Privacy notice

Tulapos Marine Sanctuary, in Barangay Tulapos, Enrique Villanueva, Siquijor, is the personal information controller for the records described here. The sanctuary is a community-managed marine protected area declared in 1986.

When you register or are booked in at the entrance hut: your name, email address and mobile number; and, where you provide them, your birth date, sex, nationality and the town or country you are travelling from.

When you visit: the date and time you arrive and leave, the size of your party, which package you took, which guide handled your tour, and any snorkelling equipment issued to you and returned.

When you pay: the amount, the method, and the Official Receipt number. Card and e-wallet numbers are never collected — payment is taken in cash at the hut.

Technical records: the IP address and browser used when you sign in or register, kept as a security record of who accessed an account.

To take and honour your booking, assign a guide, issue and recover equipment, and issue a receipt.

To meet the sanctuary's obligations to account for entrance fees and visitor numbers.

To understand visitor patterns — when the sanctuary is busy, where visitors come from, which packages are taken — so that guides, equipment and opening hours can be planned. This analysis groups visitors into broad segments; it is not used to make any decision about you individually.

To protect the accounts and records themselves against unauthorised access.

Registering an account and agreeing to this notice is your consent to the above. You may withdraw it at any time.

Some records cannot be erased on withdrawal: an Official Receipt, a payment, and the audit trail behind them are financial records the sanctuary is required to keep. Where that applies we remove your identifying details and keep the transaction, so the figures still reconcile but the record no longer identifies you.

Sanctuary staff, limited by role: a cashier sees what they need to check you in and take payment; a guide sees only the tours assigned to them; management sees aggregate figures. Every access to an account, and every refusal, is logged.

We do not sell your information, and we do not share it with advertisers or data brokers.

If you sign in with Google, Google tells us your name, email address and whether that address is verified. We do not receive your Google password, and we do not post anything to your Google account.

Visit and booking records are kept for the period the sanctuary needs them for planning and accounting, after which they are anonymised into counts that identify no one.

Financial records are kept for as long as the applicable retention rules require.

An account you delete is removed; the visit and payment records attached to it are anonymised rather than destroyed, for the reason given above.

You have the right to be informed, to object, to access a copy of what we hold about you, to have inaccurate details corrected, to have your information erased or blocked where the law allows, to obtain your data in a portable form, and to be indemnified for damage caused by inaccurate or unlawfully obtained information.

To exercise any of these, contact the sanctuary office at the entrance hut, open daily 7:00 AM to 5:00 PM. We will respond as promptly as we can.

If you believe your rights have been infringed, you may complain to the National Privacy Commission (privacy.gov.ph).

Passwords are stored only as a one-way hash and are never recoverable, by us or anyone else. Sensitive credentials, including authenticator seeds, are encrypted at rest.

Accounts that can access financial records or export visitor data must sign in with an authenticator code as well as a password.

Access is granted by role and checked on the server for every request, not merely hidden in the interface.

In the event of a breach affecting your information, the sanctuary will notify the National Privacy Commission and the people affected as required by law.