Privacy Policy

1. Introduction

The Hundred Islands National Park Management System (HINPMS) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our online booking and management system.

By using our services, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information

When you register an account or make a booking, we collect:

• Full name (first name, middle name, last name)
• Email address
• Contact number
• Home address (including barangay, city/municipality, province, region)
• Date of birth and age
• Gender
• Nationality (for foreign tourists: country of origin)

2.2 Passenger Information

For tour bookings, we collect passenger details including:

• Names and ages of all passengers
• Special categories (PWD status, senior citizen, government employee)
• Residential address for fee assessment purposes
• First-time visitor status

2.3 Booking and Payment Information

• Tour date and type
• Number of passengers
• Guest category (family, friends, company, school, etc.)
• Vehicle information (type and plate number)
• Accommodation preferences (guesthouse, tent, hotel)
• Payment records and order of payment details
• Payor name and contact information

2.4 Health Declaration Data

We collect health-related information through mandatory health declaration forms for public health and safety purposes.

2.5 Technical Information

• IP address
• Browser type and version
• Device information
• Access times and dates
• Pages visited and navigation patterns

2.6 Feedback and Survey Data

Voluntary feedback and responses to visitor satisfaction surveys.

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Delivery

• Processing tour bookings and reservations
• Managing boat assignments and passenger lists
• Calculating appropriate fees based on residency and category
• Issuing digital tickets and receipts
• Coordinating with boat operators and tour guides

3.2 Communication

• Sending booking confirmations and updates
• Providing important notifications about visit schedules
• Responding to inquiries and support requests
• Sending account verification emails

3.3 Compliance and Safety

• Verifying visitor information and residency status
• Monitoring park capacity and managing visitor flow
• Ensuring compliance with health and safety protocols
• Meeting legal and regulatory requirements

3.4 Improvement and Analytics

• Analyzing visitor patterns and preferences
• Improving our services and user experience
• Generating reports for park management
• Conducting visitor satisfaction surveys

4. Information Sharing and Disclosure

4.1 Government Authorities

We may share information with:

• Department of Environment and Natural Resources (DENR)
• Local Government Unit of Alaminos City
• Tourism offices and regulatory bodies
• Law enforcement when legally required

4.2 Service Providers

We share necessary information with:

• Registered boat operators and tour guides
• Accommodation providers (guesthouses, hotels)
• Payment processing partners

4.3 Third Parties

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Secure database storage with access controls
• Encrypted data transmission (HTTPS)
• Regular security audits and updates
• Password protection and user authentication
• Limited staff access on a need-to-know basis
• Regular data backups

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purposes outlined in this policy
• Comply with legal and regulatory requirements (minimum 5 years for financial records)
• Resolve disputes and enforce agreements
• Maintain historical records for park management

Inactive accounts may be deleted after 3 years of non-use, with prior notification.

7. Your Rights and Choices

Under the Philippine Data Privacy Act of 2012, you have the following rights:

7.1 Right to Access

You can request a copy of your personal information we hold.

7.2 Right to Correction

You can update or correct inaccurate information through your account settings or by contacting us.

7.3 Right to Erasure

You can request deletion of your account and personal data, subject to legal retention requirements.

7.4 Right to Object

You can object to certain processing of your data, such as marketing communications.

7.5 Right to Data Portability

You can request your data in a structured, commonly used format.

To exercise these rights, contact our Data Protection Officer at the contact details below.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze website traffic and usage patterns
• Improve website functionality

You can control cookie settings through your browser, but disabling cookies may affect website functionality.

9. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13 without parental consent. If you believe we have collected such information, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify users of significant changes through:

• Email notification to registered users
• Notice on our website
• Updated "Last Updated" date at the top of this policy

Continued use of our services after changes constitutes acceptance of the updated policy.

11. International Data Transfers

Your information is primarily stored and processed in the Philippines. If data is transferred internationally, we ensure appropriate safeguards are in place to protect your information.

12. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal data, contact:

If you are not satisfied with our response, you may file a complaint with the National Privacy Commission:

• National Privacy Commission Website

13. Consent

By using the Hundred Islands National Park Management System, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.