Privacy Policy

1. Commitment to Privacy

Panaw is committed to safeguarding your personal data in accordance with Republic Act No. 10173, otherwise known as the Philippine Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations.

2. Personal Information We Collect

To process reservations, coordinate island boat dispatches, and verify payments, we collect the following categories of information:

3. Purpose of Data Processing

Your personal data is processed solely for legitimate tourism purposes:

• Facilitating accommodation reservations and issuing official Digital Boarding Passes.
• Reconciling downpayments with host records and the platform payments team.
• Complying with maritime safety regulations and official passenger manifests for boat transfers.
• Sending transactional updates, booking confirmations, and urgent weather advisories.
• Preventing fraudulent bookings and unauthorized operator activity.

4. Storage Security & Access Controls

We implement comprehensive technical and organizational safeguards:

• Private Storage Buckets: GCash receipts and sensitive verification documents are stored in private cloud storage. They are never exposed publicly and can only be accessed through short-lived, cryptographically signed URLs.
• Row Level Security (RLS): Database-level access rules guarantee that tourists can only view their own reservations, and hosts can only access bookings associated with their properties.
• Encrypted Communications: All network communication is encrypted in transit using Transport Layer Security (TLS 1.3).

5. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you possess the right to:

• Be informed whether your personal data is being processed.
• Access and request a copy of your stored personal information.
• Rectify or update any inaccurate or outdated information in your profile.
• Request the erasure or blocking of your personal data when no longer necessary for legal or regulatory purposes.