PRIVACY POLICY

I. PRIVACY POLICY STATEMENT
bai Hotel Cebu (“we”, “us”, “our”) respects your privacy and recognizes the need for appropriate measures to protect and manage your personal data entrusted to us. Our Privacy Policy follows, and is consistent with, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), other issuances of National Privacy Commission (NPC), as well as other relevant laws of the Philippines. We assure you that in collecting and processing your personal data we adhere to the general data privacy principles of transparency, legitimate purpose, and proportionality.

Personal data refers to all types of personal information, sensitive personal information and privileged information. Personal information refers to “any information, whether or not recorded in any form, from which the identity of an individual is apparent or can reasonably and/or directly be ascertained by the entity holding the information, or, when put together with other information, would directly and certainly identify an individual”.

This Privacy Notice pronounces how bai Hotel Cebu processes (how it collects, uses, shares, and keeps) and protects your personal data. It also provides the steps that you can take should you wish for any change in how we use your personal data, or if you want us to stop using your personal data.

II. WHY DO WE COLLECT PERSONAL DATA?

To enable us to comply with our corporate policies in relation to our transactions with the data subjects, within the scope allowed under the Data Privacy Act. It is important that we collect, use, store and retain your personal data only as is reasonable and necessary for a declared and specific purpose stated in the pertinent consent forms.

In general, we are using your data for any of the following purposes:

For the performance of our agreement with you, in order to: 

• process, confirm, provide and charge for hotel arrangements and restaurant reservations and our goods and services, and administer mobile (where applicable) and in person check in and check out;
• fulfill contractual obligations to you, anyone involved in the process of making your travel arrangements (e.g. travel agents, group travel organizers and your employer) and vendors (e.g. credit card companies, airline operators and other loyalty programs);
• provide you with access to the content on our Site, and respond to your enquiries and requests for information and services; and
• administer, and disclose the winner of, contests and lucky draw competitions conducted by us or on our behalf.

For our legitimate commercial interests, in order to: 

• understand how our products and services impact you, provide you with a better, more personalized level of service, and further develop our products and services, including linking or combining with information we get from others to do so;
• provide privileges, benefits and services to you, process applications for and administer membership programs, verify and validate your ability to access and use certain products, services and information (such as Twilight Membership and bai Platinum Membership).
• monitor your use of our Site and your bookings, and conduct analysis of the use of our Site in order to operate, evaluate and improve our Site and our services, understand your preferences, display customized content to you on our Site which may be of interest to you and troubleshoot any problems;
• conduct market analysis, market research, customer satisfaction and quality assurance surveys to improve our services; and
• provide for the safety and security of guests.

To comply with legal obligations to which we are subject: 

• meet legal and regulatory requirements and administer general record keeping.

Use of information based on your consent:

• facilitate direct marketing, promotional and customer management purposes, including sending you promotional communications (including without limitation emails and push notifications) or special offers if you have consented to receive the same. 
• we may use special categories of data (e.g. birthday). But we will only do so if we have received your consent thereto; and
• for any other purposes for which we have your consent.

In order to register with our mobile application, make an online hotel reservation, enroll with the Twilight Membership or bai Platinum programs or if you make an enquiry, you must provide us with the personal data marked with an asterisk or otherwise indicated as mandatory, otherwise we may not be able to process your request or comply with our legal obligations.

Other uses by nature of our transactions:

In addition, from the general uses mentioned above, we may use your personal information depending on your transactions with us in any of the following means:

A.)  When you want to become a part of our team [for employment] we may collect your personal data:

• To verify the accuracy and validity of the information you provided during the application process;
• To allow us to comply with existing and applicable legal and regulatory requirements, such as, but not limited to employment compensation and benefits, health insurance coverage, housing assistance;
• To consider your suitability for employment by complying with our Pre-Employment Requirements;
• For performance evaluation and career development including training and compliance monitoring;
• To facilitate easier communication on the status of your application;
• To recommend future employment opportunities that would be suitable for you; and
• To protect the lawful rights and interests of the bai Hotel Cebu in court proceedings, or the establishment, exercise or defense of legal claims

Once, you separate with us, we will conduct an exit interview and use the information that will be obtained to help us understand the reasons of your separation, form an opinion about how you see us; and conduct analysis to improve employee retention.

