At AstralHike, we value your privacy and are committed to protecting your personal data in compliance with the Data Privacy Act of 2012 (RA 10173). This policy explains how we collect, use, and safeguard your information when you use our platform.

1. Information We Collect

We collect information that you voluntarily provide when you create an account, book a hike, or sign up as an organizer. This includes:

Personal Information:

Name, email address, phone number, and date of birth.

Travel Details:

Emergency contact information and medical/fitness declarations for safety.

Organizer Data:

Government-issued IDs, DTI/SEC registrations, and DOT accreditation numbers.

Technical Data:

IP address, browser type, and cookies for website optimization.

2. How We Use Your Information

Your data is used solely for the following legitimate purposes:

• Booking Fulfillment: To share necessary details (name and contact) with the Tour Operator you booked with.
• Safety: To provide emergency contacts to guides in case of an accident.
• Verification: To vet organizers and ensure they are legitimate, DOT-accredited entities.
• Communication: To send booking confirmations, trip updates, and marketing news (if you opted-in).

3. Data Sharing and Disclosure

AstralHike is a marketplace. We share your information only with:

Tour Organizers:

Only the specific organizer of the trip you joined.

Payment Processors:

Secure third-party gateways (e.g., PayMaya, GCash) to handle transactions. We do not store your credit card details.

Legal Compliance:

When required by law or the Department of Tourism for regulatory audits.

4. Data Security and Retention

Storage:

We implement technical and organizational security measures (encryption and firewalls) to prevent unauthorized access.

Retention:

We keep your data only as long as necessary for the purpose it was collected or as required by Philippine law (typically up to 5-10 years for tax and legal records).

5. Your Rights as a Data Subject

Under the Data Privacy Act, you have the right to:

• Be Informed: To know how your data is being processed.
• Access & Correct: To request a copy of your data or update incorrect information.
• Erasure: To request the deletion of your account and data, subject to legal retention requirements.
• Object: To opt-out of direct marketing.

6. Contact Us

For any questions regarding your data privacy, you may contact our Data Protection Officer (DPO) at: