Your privacy at Casa 2455

Draft for review. This notice is a working draft and has not yet been approved by Bohol Living Spaces Inc.. Items in [square brackets] are still to be confirmed.

This notice explains how Bohol Living Spaces Inc., which operates Casa 2455 Villas, handles your personal information when you use this website, book a stay or order food. We follow the Data Privacy Act of 2012 (Republic Act No. 10173) and its rules.

1. Who is responsible

Bohol Living Spaces Inc. (Casa 2455 Villas) is the personal information controller. 0169B Janssen Heights, Dampas, Tagbilaran City, Bohol, 6300, Philippines.
Email: info@casa2455.com · Phone: +63 970 578 9721
Data Protection Officer or privacy contact: Kristelle Lopez, at the same email address.

2. What we collect

• Bookings: your name, mobile number, email address, the dates, villas and number of guests (including how many children), and any notes you add.
• Payment proof: the screenshot of your payment that you upload. It can show your name, wallet or account details and a reference number. We only need the amount and reference, so you are welcome to hide anything else before uploading. We never see or store card numbers or wallet PINs.
• Food orders: your name, mobile number, Messenger name or link (optional), whether it is for a villa or pick-up, the items and any notes.
• Chat assistant (only if switched on): the messages you type to it.
• Technical data: like any website, our hosting provider processes your IP address and basic request details to deliver the pages and keep the site secure. We do not use advertising or analytics trackers.
• At check-in: a valid government ID, which our team checks in person under our house rules. It is not collected through this website.

3. Why we use it

• To hold your dates, confirm your booking and prepare your stay.
• To check your payment, prepare and deliver your food order, and contact you about either.
• To send you booking confirmations and updates by email, and to reach you by phone or Messenger if something needs attention.
• To keep our records, accounts and taxes as the law requires.
• To protect the site and our guests from fraud, misuse and abuse.

We do not sell your information and we do not use it for marketing unless you separately agree to receive it.

4. Who we share it with

Only with the people and services needed to run your booking, under their own privacy terms:

• Our staff, who see bookings, orders and payment proofs through a password-protected admin.
• Cloudflare, which hosts this website and stores our booking and order records.
• Resend, which delivers our emails to you.
• Cloudflare (Workers AI), which generates the chat assistant's answers, only if you use the chat. Please do not type sensitive details into it.
• Google Maps, which is embedded on our Contact page and loads Google content when you open that page.
• Government or other authorities, when the law requires it.

Some of these services process data outside the Philippines. We use them only for the purposes above.

5. How long we keep it

• Payment screenshots are deleted automatically 90 days after you upload them.
• Booking and order records are kept for as long as accounting and tax rules require [period to be confirmed with the client's accountant], then deleted or anonymised.
• Chat messages are not stored by us.

6. Your rights

Under the Data Privacy Act you may:

• be informed about how your information is used (this notice);
• ask to see the information we hold about you;
• ask us to correct anything that is wrong;
• object to our use of it, or ask us to block or delete it, where the law allows;
• ask for a copy in a usable format;
• claim compensation if you were harmed by a breach of your rights; and
• complain to the National Privacy Commission (privacy.gov.ph).

To use any of these rights, email info@casa2455.com with your name and booking reference. We will reply as soon as we can and within the time the law allows.

7. How we protect it

The website uses an encrypted connection. Access to bookings, orders and payment proofs is limited to staff who sign in with a password, and staff actions are logged. We take reasonable organisational and technical steps to guard your information. No system is completely secure, and if a breach affects you we will notify you and the National Privacy Commission as the law requires.

8. Children

We record how many children are in your party so we can price and prepare your stay, but we do not collect personal details about children. The website is meant for adults, who book on behalf of their party.

9. Cookies and browser storage

We do not use advertising or tracking cookies. Staff get a sign-in cookie. Your browser also keeps our current prices for a minute or two so pages load faster, then discards them.

10. Changes

If we change this notice we will update the date at the top. Questions are always welcome at info@casa2455.com.

Back to the home page