B.)  When you apply to become a tenant or merchant in any of our properties for lease we may collect your personal data: [for lease/tenant]:

• For Credit Application;
• For Safety & Security purposes;
• To communicate with you on any commercial transaction we are engaged
• To comply with legal, regulatory, and contractual requirement or obligations;

C.)  When you are a vendor, a potential vendor, or a contractor [for vendors]:

• To input in our Vendor Management system for efficient management
• For Safety & Security purposes
• To communicate with you on any commercial transaction we are engaged
• To comply with legal, regulatory, and contractual requirement or obligations;

III. WHAT TYPE OF PERSONAL DATA WE COLLECT?

We collect information to provide you with details and information regarding our product, services, and promotions. We process information also to respond to your inquiries or manage future interactive user function. The common type of data collected by bai Hotel Cebu from you, generally includes the following:

• Personal information such as full name, nickname, home addresses/billing address/shipping address, e-mail address, employment information, telephone, other personal contact numbers, username and password;
• Sensitive personal information such as age, nationality, marital status, gender, health, education and government issued identification document which includes, but not limited to identity (ID) cards, licenses, social security number;
• Employment record such as educational background, employment history, certifications, trainings attended, resume and income information of your previous jobs; and
• Financial details such as credit history, bank account, credit card, and debit card information you have provided as a result of our transaction.[1]

You are responsible for ensuring that all data, whether personal information, sensitive personal information or privileged information, you submit to bai Hotel Cebu is accurate, complete and up-to-date.

IV. HOW WE COLLECT, ACQUIRE, OR GENERATE YOUR DATA?

We collect data when you:

• Fill-up our forms (Twilight Membership Application Form, bai Platinum Membership Application Form, Business Lead Form, Guest Survey Form, etc)
• Encode your data in our applications (Job Application Form)
• Disclose your personal information through phone calls, emails, SMSs or verbal communication with our authorized representatives; and,
• Through third parties

 V. DO OUR WEBSITE USE WEB ANALYTICS?

All our websites engage third-party service providers to analyze the web traffic data for us. This service does use cookies or web beacons.

Cookies are small files that our website puts on your personal computer (PC) to store information about your preferences. Cookies can improve your browsing experience by allowing our website to remember your preferences or letting you avoid signing in each time you visit our website. If you don't want our website to store cookies on your PC, you can block cookies. But blocking cookies might prevent some pages from displaying correctly, or you might get a message from our website letting you know that you need to allow cookies to view our website.

For you to fully enjoy your visit and browsing experience, only non-identifiable web traffic data are collected and analyzed, including:

• Your internet protocol (IP) address,
• The search terms you used,
• The pages and internal links accessed on our site,
• Demographics
• The date and time you visited the site, including frequency of visits
• Geolocation,
• Your operating system, and
• Web browser type.

Use the options in your web browser if you do not wish to receive cookies or you wish to set your browser to notify you when you receive cookies. Click on the "Help" section of your browser to learn how to change your cookie preferences. If you disable all cookies, you may not be able to take advantage of all the features of this website.

VI. WHAT ABOUT THE LINKS TO THIRD-PARTY WEBSITES?

From time to time, we will provide links to third-party web sites, or advertisements which contain links to third-party sites. These links are provided as a service to you and we do not provide any personal data to these websites or advertisers, and therefore, we will not accept responsibility for their privacy practices. These sites are operated by independent entities that have their own privacy policies which you should review as well. bai Hotel Cebu’s Privacy Policy does not apply to such other sites or to the use that those entities make of your information. bai Hotel Cebu has no control over the content displayed on such sites, nor over the measures, if any, that are taken by such sites to protect the privacy of your information.

VII. WHO WE SHARE YOUR PERSONAL DATA WITH?

As a general rule, we are not allowed to share your data to third party except in limited circumstances as listed below.

By giving your consent, you authorize bai Hotel Cebu to disclose your personal data to accredited/affiliated third parties or independent/non-affiliated third parties, whether local or foreign in any of the following circumstances:

• As necessary for the proper execution of processes related to the purposes declared in this Privacy Policy.
• The use or disclosure is reasonably necessary, required or authorized by or under law (such as for criminal investigation, as requested by court of law).

This means we might provide your personal data to the following:

• Our affiliates, subsidiaries, partner companies, organizations, or agencies including their sub-contractors or prospective business partners that act as our service providers and contractors;
• Law enforcement and government agencies;
• All third parties, as noted in Annex A, with which we share this personal data are required to use your personal data in a manner that is consistent with this Privacy Policy.

However, these companies may only use such personal data for the purposes disclosed in this Privacy Policy and may not use it for any other purpose.

