Privacy notice

The host of the property you are staying at is the personal information controller for your booking and stay. Their registered business name and contact details appear in the footer of their guide. YourStay provides the software that hosts use to prepare these guides.

• Your name and the dates of your stay.
• For direct bookings: your email address, mobile number, and any message you send with a booking request.
• Consent records for the terms you accept (a timestamp and technical details of the acceptance), kept as proof that you agreed.

We do not collect government ID photos or other sensitive personal information. Where a host must verify your identity, this is done in person at check-in and nothing is stored.

To prepare and manage your stay, take and confirm a booking, contact you about that booking, meet tax and record-keeping obligations, and respond to complaints. We rely on the contractual-necessity and legal-obligation bases in Sections 12 of the Data Privacy Act.

Your information is shared only with the host, the payment gateway that processes any deposit (card details are entered on the gateway's own hosted page and never reach us), and government authorities where the law requires it. We do not sell your data or use it for advertising.

Booking and payment records are retained for at least two years, and up to ten years where tax rules require it. Records are deleted once the applicable retention period ends.

You have the right to be informed and to access, correct, object to the processing of, erase, and obtain a copy of your personal data. To exercise any of these, contact the host through the details in their guide.

If a concern is not resolved, you may complain to the National Privacy Commission (NPC) at privacy.gov.ph.