Privacy Policy

Welcome to Amiga Gracia Travel Services. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and mobile application.

By using our services, you agree to the collection and use of information in accordance with this policy.

1 Information We Collect

• •Personal Identification: Full name, email address, phone number, and date of birth.
• •Passenger Details: Names and ages of co-passengers included in your booking.
• •Booking Information: Travel routes, schedules, seat classes, booking references, and transaction history.
• •Payment Information: Payment method and proof of payment uploads. We do not store full card numbers or PINs.
• •Device & Usage Data: Device type, OS, app version, and usage patterns to improve our service.
• •Referral & Loyalty Data: Referral codes, Gracia Coins balance, and voucher redemption history.

2 How We Use Your Information

• •Process and confirm your ferry and airline ticket bookings.
• •Send booking confirmations, e-tickets, and travel updates via email and push notifications.
• •Process rebooking, cancellation, and refund requests.
• •Manage your Gracia Coins rewards and referral program.
• •Apply voucher discounts to eligible bookings.
• •Provide customer support and respond to inquiries.
• •Improve the functionality, security, and experience of our platform.

3 Sharing of Information

We do not sell, rent, or trade your personal information. We share only when necessary:

• •Transport Operators: Passenger names and booking details are shared with ferry and airline operators (e.g., Starlite Ferries, 2GO Travel, Cebu Pacific, PAL, AirAsia) to fulfill your booking.
• •Payment Verification: Payment proof may be reviewed by authorized staff for manual verification.
• •Legal Requirements: We may disclose your information if required by Philippine law or government authority.

4 Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Booking records are kept for a minimum of 3 years for legal and audit compliance. You may request deletion of your account and associated data at any time, subject to retention obligations required by law.

5 Data Security

We implement industry-standard security measures including encrypted data transmission (HTTPS), hashed passwords, and access-controlled systems. However, no method of transmission over the internet is 100% secure.

6 Your Rights (Data Privacy Act of 2012)

Under Republic Act No. 10173, you have the right to:

• •Access — Request a copy of the personal data we hold about you.
• •Rectification — Request correction of inaccurate or incomplete data.
• •Erasure — Request deletion of your personal data where it is no longer necessary.
• •Object — Object to the processing of your personal data.
• •Portability — Receive your data in a structured, readable format.

7 Children's Privacy

Our services are not directed to children under 13 years of age. Passenger details for child travelers are collected only as part of an adult's booking. If you believe a child's data has been submitted without proper consent, please contact us immediately.

8 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Your continued use of our services after any changes constitutes your acceptance of the updated policy.