VIII. HOW DO WE PROTECT YOUR PERSONAL DATA?

We take reasonable steps to ensure that the personal data we collect, use or disclose are accurate, complete, and up-to-date. We strictly enforce this Privacy Policy within bai Hotel Cebu and we have implemented technological, organizational and physical security measures to protect your personal data from loss, misuse, modification, unauthorized or accidental access or disclosure, alteration or destruction. We put in effect safeguards such as the following:

• We keep and protect your personal data using a secured server behind a firewall, deploying encryption on computing devices and physical security controls.
• We restrict access to your personal data only to qualified and authorized personnel who hold your personal data with strict confidentiality.
• Any personal data that you provide on the website www.baihotels.com is initially processed and stored by bai Hotel Cebu. Using a secured connection, only authorized bai Hotel Cebu personnel can then access and download your personal data from the system.
• We reveal only the last four digits of your credit card numbers when confirming an order. Of course, we transmit the entire credit card number to the appropriate credit card company during order processing.
• It is important for you to protect against unauthorized access to your password and to your computer. Be sure to sign-off when finished using a shared computer.

IX. WHERE AND HOW LONG DO WE KEEP YOUR PERSONAL DATA?

All data are preserved and retained for a limited period or until the lawful or legitimate purpose of processing is achieved.

Personal data are stored in our facilities located in the Philippines and are retained in accordance with our retention policy, industry standards, laws and regulations, unless you request that your personal data be deleted from our systems, databases and hardcopies immediately. Once deleted, your personal data will no longer be searchable or included in anonymous searches and will be completely removed from all the storage location. 

The Data Privacy Officer may, however, choose not to grant access or correct information based on the request following laws and regulations. He/she will give the individual a written notice that sets out the reasons for the refusal. 

X. WHAT IF THERE ARE CHANGES IN OUR PRIVACY POLICY?

bai Hotel Cebu may revise this Privacy Policy as the need arises or when dictated by issuances of the National Privacy Commission or any amendment to the Data Privacy Act. Any change to this Privacy Policy shall be duly posted in this website and will take effect immediately. Data subjects are encouraged to periodically check for such updates. Changes shall not be retroactively applied and will not alter how we handle personal data previously collected without obtaining your consent, unless required by law.

XI. WHAT ARE YOUR PRIVACY RIGHTS?

bai Hotel Cebu fully acknowledges that our guests, employees, and other data subjects, are accorded the following data privacy rights:

1. Right to Information: You have the right to know how we collect, use, and protect your personal data. This includes understanding the purposes for which we collect your data, the types of data we collect, and any third parties with whom we may share it.
2. Right to Access: You have the right to request access to the personal data we hold about you. This allows you to review the information we have and verify its accuracy.
3. Right to Rectification: If you believe that any of your personal data is inaccurate or incomplete, you have the right to request corrections or updates to ensure that your information is accurate and up to date.
4. Right to Erasure or Blocking: Under certain circumstances, you have the right to request the deletion or blocking of your personal data. This may apply when the data is no longer necessary for the purposes for which it was collected or when you withdraw your consent for its processing.
5. Right to Object: You have the right to object to the processing of your personal data, particularly in cases where the processing is not necessary for the performance of a contract or compliance with a legal obligation.
6. Right to Portability: You have the right to request the copy of your personal data in a format that is commonly used and machine-readable, where technically feasible.
7. Right to Be Informed of Automated Decision-Making: If our hotel uses automated decision-making processes that significantly affect you, you have the right to be informed about such processes and request human intervention when necessary. Such a request is subject to certain conditions.
8. Right to be Indemnified for Damages: you have the right to be indemnified for damages sustained due to such inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal information. 

XII. HOW CAN YOU EXERCISE THESE RIGHTS?

To exercise your rights which includes the right to access, modify, port, erase and object to processing your personal data within a reasonable time after such request or should you have any inquiries, feedbacks on this Privacy Policy, and/or complaints to bai Hotel Cebu, you may reach us through our “Contact Us” menu in this website: www.baihotels.com,  through a written letter, or through an email to our Data Protection Officer (DPO).  

Our contact details are as follows:

Atty. Christian Vincent Villa

Data Privacy and Compliance Officer

bai Hotel Cebu, Ouano Ave. cor. Seno Blvd., Mandaue, Cebu, Philippines

dataprivacy@baihotel.com.ph

You may also lodge a complaint before the National Privacy Commission (NPC). For further details, please refer to NPC’s website: https://privacy.gov.ph/mechanics-for-complaints/. Any action to a request for correction, erasure and/or objection to process your personal data as it appears in our records is subject to applicable laws and/or the DPA, its IRR and other issuances of NPC.

This Privacy Policy was last amended on May 6, 2024.