Privacy Policy

Promotion emails require a separate opt-in and email confirmation. Entering a booking or host email does not subscribe you to marketing. You may unsubscribe from promotion emails. Promotion subscriptions stay until withdrawn; unconfirmed requests expire after 48 hours.

If you separately choose a progress reminder, we save basic booking details or host application reference for up to 7 days and may send one email after at least 15 minutes of inactivity. No reminder is sent for a completed, submitted or cancelled flow. Availability and prices are checked again when you continue. Reminder drafts exclude passwords, payment credentials, identification uploads, payout details and private calendar links. Host sign-in is still required; unsaved files must be selected again.

The optional invitation waits one minute and is not shown in checkout or registration. Browser storage records dismissal for 30 days or subscription-request acknowledgement so it is not repeatedly shown. Private HttpOnly cookies identify your saved progress; email links are unguessable, expire and require a confirmation action. Each site handles its own subscriptions separately. Delivery records use hashed record identifiers. Contact us to request access or deletion.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (“NPC”) (together, the “Data Privacy Laws”).

1.1 Acknowledgment. By accessing or using the Website, creating an account, registering a unit or making a booking, you acknowledge that you have read and understood this Policy. Where consent is the basis for processing, you give it through the affirmative act described at the point of collection, such as ticking a box or clicking “Book”, “Register” or “Submit”.

1.2 Who this covers. Guests who book units, unit owners and authorized hosts who register and manage units, and any visitor to the Website.

1.3 Scope. This Policy covers only information processed through the Website. It does not cover websites, apps or platforms we do not control, including social media pages, business listings, messaging apps, or sites linked from the Website (see Section 8.3).

1.4 Related terms. This Policy forms part of, and must be read together with, the Website’s Terms and Conditions, Host Terms, booking and cancellation policies, and the house rules of each unit and of the building.

1.5 Disagreement. If you do not agree with this Policy, please do not use the Website or submit any personal information through it.

2.1 Nature of service. Azure Condotels lists selected privately owned residential units at Azure Urban Resort Residences, Parañaque City, for short-term stays. Unit owners and authorized hosts register units; guests book and pay through the Website.

2.2 No affiliation. Azure Condotels is independent. It is not affiliated with, endorsed by, or operated by the developer, the property manager or the condominium corporation of Azure Urban Resort Residences, and those entities are not responsible for this Website.

2.3 Hosts are separate controllers. Unit owners and hosts are not our employees or agents. Once we pass a guest’s booking details to a host so the host can accommodate the guest (Section 7.1), the host is responsible, as a separate personal information controller, for how they handle that information.

3.1 Sensitive personal information. Government-issued ID numbers are sensitive personal information under Section 3(l) of the Data Privacy Act. We collect them only for host verification or building guest registration, with your consent, and handle them under the stricter safeguards in Section 7.

3.2 Payment cards. We never receive or store full card numbers, CVV codes or e-wallet passwords. You enter those details directly on the payment gateway’s secure checkout page (Section 5.4).

3.3 Information about other people. If you provide details of companions, co-owners or other persons, you confirm that you are authorized to do so and that they have been informed of this Policy.

3.4 What we do not collect. We do not intentionally collect information on race, ethnicity, religion, health, political affiliation, or similar sensitive matters. Please do not submit it.

4.1 No marketing without consent. We send promotional messages only if you have opted in. You may opt out at any time through the unsubscribe link or by contacting us; transactional messages about active bookings, units or payouts will continue.

4.2 No profiling or automated decisions. We do not use your information for profiling, behavioural advertising, or decisions made solely by automated means that produce legal or similarly significant effects on you. Host registrations are reviewed by a person.

4.3 Website chat. Replies in the website chat may be generated by an automated assistant that runs on our own computer using our published Azure Condotels information. Chat messages are not sent to outside AI providers. The assistant cannot confirm, change or cancel bookings or take payments, and you may ask for a person at any time.

4.4 New purposes. We will not use your information for a purpose incompatible with those above without first informing you and, where required, obtaining your consent.

5.1 Own infrastructure. The Website, its database, uploaded files (including host verification documents and unit photos) and backups run on our own hardware. We do not use third-party cloud hosting, cloud databases, or outsourced data processors to hold your information.

5.2 No sale or trade. We do not sell, rent, lease, trade or otherwise make your personal information available to anyone for their own marketing or commercial purposes.

5.3 No third-party tracking. The Website does not use third-party analytics, advertising networks, tracking pixels, social media plug-ins that track you, fingerprinting, or data brokers.

5.4 Strictly necessary transmissions. Information leaves the Website only when needed to complete what you asked for, and only to the extent necessary:

• Secure connection. Website traffic reaches our server through an encrypted tunnel operated by our network security provider (Cloudflare), which routes and protects connections and processes connection data such as IP addresses for that purpose. It does not host our database or files.
• Payments. You enter payment details directly on the secure checkout page of our licensed payment gateway (PayMongo). The gateway processes that payment as its own controller under its own privacy policy; we receive only the amount, reference number and status.
• Host payouts. To pay hosts, we send the payout amount and the host’s registered account details to the host’s chosen bank or e-wallet through the transfer channel we use.
• Hosts and guests. The booking details a host needs, and the host contact details a guest needs, are shared between them (Section 7.1).
• Email delivery. Booking confirmations go to the guest, the host and our administrators from our email account. Like all email, they pass through the email service providers of the sender and recipient in transit.
• Building administration. Guest names and ID details required for registration, gate passes or access cards are given to the building’s administration or security office (Section 7.1).
• Calendar sync. Unit availability is synchronized between our own websites, and from any external calendar a host links; only dates are exchanged, never guest personal information.
• Legal requirements. Disclosures required by law or lawful order (Section 7.1).

