This explains what we collect, why we collect it, and what your rights are. Plain language. If anything is unclear, write to hello@siargaoverified.com.
What we collect
- Inquiry submissions. When you submit the inquiry form on a verified business profile, we store the tourist name you provide, your chosen contact method (Messenger, WhatsApp, email, phone), the value you enter, and any service/date/group-size/message details. This is needed to route your inquiry to the verified operator.
- Scam reports. When you submit at /report, we store the suspicious URL, the impersonated business name, any contact you choose to share, and your notes. Reports are reviewed by local moderators.
- Business verification details. For listed businesses, we store contact links, payment account names and references (not card numbers), descriptions, prices, and verification history. This is the data we publish on a profile after verification.
- Account information. Admin and merchant accounts have an email address and an internal role. Passwords are hashed by Supabase and never readable to us.
Why we collect it
- Verification — to check that listed businesses are real and reachable through official channels.
- Inquiry routing — to let verified operators receive and respond to tourist messages.
- Scam review — to investigate and act on reports of fake pages impersonating real businesses.
- Trust and safety operations — to maintain an accurate directory and protect tourists from fraud.
Who can access your data
- Authorized admins can access all data for verification and safety operations.
- Assigned merchantscan only see data for the business they are linked to — their own profile and inquiries sent to that business. They cannot see other businesses or other businesses' inquiries.
- No one else, unless required by law or a valid legal process.
We do not sell your data
We do not sell, rent, or share personal data with third parties for marketing or advertising. There are no ad networks on this site.
Your rights under the Philippines Data Privacy Act
The Data Privacy Act of 2012 (Republic Act 10173) gives you these rights:
- Right to be informed about how your data is processed.
- Right to access the data we hold about you.
- Right to correct inaccurate or outdated data.
- Right to erase or block processing of your data, where lawful.
- Right to data portability for data you have given us.
- Right to lodge a complaint with the National Privacy Commission (NPC).
To exercise any of these, email hello@siargaoverified.com. We respond within a reasonable time.
Data correction or deletion requests
Write to hello@siargaoverified.com with the subject line “Privacy Request” and tell us what you would like changed or removed. We may need to verify your identity before acting on the request.
Future features
We may later add features such as screenshot uploads or evidence attachments on scam reports or verification records. If we do, those uploads will be covered by this same policy. We will update this page first before launching any such feature.
Changes to this policy
We may update this page over time. Material changes will be noted here with a new “Last updated” date.