In short: we only ask for what we need to take your booking — your name, mobile number and (optionally) email. Card and e-wallet details are entered on PayMongo's secure checkout, never on our site. We don't sell your data, we don't run ads or tracking analytics, and you can ask us to see, correct or delete your information at any time.
1. Who we are
A Kōzē Den is a private vacation rental operated by A Kōzē Den, Mandaluyong City, Metro Manila ("we", "us", "our"). We are the personal information controller for the information you give us through this website, as defined by the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC).
This policy covers our website, our online booking and payment flow, the "My Booking" page, guest feedback, and messages you send us about a booking.
2. What we collect
Information you give us
- Booking details: full name, mobile number, email address (optional), check-in and check-out dates, number of guests, chosen package or bedrooms, and any occasion you tell us about.
- Feedback: your star rating and message if you leave a review after your stay.
- Messages: anything you send us through Messenger, Viber, SMS, phone or email — for example questions, special requests, or valid ID we may ask to see at check-in for security.
Information created when you book
- Your booking code and a private link token for managing your booking.
- Booking status, amounts charged, security deposit, refund and cancellation records.
- Payment references from PayMongo (checkout, payment and refund IDs, and processing fees). We never see or store your full card number, CVC, or e-wallet login.
Information collected automatically
- Technical data: like any website, our hosting server records your IP address, browser type, pages requested and time of visit in standard server logs, used for security and troubleshooting.
- Cookies: a small number of essential cookies that keep the booking flow working and secure. See our Cookie Policy.
We do not use advertising cookies, tracking pixels or third-party analytics, and we do not intentionally collect sensitive personal information (such as health, religion or government ID numbers) through the website.
3. How we use your information
- To check availability, take and confirm your reservation, and hold your dates.
- To process your payment, security deposit, cancellation and refunds through PayMongo.
- To send booking confirmations, status updates and check-in details by email, SMS or messaging app.
- To reach you about your stay (arrival, access instructions, issues during your stay) and to answer your questions.
- To keep our property, guests and neighbours safe, enforce our Terms & Conditions and house rules, and handle damage or disputes.
- To keep accounting and tax records required by Philippine law.
- To show approved reviews on our website — displayed with your name as you entered it at booking, your rating and message only.
- To protect the website against fraud, abuse and security incidents.
We do not use your information for automated decision-making or profiling, and we will not send you marketing messages unless you separately ask to receive them.
4. Legal basis for processing
Under Section 12 of the Data Privacy Act, we process your personal information because:
- it is necessary to fulfil our contract with you — your booking — or to take steps you asked for before booking;
- we must comply with legal obligations, such as tax, accounting and lawful requests from government authorities;
- it is necessary for our legitimate interests in running a safe and secure rental and website, where those interests are not overridden by your rights; and
- you have given your consent, for example when you agree to this policy at checkout, choose to leave a review, or allow optional cookies. You can withdraw consent at any time; this does not affect processing already done.
5. Who we share it with
We never sell or rent your personal information. We share it only with the service providers that help us run bookings, each of whom may process it only to provide their service:
| Provider | Purpose | What they receive |
|---|---|---|
| PayMongo Philippines, Inc. | Payment processing, refunds | Name, mobile, email, booking reference and amount. You enter card / e-wallet details directly with PayMongo, under their privacy policy. |
| Web hosting provider | Hosting the website and booking database | All data stored on the site |
| Google (Gmail) | Sending booking emails | Your email address and the email content |
| Google Maps | Map of the property on room pages (only if you choose to load it) | Your IP address and browser data, under Google's privacy policy |
| Google Fonts, cdnjs (Cloudflare), jsDelivr | Delivering fonts, icons and the date picker | Your IP address and browser data when the page loads |
| Meta (Messenger) / Viber | Guest communication, only if you message us there | What you send us, under those platforms' own policies |
We may also disclose information when required by law, court order or a lawful request from government authorities; to protect the rights, property or safety of our guests, neighbours, building administration or ourselves (for example, giving your name and stay dates to building or subdivision administration for gate access); or with your consent.
Some providers store data on servers outside the Philippines. Where that happens, we rely on their contractual and security commitments to protect your information to a standard comparable to the Data Privacy Act.
6. How long we keep it
- Booking and payment records: for as long as required by Philippine tax and accounting laws, after which they are deleted or anonymised.
- Payments that are started but never completed: no booking is created; the checkout session expires with PayMongo.
- Messages and ID photos shared for check-in: deleted once your stay and any deposit or damage matters are settled, unless needed for a dispute.
- Reviews: until you ask us to remove them or we take them down.
- Server logs: kept for a short period by our hosting provider for security, then rotated.
7. How we protect it
We use organizational, physical and technical safeguards appropriate to a small business, including: encrypted HTTPS connections; card and e-wallet payments handled entirely by PayMongo (a PCI DSS–compliant processor); secret, unguessable links for managing bookings; CSRF protection on forms; password-protected admin access limited to the people who manage bookings; and regular backups. No system is perfectly secure, but if a personal data breach occurs that is likely to put you at risk, we will notify you and the National Privacy Commission as required by law.
8. Your rights
Under the Data Privacy Act you have the right to:
- Be informed about how your personal information is processed — this policy;
- Access the personal information we hold about you;
- Object to processing, including withdrawing consent;
- Correct inaccurate or outdated information;
- Erasure or blocking of information that is no longer needed, unlawfully obtained, or processed without a valid basis;
- Data portability — get a copy in a commonly used electronic format;
- Damages if you suffer harm from inaccurate, incomplete or unlawfully used information; and
- File a complaint with the National Privacy Commission (privacy.gov.ph).
To use any of these rights, contact us using the details below with your booking code. We may ask you to verify your identity first, and we aim to respond within 15 days. Some records (for example, tax records) may need to be kept even if you ask us to delete them; if so, we will tell you why.
9. Cookies
We use only the cookies needed to run the booking flow securely, plus a cookie that remembers your cookie choice. Optional third-party content, such as Google Maps, loads only if you allow it. Details are in our Cookie Policy.
10. Children
Bookings must be made by an adult aged 18 or over. We do not knowingly collect personal information from children through this website. Minors may stay only as part of a booking made and supervised by an adult.
11. Changes to this policy
We may update this policy when our services or the law change. The "Last updated" date at the top shows when it was last revised. Significant changes will be highlighted on this page; the version in effect when you book applies to that booking.
12. Contact us
For privacy questions, requests or complaints, contact our data protection contact:
- Operator: A Kōzē Den, Mandaluyong City, Metro Manila
- Messenger / Viber: m.me/akozeden