WalkThePlanet Inc. ("we," "us," "our") is committed to protecting the privacy of its users ("user," "you," "your"). This Privacy Policy outlines our practices concerning the collection, use, and sharing of your information through the use of our Galago mobile application ("App") and its related services (collectively, the "Services").

By accessing or using our Services, you agree to the collection, storage, use, and disclosure of your information as described in this Privacy Policy. We are at the forefront of not only implementing but also complying with the Data Privacy Act of 2012 (DPA) and its Implementing Rules and Regulations (IRR).

1. What we collect

   As a user, we may collect and process personal information about you, including but not limited to:

   1. Personal Identification Information:
      1. Full Name
      2. Date of Birth
      3. Gender
   2. Contact Information:
      1. Email Address
      2. Phone Number
      3. Postal Address
   3. Travel Details:
      1. Passport Information
      2. Travel Itinerary (flights, hotels, car rental, etc)
      3. Frequent Flyer or Travel Reward Program Numbers
   4. Payment Information:
      1. Credit/Debit Card Details
      2. Billing Address
      3. Payment History
   5. User Account Data:
      1. Username
      2. Password (should be stored securely)
      3. Preference and Interests related to travel
   6. Location Data:
      1. Current Location (if location services are used)
      2. Travel Destinations history
   7. Device Information:
      1. Device Type (e.g., smartphone, tablet)
      2. Operating System
      3. IP Address
      4. Browser Type
   8. Usage Data:
      1. App Activity (pages visited, search queries, time spent, etc.)
      2. Website Cookies
      3. Interaction with advertisements
   9. Communication Data:
      1. Customer Service Interactions
      2. Feedback and Reviews
      3. Email Correspondences
   10. Social Media Information (if applicable):
       1. Social Media Account Details
       2. Social Media Interactions with the brand
2. How we collect

   We employ various methods and channels to gather information from users to enhance our services and personalize the user experience. The data collection is conducted through the following means:

   1. Digital Forms and User Interface Interaction. We collect information when you fill out forms during registration, booking transactions, or requesting support. This includes the data input into our user interfaces on various platforms.
   2. Application Usage. As you navigate through our app, we collect information on your usage patterns, preferences, and any feedback you provide. This data helps us improve app functionality and user experience.
   3. AI-Powered Assistance. Our AI-driven tools may collect data during interactions, such as queries you input, to provide intelligent and personalized assistance.
   4. Customer Service Communications. When you engage with our customer service team through calls, emails, or chat support, we may collect information provided during these interactions to assist you better and improve our service quality.
   5. Social Media Interactions. Information may also be gathered through your interactions with our official social media accounts, such as messages, comments, or posts that you direct to our brand.
   6. In-Person Data Collection. We may collect personal data directly from you when we have face-to-face interactions, such as during travel fairs or promotional events.
3. Devices used for collection

   We collect data across various computing devices which you may use to interact with our services, including but not limited to:

   • - Laptop/PCs

     When you access our services using a desktop computer or laptop, we may collect device-specific information or usage details.

   • - Mobiles/Tablets

     Our mobile applications or mobile-optimized websites may gather data specific to your usage on these devices.

   • - Other Computing Devices

     This includes any other internet-enabled devices you use to engage with our services, from which we may collect usage and device-specific data.

4. Purpose and basis of collection

   Personalized Travel Services

   We are dedicated to providing you with travel services tailored to your unique preferences. The basis for this data collection is the contractual obligation between us and you, the user. We require certain personal details to make and manage your travel bookings, ensuring that your travel experience is customized to your liking.

   Lifestyle Service Enhancement

   Our objective is to offer you a comprehensive travel experience that extends to include your broader lifestyle choices. The collection of data for this purpose is grounded in our legitimate interest in delivering a service that goes beyond basic travel necessities, aiming to cater to your full range of travel-related preferences.

   Ancillary Services

   To ensure that your travel experience is seamless, we offer additional services that may be essential to your journey. The collection of data for these ancillary services is based on the contractual obligations arising from the agreement to provide you with a complete travel package.

   User Experience Improvement

   We continuously strive to improve the functionality and user-friendliness of our online platforms. Collecting data to enhance the user experience is driven by our legitimate interest in ensuring that you find our services intuitive and accessible.

   Customer Support

   Providing responsive and efficient customer support requires us to collect certain information from you. This is a fundamental part of our contractual obligation to deliver excellent customer service and support throughout your interaction with our services.

   Transaction Processing

   The processing of transactions, which includes bookings, payments, and issuing of travel documents, is a critical aspect of our contractual obligation to you. We collect the necessary personal information to carry out these transactions securely and efficiently.

   Marketing and Communications

   We use your information to send you updates, special offers, and promotions, which is done with your consent. This consent is obtained through clear, affirmative actions, such as opting in to receive our marketing communications.

   Legal Compliance

   Adhering to legal requirements is imperative for our operations. Thus, we collect and process data to fulfill our legal obligations, such as tax laws and anti-fraud measures. This ensures that we operate within the bounds of the law, specifically under the regulations set forth by the Data Privacy Act of 2012 and other relevant legislation.

5. Method of user

   Personal information shall be exclusively utilized for the purpose stated therein and shall not be used for any other unrelated purposes.

6. Location of personal information

   The privacy and security of our user’s personal information are of paramount importance. We have implemented comprehensive measures to ensure that your data is stored securely and accessed only for authorized purposes in accordance with our Data Privacy Policy.