5.5 Authorized personnel. Only the owner-operator and authorized administrators can access personal information, on a need-to-know basis, under written or contractual confidentiality obligations that continue after their engagement ends.

5.6 Location of data. Our database and files stay on our server in the Philippines. Encrypted traffic may pass through our network provider’s servers, and emails through email providers’ servers, outside the Philippines while in transit; we remain accountable for that information under Section 21 of the Data Privacy Act.

6.1 Managing cookies. You can block or delete cookies in your browser settings. Because these cookies are strictly necessary, blocking them may stop login, booking and host dashboards from working.

6.2 Server logs. Like most web servers, ours automatically records the IP address, browser type, requested page, referring page, and date and time of each request, plus login attempts to accounts. We use these logs only to keep the Website secure, investigate abuse, and fix errors, and delete them after ninety (90) days unless needed for an ongoing security investigation or legal claim.

6.2A Visit and app download counts. We also keep simple first-party counts of page visits and of app downloads and installs (time, page or link, broad country, device type and platform, and a daily salted code instead of your IP address) so we know how many people use the Website and its app. These counts are not shared or used for advertising, and the detailed records are deleted after ninety (90) days; only plain totals are kept. An installed app stores a small “first open counted” note (a date only) on your device so each install is counted once.

6.3 Mobile application. Any official Azure Condotels mobile application follows this Policy. It uses on-device storage only to keep you signed in, remember your settings and note (a date only) that a new install was counted, and does not include third-party advertising or analytics software.

6.4 Do Not Track. Because we do not track you across other websites, we treat all visitors the same whether or not your browser sends a “Do Not Track” signal.

7.1 When we disclose. We disclose personal information only:

• (a) to you, or to a person you have authorized in writing;
• (b) between guest and host, limited to what each needs: the host receives the guest’s name, contact number, email, stay dates, number and names of guests and special requests; the guest receives the unit’s contact details and check-in instructions;
• (c) to the building administration or security office of Azure Urban Resort Residences, limited to guest names, stay dates and ID details it requires for registration, gate passes or access cards;
• (d) to our payment gateway and payout channels, as described in Section 5.4;
• (e) to government agencies, courts or law enforcement, when required by law, subpoena or lawful order, after we verify the request and disclose no more than it requires;
• (f) where necessary to protect the life, health, safety or property of any person, or to prevent or investigate fraud or a breach of our terms; and
• (g) to a successor in a sale, merger or transfer of the business, who must continue to protect your information under this Policy, with prior notice to you.

Hosts must use guest information only to accommodate the booking and must not use it for marketing or keep it longer than necessary. Host verification documents are never shown to guests or other hosts.

7.2 Retention. We keep personal information only for as long as necessary for the purposes in Section 4, then securely dispose of it.

7.3 Disposal. Information is disposed of by secure, irreversible deletion or destruction so that it cannot be read or reconstructed. We may keep anonymized data that can no longer identify you for statistics.

7.4 Security measures. We maintain reasonable and appropriate safeguards, including:

• HTTPS/TLS encryption for all data sent between your device and the Website;
• passwords stored only as salted, one-way hashes, never in plain text;
• individual administrator accounts with two-factor authentication, strong passwords and access limited by role;
• verification documents and payout details visible only to administrators, never to other users;
• firewall protection, timely operating-system and software updates, and monitoring of administrator activity;
• encrypted backups kept on storage media under our control;
• a server located in a secured area with restricted physical access; and
• confidentiality obligations and privacy training for authorized personnel.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security, and you are responsible for keeping your own devices and login details secure.

7.5 Breach notification. If a personal data breach involves sensitive personal information or information that may enable identity fraud, and is likely to give rise to a real risk of serious harm, we will notify the NPC and affected data subjects within seventy-two (72) hours of knowledge of, or reasonable belief in, the breach, as required by NPC Circular No. 16-03. The notice will describe the nature of the breach, the information involved, the measures taken, steps you can take to reduce harm, and how to contact us.

8.1 Your rights as a data subject.

8.2 How to exercise your rights. Send your request through Section 8.5. We will verify your identity before acting, and respond within thirty (30) calendar days. We may decline or limit a request where the law requires us to keep the information, where it would affect the rights of others, or where the request is manifestly unfounded or excessive; we will tell you why.

8.3 Third-party platforms. Our social media pages, messaging apps, Google Business Profile and map listings, app stores, the payment gateway’s checkout page, any external calendar a host links, and any linked websites are operated by others under their own privacy policies, which govern what you share there.

8.4 Children. The Website is not directed to persons under eighteen (18). Accounts may be created, and bookings and unit registrations made, only by adults. A booking adult accepts responsibility for any minor in the party. If we learn that we collected a minor’s information without a parent’s or guardian’s consent, we will delete it.

8.5 Contact us and our Data Protection Officer.

• Data Protection Officer, Azure Condotels
• Mobile: +63 927 960 8627
• Email: [email protected]
• Website: azurecondotels.com

8.6 Changes to this Policy. We may update this Policy to reflect changes in our practices or the law. The updated version will be posted on the Website with a new effective date. For material changes, we will post a prominent notice on the Website and email registered account holders before the change takes effect. Your continued use of the Website after that date means you accept the updated Policy.

8.7 Governing law and venue. This Policy is governed by the laws of the Republic of the Philippines. Any dispute arising from it shall be brought exclusively before the proper courts of the Philippines, without prejudice to your right to file a complaint with the NPC.

8.8 Severability and language. If any provision of this Policy is held invalid, the remaining provisions remain in full force. If this Policy is translated, the English version prevails in case of conflict.