Privacy notice
What we collect when you use this website, why, who handles it, how long we keep it, and how to reach us about it.
Who we are
This website is run by CIELOAMOR TRAVEL AND TOURS INC., doing business as CieloAmor Travel & Tours (SEC Reg. No. 2025070208373-00; DOT Accreditation No. DOT-R4A-TTA-03403-2026), at Diversion Road Boulevard St., Brgy. May-Iba, Teresa, Rizal 1880. We decide how the details you send us are used, and we answer for how they are looked after.
What we collect, and for how long
Browsing this website needs nothing from you. If you send us a trip request, we collect only what we need to quote your trip. The table shows everything this website keeps.
Your cart. The trips you add to your cart are kept in your own browser, on your own device, for up to 30 days. This is your browser's storage, not a cookie, and nothing in it leaves your device until you press send. Your name, mobile number and email are never kept in the cart.
Children. If children are travelling, you tell us how many and the age in years of each one, so that we can quote the right price. We never ask for a child's name. You send the request as an adult on behalf of the children travelling with you, as their parent or guardian or as the person booking for them.
| What | Why | Where it is kept | How long | Who sees it |
|---|---|---|---|---|
| Your trip request: name, mobile number, email (optional), the trips in your cart (package or group departure, travel date, number of adults and children, the add-ons you chose) and any note you add. For each child you give an age in years, and nothing else: children's ages are asked for so we can quote the right price, never their names | To prepare your quotation and reply to you | Our website database, where your name, mobile number, email and note are stored encrypted; then our booking system | Removed from the website 30 days after our booking system confirms it has your request (90 days at most if it never arrives). Only the reference number, the dates, the number of trips and travellers and the estimated total stay on the website afterwards, with no personal details. In the booking system: for as long as we deal with your trip and our legal duties require | Our sales and booking team |
| The trips you add to your cart: which package or group departure, the travel date, how many adults and children, each child's age in years, and the add-ons you chose. Your contact details are never kept in the cart | So your picks are still there when you come back to send your request | Your own device only (your browser's storage, not a cookie). Nothing leaves it until you press send | On your device for up to 30 days, or until you remove the trips or send the request | Only you: we cannot see your cart until you send it |
| A record of your consent: the time and the version of this notice you agreed to | To show that you agreed | With your request, and copied to our booking system | As long as your request is kept | Our sales team and our Data Protection Officer |
| Your email address and the copy of your request we send you | To send your copy, and to pass your request to our sales team if our internal system is briefly unavailable | Our email-sending service (Brevo) and our company mailbox (Microsoft 365) | By the email services' own retention settings and our mailbox policy | Our sales team |
| A scrambled (hashed) form of your IP address and of the mobile number you give, never the address or the number itself | To stop spam and abuse of the request forms | Our website database | 24 hours | Nobody: it is used automatically |
| Which page was opened, the site you came from, the type of device, and a daily-changing anonymous visitor code. No cookies and no IP address are stored | To see which pages help people and which don't | Our website database | 13 months, in summary form | Management and our web developer |
| Technical server logs (page requested, time, browser type) | Security and fixing faults | Our web host | 30 days | Our web developer |
What we never ask for here. This website never asks for passport numbers, birthdates, ID photos, visa documents, payment details or children's names. Those are handled by our visa desk and booking team, offline or in our booking system, once you have decided to go ahead.
Why we use your details
To reply to your request, prepare your quotation and, if you go ahead, plan and book your trip. We rely on the consent you give when you tick the box beside the send button, and on the fact that you asked us to take these steps before a booking.
We do not sell your details and we do not use them for anything else. You will not be added to a mailing list for sending a request. If we ever offer something optional, such as price alerts, it will have its own separate tick box that you can leave empty.
Who handles your details
Only our sales and booking team read your request. Three service providers handle it for us under our instructions, and each has agreed to protect it:
- Hostinger hosts this website and keeps the website database. Its servers for our account are in Malaysia.
- Brevo sends the copy of your request to your email address. Brevo is based in the European Union.
- Microsoft 365 is our company mailbox, which receives your request by email if our internal system is briefly unavailable. Our Microsoft 365 data is stored in Singapore.
Your request is then copied into our own booking system, which runs on our office network and is not reachable from the internet. We share your details with airlines, hotels and other suppliers only when you ask us to book a trip that needs them.
How we protect them
- The website only works over an encrypted connection (HTTPS).
- The website database is kept on a server that visitors cannot browse, and the site has no login page for the public.
- Your name, mobile number, email, note and the children's ages are stored encrypted in the website database. They are not readable in the database itself.
- Requests are removed from the website once our booking system has them.
- Our office network accepts no connections from the internet. Our system collects your request from the website, not the other way round.
- The accounts that run this website (hosting, email and our domain) use two-step login, and only the people who need your request can open it.
- We keep a record of any security incident. If one could put you at real risk, we tell you and the National Privacy Commission within 72 hours.
Cookies, analytics and maps
This website sets no cookies, and it loads no advertising or tracking from other companies.
To see which pages help people, we count visits ourselves. We store the page opened, the site you came from, the type of device and an anonymous code that changes every day. We do not store your IP address or any way to follow you from one day to the next.
To stop spam, we keep a scrambled (hashed) form of your IP address for 24 hours. It cannot be turned back into the address.
The maps on our website are provided by Google; Google may set its own cookies when a map loads (see Google's privacy policy). The map at the bottom of our home page loads when you scroll down to it. The map on our About page loads only if you press the button to show it. Until a map loads, nothing is sent to Google.
Your rights
Under the Data Privacy Act you can:
- ask what details we hold about you and get a copy;
- have wrong details corrected;
- object to how we use them, or withdraw your consent;
- have them deleted or blocked;
- claim compensation if you were harmed by a breach of the Act.
Write to our Data Protection Officer (below). We will ask you to prove who you are before we show or change anything. If you are not satisfied with our answer, you can complain to the National Privacy Commission.
Contact our Data Protection Officer
Joel Labanda, Data Protection Officer
Email: privacy@cieloamor.com
Phone: 0956 943 5169
Post: CIELOAMOR TRAVEL AND TOURS INC., Diversion Road Boulevard St., Brgy. May-Iba, Teresa, Rizal 1880
Changes to this notice
If we change how we use your details, we will update this notice and its version number. Each request records the version it was sent under, so we always know what you agreed to.