Privacy Policy

Introduction

Sandy Beachside Property Holdings, Inc. (“Sandy Beach Hospitality”) respects the privacy, confidentiality, and security of the personal data you submit to us or that we collect when you use our website or other online products and services (“Site”), or when you contact or otherwise interact with us.

This Privacy Policy serves as guidelines for handling of your personal data.

You will be asked to agree to the terms of this Privacy Policy when making inquiries, registering for events or promotions, or otherwise corresponding with us via the Site, as required by applicable law. By continuing to use the Site, you acknowledge and accept the terms of this Privacy Policy, subject to the requirements of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

You may reach Sandy Beach Hospitality at Unit 9B, 7514 GMA Lou-Bel Plaza, San Antonio, Makati City. Our data protection officer can be contacted via dpo@sandybeachhospitality.com.

Your Rights

1. Information. You have the right to know: if the personal data you shared with us will be or has been processed; the purposes, scope, and method of such processing; the recipients of the collected data; and how long it will be retained.
2. Access. You have the right to reasonable access, upon written request, to your personal data.
3. Rectification. You have the right to correct any error in your personal data.
4. Erasure or Blocking. You have the right to cause the erasure or blocking of your personal data from our system where the same is incomplete, outdated, false, or unlawfully obtained; where it is being used for an unauthorized purpose; where it is no longer necessary for the declared purpose; or when you otherwise withdraw your consent to its processing.
5. Portability. Where your personal data is processed by electronic means and in a structured and commonly used format, you have the right to obtain a copy thereof from us.
6. Damages. You shall be compensated for any damage sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal data. You may file a complaint or exercise your rights above by emailing our DPO at dpo@sandybeachhospitality.com.
   
   

What We Collect

When you use our Site or otherwise contact us, we may collect the following:

Data you provide

1. Your full name and contact information (e.g., country of residence, physical address, email address, and phone number), passport and visa information, and where applicable, gender, and date of birth.
2. Guest stay information, including date of arrival and departure, goods and services purchased, special requests made, your service preferences, telephone numbers dialed, and, where coursed through us, email, faxes, telephone, and other messages received.
3. Your credit card, mobile payment, and other payment details.
4. Any information necessary to fulfill special requests (for example, guest preferences).
5. Your reviews, feedback, opinions, and interactions you have with us about our hotels.
6. Information collected through the use of closed-circuit television (CCTV) systems and other security systems during your stay.
7. Any other personal data you choose to provide to us (e.g., health data, social media information).
   
   

Information collected automatically when you use the site

1. Log information:  this includes the type of browser you use, access times, pages viewed, your IP address, and the page you visited before navigating to our Site.
2. Device information:  this includes information about the computer or mobile device you use to access our Site, including the hardware model, operating system and version, unique device identifiers (such as, IP address, IMEI number, the address of the device’s wireless network interface, or mobile phone number used by the device) and mobile network information.
3. Location information:  this contains the location of your device each time you access our Site or otherwise consent to the collection of this information.
4. Information collected by cookies and other tracking technologies: Cookies help us improve our Site and your browsing experience.
   
   

Data We Collect from Other Sources

We may also gather personal data from third-party service providers whom you have permitted to share your information, online travel agencies (OTAs), or from public sources. We may combine this data with information collected through our Site where necessary to effectively manage our relationship with you.

If you provide us with personal data about third parties (for example, of family members included in your booking), you confirm that you have priorly obtained their consent or a valid legal basis to share their information with us.

Purposes for Collection, Use, and Disclosure

We collect, use, and may disclose your personal data for the following purposes:

The performance of our agreement with you

1. Manage, process, and charge for hotel arrangements, reservations at restaurants, goods and services, and administer online or in-person check-in and check-out.
2. Perform our contractual obligations to you and other persons involved in your travel arrangements (e.g., travel agents, group travel organizers, credit card companies, airline operators).
3. Allow you to access the content on our Site and respond to your inquiries and requests for information and services.
4. Administer contests or any competitions conducted by or for us.

Our legitimate commercial interests

1. Understand the impact of our products and services on you, and provide you with better and more personalized service.
2. Provide privileges, benefits, and services to you, and ensure your ability to access and use products, services, facilities, and information.
3. Monitor your use of our Site, and conduct analysis of the use thereof to evaluate and improve our services, understand your preferences, display customized content which may be of interest to you, and troubleshoot any problems.
4. Conduct market analysis, market research, customer satisfaction, and quality assurance surveys to improve our services.
5. Manage and ensure the safety and security of guests, premises, and services (for example, handling any incidents, accidents, or claims, conducting investigations, and conducting security clearances).

Compliance with legal obligations

1. Meet legal and regulatory requirements and administer general record-keeping.
2. Prevent, detect, and investigate crime and analyze and manage commercial risks (such as fraud).
3. Conduct investigations.