   Manual Records

   Some personal data may be stored in physical form ("Manual") in secure locations within our office premises. These physical records are safeguarded in locked filing systems and are only accessible to authorized personnel who are bound by confidentiality obligations. The access to these manual records is monitored and controlled, ensuring that only necessary data is recorded and maintained in physical form to minimize risks associated with manual data storage.

   Cloud-Based Storage

   We utilize cloud-based storage services provided by Alibaba Cloud ("Cloud – Alibaba") to store electronic personal data. Alibaba Cloud is known for its robust security measures, which include encryption, firewalls, and access controls. The data stored on Alibaba Cloud is protected against unauthorized access, disclosure, alteration, and destruction. We have chosen Alibaba Cloud for its adherence to international standards of data protection and its commitment to maintaining the confidentiality and integrity of the data entrusted to it.

   Internal Servers

   Certain personal information may be stored on our internal servers ("Internal servers"). These servers are located in secure, access-controlled environments within our facilities. We employ industry-standard security measures, including encryption and firewall protection, to ensure that the data stored on these servers is safeguarded against unauthorized access or cyber threats. Regular security audits are conducted to maintain the high level of protection required for our internal data storage systems.

   Data Access and Transfer

   Personal information stored across these various locations may be accessed by our authorized employees and data processors when necessary for the provision of our services. We ensure that such access is subject to strict organizational procedures and security protocols to maintain the integrity and confidentiality of the data.

   When transferring data between manual records, cloud storage, and internal servers, we employ secure transfer methods to prevent any unauthorized interception of personal data. All data transfers are logged and monitored as part of our data governance practices.

   Compliance with Legal Requirements

   We comply with the Data Privacy Act of 2012 and are committed to aligning our data storage practices with the Act's regulatory requirements and international best practices. We conduct periodic reviews and updates of our data storage facilities and methods to ensure ongoing compliance with legal and regulatory standards.

   Data Retention

   The retention of personal information across all storage mediums is guided by our data retention policy, which considers the legal, regulatory, and operational requirements of retaining personal data. Personal information is retained only for as long as necessary to fulfill the purposes for which it was collected, after which it is securely disposed of or anonymized.

7. Share of your information

   We may share your personal information with the following third parties:

   Service Providers, Partners, and Affiliates

   Some personal data may be stored in physical form ("Manual") in secure locations within our office premises. These physical records are safeguarded in locked filing systems and are only accessible to authorized personnel who are bound by confidentiality obligations. The access to these manual records is monitored and controlled, ensuring that only necessary data is recorded and maintained in physical form to minimize risks associated with manual data storage.

   All these entities, including our affiliate companies, are granted access to the personal information they need to perform their functions and are bound by contractual obligations to uphold the confidentiality and security of that information. Strict limitations are imposed on their use of your information: they are expressly prohibited from using, selling, distributing, or altering your data in any manner other than in the pursuit of providing the designated services directly associated with our App.

   Compliance and Harm Prevention

   We may disclose your information to third parties if we determine that such disclosure is reasonably necessary to:

   a. Comply with any applicable law, regulation, legal process, or governmental request.

   b. Protect against harm to the rights, property, or safety of WalkThePlanet, our users, or the public as required or permitted by law.

8. Data security

   We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk to the personal information we process. These measures aim to ensure the integrity and confidentiality of personal information.

9. Retention period of information

   Data Retention Principles

   We adhere to strict data retention principles to ensure the privacy and security of our user's personal information. We retain personal data for no longer than is necessary for the purposes for which the data was collected and processed.

   Standard Retention Duration

   The standard retention period for personal information collected by WalkThePlanet Inc. is three years from the date of the last transaction with our user. This period aligns with our operational requirements and legal obligations, providing us sufficient time to refer to the data for post-transactional activities, including customer service, accounting, and legal issues.

   Exceptions and Contested Cases

   If the validity of the information is contested, we will retain the personal data for as long as it is necessary to resolve the issue. During this period, the data will be handled according to the nature of the contestation and in compliance with the applicable legal requirements.

   Deletion and Data Subject Requests

   Following the resolution of any contestation or legal proceedings, we will delete the personal information from our records securely and promptly.

   Right to Request Deletion

   User have the right to request the deletion of their personal data. Upon such a request, we will evaluate the necessity of retaining the data against the client's request and proceed accordingly. We will honor the deletion request if no legal or operational reasons require us to keep the data.

   Data Retention Policy Review

   WalkThePlanet Inc. regularly reviews its data retention policy to ensure it remains in compliance with Philippine laws and international best practices. This includes the Data Privacy Act of 2012, which provides the framework for data handling procedures, including the retention and disposal of personal data.

   Secure Disposal

   Upon the expiration of the retention period or following a deletion request, data disposal will be conducted securely and in such a manner that the information cannot be reconstructed or read.

10. How to participation of data subject

    You have the right to access, correct, or delete your personal information. You may also have the right to restrict or object to the processing of your personal information and, where applicable, the right to data portability. If you wish to exercise these rights or have any concerns about the processing of your personal information, please contact our Data Protection Officer (DPO) at the contact details provided below.

11. How to inquire

    WalkThePlanet Inc.

    1803-1804 The Philippine Stock Exchange Tower, 5th corner 28th Avenue, Bonifacio Global City, Taguig

    privacy1@walktheplanet.com