Platform Privacy Policy

GandaStay is committed to handling personal data responsibly and in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have.

This policy applies to:

• Property owners and staff who create or manage a GandaStay account
• Guests who submit booking requests through a GandaStay-powered booking page
• People who contact GandaStay for support, sales, billing, or technical assistance
• Users whose activity is recorded in platform security, audit, or notification logs

Each property using GandaStay may also have its own booking terms, cancellation policy, payment policy, and privacy notice. Those property-specific policies apply to the guest's stay and are displayed on the property's booking page.

We may collect the following information:

Account information: name, email address, phone number, role, property membership, and login-related identifiers

Property information: property name, address, contact details, room information, pricing, booking rules, payment instructions, QR codes, images, and public booking page content

Guest booking information: guest name, email address, phone number, Messenger or contact handle, selected room, stay dates, number of guests, special requests, booking reference, booking status, and payment status

Payment proof information: uploaded screenshots or image files, payment channel, claimed amount, filename, file size, upload timestamp, and review status

Technical and security information: IP address, timestamps, browser and device information, request logs, audit logs, and abuse-prevention signals

Support information: messages, issue reports, troubleshooting notes, and communications with GandaStay

We use personal data to:

• Create, verify, manage, and update bookings
• Send booking notifications, confirmations, reminders, and status updates
• Help properties review payment proofs and manage reservations
• Provide owner, manager, and staff access to property administration tools
• Prevent fraud, spam, duplicate bookings, unauthorized access, and abuse
• Maintain audit logs and security records
• Provide customer support and troubleshoot platform issues
• Improve platform reliability and product features
• Comply with legal, accounting, operational, and dispute-resolution requirements

When a guest books through a GandaStay-powered page, the booked property and its authorized staff may access the guest's booking information. This may include the guest's name, contact details, stay dates, selected room, guest count, special requests, payment proof status, and related booking records.

Properties are responsible for using guest data only for legitimate booking, stay, support, payment, cancellation, refund, and dispute purposes.

Guests may upload payment proof screenshots or image files so the property can review and confirm payment. Payment proof files are treated as private booking records. They are used for payment verification, booking support, dispute handling, fraud prevention, and audit purposes.

GandaStay does not receive, hold, or process guest payments. Payments are made directly between the guest and the property through the payment method provided by the property.

GandaStay may use trusted service providers to operate the platform, including providers for hosting and deployment, database and file storage, authentication and account security, email delivery, monitoring and logging, and customer support. These providers may process data only as needed to provide their services to GandaStay.

Some service providers may be located outside the Philippines. By using GandaStay, you acknowledge that your data may be transferred to and processed by servers or infrastructure in other countries, subject to appropriate data protection measures.

We retain data only as long as reasonably necessary for booking operations, property records, payment verification, support, audit, security, accounting, legal, or dispute-resolution purposes. Some booking and audit records may be retained even after a booking is completed, cancelled, or expired if needed for legitimate business, security, or legal reasons.

GandaStay uses technical and organizational safeguards to protect personal data, including role-based access controls, property and tenant data isolation, private storage for payment proofs, signed access URLs for private files, audit logs for sensitive actions, server-side input validation, and abuse-prevention controls.

No system is completely risk-free. GandaStay works to reduce the risk of unauthorized access, misuse, loss, or disclosure of personal data but cannot guarantee absolute security.

Subject to applicable Philippine law, users may request to:

• Access their personal data held by GandaStay
• Correct inaccurate or incomplete personal data
• Request deletion or blocking of personal data where appropriate
• Object to certain types of data processing
• Ask how their data is used or shared

Some requests may be limited where GandaStay or a property needs to retain records for booking fulfillment, fraud prevention, accounting, legal compliance, dispute handling, or security purposes.

For bookings made through GandaStay, the property may publish its own payment policy, cancellation policy, and privacy notice. GandaStay stores a snapshot of the policy in effect at the time of booking. This preserves what the guest was shown even if the property updates its policies later.

GandaStay is intended for use by property owners, staff, and guests capable of entering into accommodation bookings. Properties and guests should not submit booking information on behalf of unaccompanied minors.

GandaStay may update this Privacy Policy from time to time. Updated versions will be posted on GandaStay.com with a revised "Last updated" date. Changes to this platform policy do not affect the policy snapshot saved with an existing booking.

For privacy questions, data requests, or support, contact GandaStay through the official support channel on GandaStay.com.

For booking-specific questions, guests may also contact the property using the contact details on their booking page or booking confirmation.