Use of information based on consent

1. To facilitate direct marketing, promotional, and customer management purposes, including sending you promotional communications (which may include emails, SMS, and other forms of messaging) or special offers if you have consented to receive the same.
2. To use special categories of data (e.g., sensitive data from official identification documents, if any) only with your express consent.
3. For any other purposes for which we have obtained your consent, in accordance with the requirements of applicable law.

Other Purposes

Guests at our hotels or events

1. Providing customer service and support.
2. Creating and maintaining guest profiles in our system database.
3. Administering debt recovery and debt management.
4. Any other purposes relating to any of the above.

Customers or guests at our restaurants, bars, or other establishments

1. Indemnifying our hotel(s) from liability related to consumption of restaurant or bar food and drinks outside the restaurant, bar, or other establishment.
2. Preventing or suppressing a danger to your life, body, or health, where you are incapable of giving consent for whatever reason.
3. Any other purposes relating to any of the above.

Employees or other representatives of external service providers or vendors

1. Communicating with or providing you with any information that is required or requested.
2. Managing our relationship with you and ensuring that you comply with our policies, procedures, and requirements.
3. Conducting due diligence and background checks where necessary.
4. Facilitating business operations, including processing payments, issuing invoices, and managing accounts.
5. Assessing performance and compliance with contractual obligations.
6. Any other purposes relating to the management and oversight of our business relationships.

Direct Marketing

We may use your personal data to send you direct marketing communications about our products, services, or promotions, always with your consent. You may opt out of receiving such communications at any time by following the unsubscribe instructions in the marketing emails or by contacting us directly.

Data Security

We have put in place organizational, physical, and technical measures to prevent unauthorized or accidental access, processing, erasure, loss, or use of your personal data and to keep your personal data confidential, and review these measures periodically. We also require our third party service providers to observe at least the same standards, and to act at all times in compliance with applicable data protection laws.

Disclosure of Personal Data

Subject to the provisions of any applicable law and the above purposes, we may share your personal data with the following (where applicable):

1. Affiliates and related entities of Sandy Beach Hospitality, as may be relevant for the above purposes and to facilitate the operation of our business, but only on a need to know basis;
2. Third-party payment processors, payment service providers, external banks, credit card companies, IT and marketing support service providers, insurance companies and other consultants, vendors and service providers who need access to such information to carry out work or provide services on our behalf or who help us provide the Site to you or who help us detect, prevent, investigate, or otherwise manage crime or commercial risks (for example, fraud);
3. Vendors or third party service providers in connection with Sandy Beach Hospitality’s marketing promotions and services;
4. Anyone involved in your travel arrangements (e.g., travel agents, group travel organizers, credit card companies, airline operators);
5. Any court, Government or regulatory body, or law enforcement agency (in whatever jurisdiction), or otherwise in response to a request for information in accordance with any applicable law, regulation, court order, or legal process;
6. Existing or potential business partners, investors, assignees, or transferees in connection with, or during negotiations of, or to facilitate any business asset transactions (for example, merger, sale of company assets, change in hotel management);
7. Advisors, such as accountants, auditors, lawyers, other professional advisors, to enable us to better manage our business and comply with our legal and regulatory obligations;
8. Any other persons or entities, with your consent or at your request; and
9. In any other case as permitted or required by law.

We may also disclose aggregate or de-identified data (or data from which information can no longer be used to identify you) with third parties or partners.

Overseas Transfers

Our website is hosted by an entity in the United States and your personal data may therefore be transferred to, or stored at, locations therein. Please see their Privacy Notice here.

Retention

To the extent required or permitted by law, we delete, destroy, and de-identify personal data securely when retention is no longer necessary for the legal or business purposes for which it was collected or when requested by you.

Limitation of Liability

We cannot guarantee that our Site will function faultlessly and without any interruptions. We shall not be liable for damages that may result from the use of electronic means of communication, including, but not limited to, damages resulting from the failure or delay in delivery of electronic communications, or interception or manipulation of electronic communications by third parties or by computer programs used for electronic communications and transmission of viruses.

Third Party Sites

The Site may contain links to other websites, apps, content, services or resources on the internet operated by third parties (Third Party Sites). If you access these Third Party Sites, please be aware that they may have their own privacy policy, and we do not accept any responsibility or liability for these policies or for any personal data which they may collect. Please check these policies before you submit any personal information to these sites.

Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal obligations. Updates will be communicated by posting the revised policy on our Site with the date of the last revision. Your continued use of our Site and services following any changes to this Privacy Policy indicates your acceptance of the updated terms.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our data protection officer at dpo@sandybeachhospitality.com or at the following address: 

Sandy Beachside Property Holdings, Inc.

Unit 9B, 7514 GMA Lou-Bel Plaza, San Antonio, Makati City