Privacy Policy | Mariden Resort and Homestay Siargao

1. Introduction

Welcome to Mariden Resort and Homestay Siargao ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our WiFi services, or stay at our resort.

By making a reservation, visiting our website, or entering our Resort premises, you acknowledge and consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

Name and contact information (email address, phone number, mailing address)
Booking and reservation details
Payment information (processed securely through third-party payment providers)
Guest preferences and special requests
Communication history with us

2.2 Automatically Collected Information

When you visit our website, we automatically collect:

IP address and browser type
Device information
Pages visited and time spent on our site
Referring website addresses
Analytics data through Google Analytics

2.3 CCTV and Video Surveillance

For the safety and security of all guests and staff, we operate closed-circuit television (CCTV) cameras in public areas of the Resort, including:

Pool area
Reception and common areas
Parking areas
Other public spaces

CCTV cameras are NOT installed in guest rooms, bathrooms, or other private areas. Recorded footage is retained for security purposes and may be used in the investigation of incidents, accidents, or as required by law. Footage retention periods comply with Philippine data privacy regulations.

2.4 Photography and Video Recording

We may take photographs or videos of the Resort premises and public areas for marketing, promotional, and social media purposes. You may be incidentally captured in such images or videos while in public areas of the Resort. If you do not wish to be photographed or recorded, please inform our staff at check-in.

2.5 WiFi Usage Data

When you use our complimentary WiFi service, we collect:

Device MAC address and device type
WiFi connection times and duration
Data usage and bandwidth consumption
Acceptance of WiFi Terms of Service

WiFi usage is subject to our separate WiFi Terms of Service presented via captive portal. We reserve the right to monitor network activity to ensure compliance with acceptable use policies and to protect our network infrastructure.

2.6 Behavioral and Interaction Analytics

To improve user experience and optimize our website performance, we collect comprehensive behavioral analytics data through Google Analytics 4, including:

Button and Link Clicks: All clickable elements including call-to-action (CTA) buttons, booking buttons, navigation menu links, footer links, and external links
FAQ Interactions: Questions clicked, FAQ categories viewed, and engagement patterns
Room Browsing: Room types viewed, "Book Now" button clicks, and room image carousel interactions
Contact Method Selection: WhatsApp, email, phone call, and messenger clicks across all pages
Social Media Engagement: Clicks on Facebook, Instagram, Twitter, YouTube, TikTok, and other social media links
Gallery Interactions: Image lightbox views and gallery navigation patterns
Form Submissions: Contact form submissions, inquiry form completion status, and form abandonment data
Navigation Patterns: Page-to-page navigation flows, menu usage, and user journey mapping

Purpose of Behavioral Tracking: This comprehensive tracking allows us to understand how visitors interact with our website, identify areas for improvement, optimize conversion funnels, and provide a better user experience. All tracking is anonymous and does not collect personally identifiable information unless you voluntarily provide it through forms or booking systems.

Third-Party Analytics Service: We use Google Analytics 4 for behavioral tracking. Google Analytics may set cookies on your device to enable this functionality. For more information about how Google uses data, visit Google's Privacy Policy.

3. How We Use Your Information

We use your personal information to:

Process and manage your reservations
Communicate with you about your booking
Provide customer service and respond to inquiries
Send you promotional materials (with your consent)
Improve our services and website experience
Comply with legal obligations
Detect and prevent fraud
Ensure safety and security through CCTV monitoring of public areas
Investigate incidents or accidents using CCTV footage when necessary
Marketing and promotional activities using photographs/videos of Resort premises
Manage WiFi network usage, ensure fair access, and prevent abuse
Protect our network infrastructure from security threats and excessive usage

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

Service Providers: Third-party vendors who assist us with booking systems, payment processing, and analytics (e.g., BookingKu, Google Analytics)
Online Travel Agencies: When you book through platforms like Booking.com, Agoda, or Airbnb
Legal Requirements: When required by law or to protect our rights

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small files stored on your device that help us:

Remember your preferences
Analyze website traffic and usage patterns
Improve website functionality
Track user interactions and behavioral analytics

5.1 Types of Cookies We Use

Google Analytics Cookies:

_ga - Distinguishes unique users and expires after 2 years
_gid - Distinguishes unique users and expires after 24 hours
_gat - Used to throttle request rate and expires after 1 minute
_ga_<container-id> - Persists session state for Google Analytics 4 and expires after 2 years

Cloudflare Cookies:

__cflb - Used for load balancing and routing
__cf_bm - Bot management cookie for security
cf_clearance - Clearance cookie for verified visitors

Essential Cookies:

Session cookies for booking system functionality
Security cookies for CSRF protection

You can control cookies through your browser settings. However, disabling cookies may affect your website experience and limit certain functionality such as the booking system. To opt out of Google Analytics tracking, you can install the Google Analytics Opt-out Browser Add-on.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

Booking and Guest Information: Retained for up to 7 years for accounting and tax purposes as required by Philippine law
CCTV Footage: Retained for 30-90 days unless required for investigation or legal purposes
WiFi Connection Logs: Retained for up to 6 months for network security and troubleshooting purposes
Marketing Photos/Videos: Retained for the duration of their use in marketing materials; you may request removal at any time
Email Communications: Retained for the duration of the business relationship plus 2 years

8. Your Privacy Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights:

Right to be Informed: You have the right to be informed about the collection and processing of your personal data
Right to Access: Request a copy of the personal information we hold about you
Right to Correction: Request correction of inaccurate or incomplete information
Right to Erasure/Deletion: Request deletion of your personal information (subject to legal retention requirements)
Right to Object: Object to processing of your personal data for direct marketing, including profiling
Right to Data Portability: Request transfer of your data to another service in a structured, commonly used format
Right to Lodge a Complaint: File a complaint with the National Privacy Commission of the Philippines

Specific Rights Related to CCTV and Photography:

Request access to CCTV footage in which you appear (subject to verification and security considerations)
Opt out of marketing photography by informing staff at check-in
Request removal of your image from marketing materials (where technically feasible)

To exercise these rights, please contact us at inquiry@maridenresort.com or visit our front desk. We will respond to your request within 15 days as required by Philippine law.

9. Third-Party Links

Our website may contain links to third-party websites (e.g., booking platforms, social media). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than the Philippines. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

12. Legal Basis for Processing

We process your personal data based on the following legal grounds under the Data Privacy Act of 2012:

Consent: When you make a booking, use our WiFi, or enter our premises, you provide consent for data processing
Contract Performance: Processing necessary to fulfill our contractual obligations (e.g., honoring your reservation)
Legitimate Interests: CCTV surveillance for safety and security, network monitoring for infrastructure protection
Legal Obligation: Compliance with tax laws, anti-money laundering regulations, and law enforcement requests

By entering the Resort premises, you consent to:

CCTV recording in public areas
Incidental photography/video recording for marketing purposes (opt-out available)
WiFi usage monitoring when using our network services

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Material changes will be communicated via email to registered guests or posted prominently on our website.

14. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your personal data, please contact us:

Mariden Resort and Homestay Siargao
Brgy. Lobogon, Del Carmen, Surigao del Norte 8418, Philippines
Email: inquiry@maridenresort.com
Phone/WhatsApp: +63 920 725 4405

Data Privacy Complaints: If you believe your data privacy rights have been violated, you may file a complaint with the National Privacy Commission of the Philippines:

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC)
Vicente Sotto Street, Pasay City, Metro Manila 1307, Philippines
Email: info@privacy.gov.ph
Website: www.privacy.gov.ph
Hotline: (+63 2) 8234-2228