and processing of your information by trusted service providers in other jurisdictions for the purpose of operating and improving the CCT platform.

4.3 Safety and Emergency Disclosure

CCT may disclose relevant personal information when necessary to protect the safety of guests, partner providers, or the public.

This may include sharing information with emergency responders, law enforcement agencies, tourism authorities, or other relevant institutions when required to address safety concerns, respond to emergencies during tours, comply with lawful requests, or assist in investigations related to incidents occurring in connection with bookings made through the platform.

Such disclosures will only be made when reasonably necessary and in accordance with applicable laws and regulations.

4.4 Use of External Tools and Platforms

CCT may use third-party tools such as online forms, communication platforms, booking systems, or cloud-based services to collect and manage booking information.

By submitting information through these tools, you acknowledge that your data may be processed through external systems operated by independent service providers.

CCT takes reasonable steps to use reputable platforms; however, it does not control the infrastructure or security systems of these third-party tools.

5. Data Retention

Your personal information will be retained only as long as necessary to:

Complete the purposes outlined above;

Comply with statutory obligations; or

Resolve disputes or enforce agreements.

After the retention period, your information will be securely deleted or anonymized.

6. Data Protection and Security

We implement appropriate administrative, physical, and technical measures to protect your data from unauthorized access, alteration, or disclosure.

These include secure servers, encrypted transmission, limited access rights, and continuous system monitoring. While no system is entirely immune to risks, CCT ensures reasonable protection consistent with industry standards.

While CCT applies reasonable safeguards, users acknowledge that no digital platform can guarantee absolute data security.

7. Your Rights

Under the Philippine Data Privacy Act, you have the right to:

Access – request a copy of your personal data;

Rectify – correct inaccuracies in your information;

Withdraw Consent – stop receiving marketing messages or revoke permissions;

Erase or Block – request deletion or suspension of data processing; and

File a Complaint – with the National Privacy Commission (NPC) if you believe your rights are violated.

You may exercise these rights by contacting us (see Section 10).

8. Use of Cookies and Analytics

Our website uses cookies to personalize your browsing experience and track site performance. These small files may contain device identifiers and browsing preferences that help improve the functionality and performance of the website. You may choose to disable cookies, though some features may not function properly.

We also use analytics tools to understand user trends and improve our platform.

9. Children’s Privacy

CCT does not knowingly collect personal data from minors without parental or guardian consent. If a booking includes a child, the adult making the reservation is responsible for securing such consent.

10. Contact Us

If you have questions, concerns, or would like to exercise your data rights, please contact our Data Protection Officer (DPO):

📧 [email protected]

11. Policy Updates

We may update this Policy from time to time to reflect changes in law, technology, or operations. The latest version will always be posted on our website. Continued use of our services constitutes acceptance of the updated Policy.

Summary

Cebu-Connect Travel and Tours is built on transparency, trust, and respect — the same values that guide how we handle your data. We collect only what’s necessary, protect it with care, and use it to create seamless, memorable experiences with verified local providers.