Privacy Policy
Last Updated: August 06, 2026
1. Commitment to Your Privacy
At TSOY Travel & Tours, we value the trust you place in us when sharing your personal information. Under the Philippine Data Privacy Act (DPA) of 2012, we are committed to processing your data transparently, securely, and solely for legitimate booking and informational operations.
2. Data We Collect & How We Use It
We collect information in two main scenarios when you interact with our website:
- Travel Inquiries & Contact Forms: When you submit booking queries, we collect your name, email address, phone number, and your custom message details. This data is processed transiently and sent via secured SMTP servers directly to our administration desk. We do not save your inquiry form entries in our database.
- Traffic Metrics & Page Views: We keep track of how many visitors view each package. To prevent system spam and enforce rate-limiting, we record client visits.
Privacy Protection Notice (IP Anonymization)
For complete compliance with data privacy acts, we do not store raw IP addresses in our database. When you visit a page, your IP address is instantly processed through a one-way cryptographic hashing function (SHA-256) on our secure server. Only the hashed representation (e.g. e3b0c4429...) is saved to rate-limit checks. It is mathematically impossible to retrieve your original IP address from this hash.
3. Third-Party Integrations
We utilize trusted third-party cloud infrastructure to run our travel platform:
- Supabase Cloud: Handles database storage for package configurations and anonymized traffic metrics under secure hosting configurations.
- Google reCAPTCHA v3: We embed optional reCAPTCHA v3 code on select storefront pages to prevent bot manipulation and spam. This traffic is subject to the Google Privacy Policy and Terms of Use.
4. Data Protection & Security
We implement industry-standard encryption protocols (SSL/TLS) for data transmission. Access to our analytics database is strictly limited to authorized administrative officers using multi-factor credentials.
5. Contact Our Data Compliance Office
If you have any questions about this privacy statement or wish to exercise your rights under the Data Privacy Act (DPA), contact us at:
