Privacy Policy

Global Pinoy Travel operates this platform and the pages on it. When you register as a partner, use the CMS and are billed, Global Pinoy Travel is the personal information controller for those records.

When you visit an agency’s storefront or send it a booking enquiry, that agency decides why and how your information is used, and is the personal information controller for that booking. Global Pinoy Travel provides the platform the storefront runs on and acts as the agency’s processor, on its instructions.

For your use of our own pages — this website, support, and the on-site assistant — Global Pinoy Travel is the controller.

Account and partner records: your name, email address, contact number, agency details, and the subscription and billing records that go with them.

Lead and booking records an agency keeps about you: your name, email address, phone number, your date of birth where the agency asks for it, the travel details you provide, and any notes the agency adds.

Payment records: the amount, status, date and provider reference of a payment. Card numbers and bank credentials are handled by the payment provider and are not stored by us.

Messages you send to a storefront’s chat assistant are stored with the agency you messaged. The assistant on our own marketing pages is stateless: its conversation is not stored by us and lives only in your browser while the page is open.

Traffic counts: page views and button presses, with no cookie, account, IP address or other identifier. We do not track you across other websites.

To create and manage your account and provide the platform — performing our agreement with you.

To take payment, issue receipts and keep financial records — our agreement with you, and our legal and accounting obligations.

To answer enquiries, arrange bookings and provide support — our agreement with you, and our legitimate interest in serving you.

To send you marketing — only where you have opted in. You can withdraw that consent at any time.

To keep the service secure and prevent abuse — our legitimate interest in protecting the platform and the people who use it.

We do not sell your personal information.

We use service providers to run the platform, including Supabase (database, authentication and file storage), Vercel (hosting), OpenAI (the on-site assistants), our email delivery providers, and the payment providers that are active for the payment you choose. These providers process information on our instructions.

Where an agency makes a booking with a travel provider such as an airline, hotel or tour operator, the details needed to fulfil that booking are passed to that provider.

We may disclose information where the law requires it, or to a regulator or law-enforcement body acting within its powers. We do not otherwise share it, and we never sell it.

We keep booking and payment records for as long as needed to provide the service and to meet legal, tax and accounting obligations. Other personal information is deleted or anonymised once it is no longer needed.

We may keep a suppression record — an email address and the fact that you opted out — so that we can honour your choice.

Under the Philippine Data Privacy Act of 2012 (RA 10173) you have the right to be informed, to object, to access, to rectify, to erase or block, to be indemnified for damages, and to data portability.

To exercise any of these rights, email support@affiliate.globalpinoytravel.com with the subject line "Data Privacy Request", stating which right you want to exercise and the booking reference or email address it relates to. We will acknowledge your request within five (5) working days and act on it within thirty (30) days.

We may need to confirm your identity before we act on a request. We may also be required to retain some records — for example booking and financial records kept for tax and accounting purposes — even after a deletion request. Where we cannot act on a request in full, we will explain why in writing.

If you are a storefront customer, the agency you booked with is the controller for that booking. You can contact it directly using the details on its storefront, or email support@affiliate.globalpinoytravel.com and we will pass your request on.

Access to personal information is limited to the staff and providers who need it to run the service, and is protected by authenticated accounts and access controls. Information is encrypted in transit.

No method of storage or transmission is perfectly secure, but we work to protect your information — and to limit what is collected in the first place, because the least risky record is the one that was never created.

We will update this policy when the way we handle information changes, and we will change the effective date above when we do.

Our privacy contact, who also acts as our Data Protection Officer, can be reached at support@affiliate.globalpinoytravel.com.