Data Privacy Policy

1. Introduction

Welcome to HeyDream Travel & Tours ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This comprehensive Data Privacy Policy outlines how we collect, use, disclose, retain, and safeguard your personal information when you use our website, book our travel packages, utilize our consultancy services, or interact with us in any capacity.

We strictly comply with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and other applicable international data protection regulations, including the General Data Protection Regulation (GDPR) for our European clients.

2. Scope of this Policy

This policy applies to all personal data collected through our digital platforms, including our website, mobile applications, social media pages, as well as data collected offline via telephone, email, and in-person consultations at our physical offices. By accessing our services, you acknowledge that you have read and understood the terms of this Privacy Policy.

3. Information We Collect

We collect various types of information to provide you with seamless, personalized travel experiences. The data we collect includes, but is not limited to:

• Identity Data: First name, middle name, last name, date of birth, gender, marital status, nationality, and government-issued identification numbers (such as passport details, driver's licenses, and national IDs) strictly required for travel bookings and visa processing.
• Contact Data: Residential and billing addresses, email addresses, mobile numbers, telephone numbers, and emergency contact details.
• Health & Dietary Data: Information regarding medical conditions, physical limitations, or dietary requirements (such as halal, vegan, or allergy-specific meals) to ensure your safety and comfort during travel.
• Transaction & Financial Data: Credit card details, bank account information, e-wallet IDs, payment history, and billing records. Please note that payments are processed through PCI-DSS compliant secure third-party gateways; we do not store your full, raw credit card numbers on our local servers.
• Profile & Preference Data: Usernames, passwords, travel preferences, frequent flyer numbers, hotel loyalty memberships, preferred seating, and feedback or survey responses.
• Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and device identifiers used to access our website.

4. How We Collect Your Information

We gather personal data through the following methods:

• Direct Interactions: When you fill out booking forms, apply for a visa through our agency, create an account, subscribe to our newsletter, or contact our customer support team.
• Automated Technologies: As you interact with our website, we may automatically collect technical data about your equipment and browsing actions using cookies, server logs, and similar tracking technologies.
• Third Parties & Publicly Available Sources: We may receive personal data about you from third parties, such as airlines, hotels, analytics providers (e.g., Google), and advertising networks.

5. How We Use Your Information

We process your personal data under strict legal parameters, primarily for the following purposes:

• Service Delivery: To process, confirm, manage, and execute your flight, hotel, tour reservations, cruise bookings, and travel insurance.
• Customer Support: To communicate with you regarding your booking status, itinerary changes, travel advisories, and to respond to your inquiries or complaints.
• Visa & Documentation Assistance: To facilitate visa applications, passport renewals, and other travel-related documentation on your behalf, requiring submission to relevant embassies and consulates.
• Marketing & Promotions: To send you personalized promotional offers, newsletters, and exclusive travel deals. You may opt-out of these communications at any time.
• Service Improvement: To analyze website usage, track booking trends, and conduct market research to enhance our service offerings and website functionality.
• Legal & Security: To comply with legal obligations, regulatory requirements, fraud prevention, and to protect the rights, property, and safety of HeyDream Travel & Tours, our clients, and others.

6. Information Sharing and Disclosure

We strictly do not sell, trade, or rent your personal data. We only share your information with trusted third parties under the following circumstances:

• Travel Service Providers: Airlines, hotels, car rental agencies, tour operators, and local guides who require your details to fulfill the travel services you have booked.
• Government & Regulatory Authorities: Embassies, consulates, immigration departments, customs, and security agencies (such as the TSA) when legally mandated for travel or visa processing.
• Third-Party Vendors: IT service providers, cloud hosting services, payment gateways, and marketing agencies bound by strict Data Processing Agreements (DPAs) to ensure data confidentiality.
• Business Transfers: In the event of a merger, acquisition, or sale of company assets, your personal data may be transferred to the acquiring entity under the same privacy obligations.

7. Data Security Measures

We have implemented comprehensive technical, physical, and organizational security measures designed to secure your personal information from accidental loss, unauthorized access, use, alteration, and disclosure.

• All data transmitted between your browser and our website is encrypted using Secure Socket Layer (SSL) technology.
• Access to your personal data is restricted to authorized employees, agents, and contractors strictly on a "need-to-know" basis.
• We conduct regular security assessments, vulnerability scans, and employee training on data privacy protocols.

8. Data Retention Policy

We will retain your personal information only for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. Typically, booking records and financial transaction data are retained for a minimum of five (5) to ten (10) years in compliance with Philippine tax laws. Once data is no longer necessary, it is securely destroyed or anonymized.

9. Cookies and Tracking Technologies

Our website utilizes cookies to distinguish you from other users, providing a personalized and efficient browsing experience. Cookies help us remember your preferences, keep you logged in, and analyze site traffic. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

10. Your Rights as a Data Subject

We respect your rights regarding your personal data. Under the Data Privacy Act of 2012, you possess the following rights:

• Right to be Informed: To know whether your personal data is being, or has been, processed.
• Right to Access: To request a copy of the personal data we hold about you.
• Right to Object: To object to the processing of your personal data, including for direct marketing purposes.
• Right to Erasure or Blocking: To suspend, withdraw, or order the blocking, removal, or destruction of your personal data from our filing systems.
• Right to Damages: To claim compensation if you suffered damages due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data.
• Right to Data Portability: To obtain and electronically move, copy, or transfer your data in a secure manner.

11. Children's Privacy

Our services are generally not directed to individuals under the age of 18 without parental consent. When booking travel for minors, we only collect personal data provided directly by a parent or legal guardian for the strict purpose of fulfilling travel requirements.

12. Contact Us

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this privacy policy. If you wish to exercise any of your data privacy rights, or if you have any questions, concerns, or complaints, please contact us immediately:

Data Protection Officer
Email: heydreamconsultancy@gmail.com
Phone: 0945 776 4140
Address: 3104 Tektite East Tower, Philippine Stock Exchange, Ortigas, Philippines

We strive to resolve any privacy concerns swiftly and transparently.