How we handle your personal information

Who we are

Capt'n Gregg's Dive Resort, Sabang Beach, Puerto Galera, 5203 Oriental Mindoro, Philippines, decides how this information is used. For any privacy question or request, email [email protected] with "Privacy" in the subject, or call one of the numbers below.

What we collect and why

• Enquiry form: your name, email, phone number (optional), trip type, dates, message, the page you sent it from and a hashed form of your network address. We use these to answer your enquiry and plan your stay, dives or meals.
• AI concierge chat: the question you type is sent to an AI model run by Cloudflare (Workers AI) to write a reply. Please do not type passport, card or bank details into the chat. Questions about payments, and messages flagged as misuse, are kept for 30 days with a scrambled (hashed) form of your network address so we can spot scams and abuse.
• Spam and abuse protection: Cloudflare Turnstile checks that a person, not a bot, is sending the form or chat message. We also keep short-lived request counters keyed to a hashed form of your network address, for at most one day.
• Visit statistics: Cloudflare Web Analytics counts page visits without using cookies.

Who receives it

• Our reservations team, who receive enquiries by email.
• Cloudflare, which hosts this website and runs its security, storage and AI features on our behalf, and the email delivery service that forwards enquiries to our inbox.
• Room bookings on the Rooms page are made in the SecureBookings booking engine, which handles what you enter there under its own terms.
• If you contact us by WhatsApp, Facebook, Instagram or a booking platform, that service's own privacy policy also applies.

We do not sell your personal information. Our service providers may process it on servers outside the Philippines.

How long we keep it

• Website copies of enquiries: 90 days, then deleted automatically.
• Flagged concierge questions: 30 days.
• Security request counters: up to one day.
• Cloudflare technical logs: a few days.
• Enquiry emails in our inbox: as long as needed to handle your booking and keep business records.

Cookies

This site does not set advertising or tracking cookies. Cloudflare may set strictly necessary security cookies when it checks for bots.

Your rights

Under the Data Privacy Act of 2012 you have the right to be informed, to access your personal information, to have it corrected, to object to its processing, to have it erased or blocked, to data portability and to claim damages. Email [email protected] to make a request. If you are not satisfied with our answer, you can complain to the National Privacy Commission.