Privacy Policy

We collect personal information only when it is necessary to process your reservation, respond to an inquiry, or communicate important details about your stay. The categories of data we may collect include:

• Contact details: Full name, mobile number, and email address — provided when you submit a booking form or contact us directly.
• Booking information: Check-in and check-out dates, number of guests, occasion, and special requests.
• Payment proof: Screenshots or photos of bank transfer receipts, GCash confirmations, or other payment proofs submitted to verify your downpayment or balance.
• Inquiry content: Messages and questions you send through our website contact form, Facebook Messenger, or WhatsApp.

We do not collect credit card numbers, government IDs, or biometric data.

Your personal information is used solely for the following purposes:

• Processing and confirming your reservation, including issuing a booking reference and communicating check-in details.
• Verifying payment proofs to confirm your downpayment or balance has been received before your stay.
• Responding to inquiries about availability, rates, and facilities.
• Sending booking confirmations, reminders, and post-stay follow-ups related to your reservation.
• Complying with legal obligations under Philippine law.

We do not use your personal information for unsolicited marketing without your consent.

Villux operates a manual payment verification process — meaning we do not process online card transactions and we do not have access to your banking credentials.

When you submit a payment proof (e.g., a GCash screenshot or bank transfer confirmation), that image is stored securely and used only to verify that the correct amount was received for your booking. Payment proofs are accessible only to authorized Resort staff and are not shared with third parties.

Once your stay is complete and accounts are settled, payment proof files are retained for a period consistent with our accounting records policy (see Section 5) and then securely deleted.

We do not sell, rent, or trade your personal information to any third party for commercial purposes.

We may share your information only in the following limited circumstances:

• Service providers: Third-party platforms we use to operate the Resort website or booking system (e.g., hosting providers) may process your data on our behalf under strict confidentiality obligations. They are not permitted to use your data for any other purpose.
• Legal requirements: We may disclose your information if required by law, court order, or government authority under Philippine law.

We retain your personal information only for as long as necessary for the purposes described in this policy. In general:

• Booking records (name, contact details, dates, payment amounts) are retained for a minimum of five (5) years for accounting and tax compliance.
• Payment proof images are retained for one (1) year after the relevant stay, then securely deleted.
• Inquiry messages that did not result in a booking are deleted within six (6) months.

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These include:

• Access to booking data is restricted to authorized Resort staff.
• Our website is served over HTTPS (encrypted connection).
• Internal systems are password-protected and access-logged.

While we strive to protect your data, no system is 100% secure. If you believe your personal information has been compromised, please contact us immediately.

As a data subject under Philippine law, you have the following rights with respect to your personal information held by us:

• Right to be informed: You have the right to know what personal data we hold about you, how it is processed, and for what purpose.
• Right of access: You may request a copy of the personal information we hold about you.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal information.
• Right to erasure or blocking: You may request that we delete or block your personal information when it is no longer necessary, subject to legal retention requirements.
• Right to data portability: You may request that your personal information be transmitted to you in a structured, commonly used format.
• Right to object: You may object to the processing of your personal information for direct marketing or other purposes not required by law or contract.
• Right to lodge a complaint: You may file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your rights have been violated.

To exercise any of these rights, contact us using the details below. We will respond to all legitimate requests within fifteen (15) business days.

Our website may use essential cookies to ensure proper functionality. We do not deploy third-party advertising or behavioral tracking cookies.

If we use basic analytics tools to understand aggregate site traffic (e.g., page views), this data is anonymized and cannot be used to identify you personally.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version will always be posted on this page with the date it was last revised. Continued use of our website or services after any update constitutes acceptance of the revised policy.