Privacy Policy

Last updated: July 19, 2026

Castaway Tours (“Castaway”, “we”, “us”) operates 3-day island expeditions between El Nido and Coron, Palawan, Philippines, and the website castawaytours.ph. This policy explains what personal data we collect, why we collect it, who we share it with, and how you can ask us to delete it. Questions any time: reservations@castawaytours.ph.

What we collect

• Booking details — your name, email address, phone number, nationality, party size, chosen departure, and anything you tell us to run your trip safely, such as dietary restrictions or medical notes.
• Payment confirmation — your deposit is processed by PayPal. We receive confirmation of the payment (amount, reference, status) but never see or store your card numbers or PayPal credentials.
• Messages you send us — when you contact us through the website chat, email, WhatsApp, Facebook Messenger, or Instagram, we keep the conversation (message content, your name or handle on that platform, and any photos or files you send) so any of our staff can pick up where the conversation left off.
• Website basics — standard technical data such as pages visited and device type. See our Cookies Policy for details.

How we use it

• To operate your booking: confirmations, payment receipts, pre-departure briefings, and trip updates.
• To answer you: your messages from every channel arrive in one team inbox so we can reply quickly and see the context of your booking while doing so.
• For safety: dietary and medical notes are shared with the crew who need them.
• For legal and accounting obligations under Philippine law.
• AI-assisted replies: we sometimes use an AI tool to help our staff draft a response (for example, suggesting departure dates from our schedule). A human always reviews and sends every reply — AI never messages you on its own. Message text may be processed by our AI provider (Google) solely to generate that draft.

We never sell your personal data. We do not use your messages for advertising.

Who we share it with

• PayPal — to process deposits (their own privacy policy applies).
• Google Workspace — our business email (reservations@castawaytours.ph) runs on Gmail.
• Meta Platforms — if you contact us on Facebook Messenger, Instagram, or WhatsApp, those messages also exist on Meta’s platforms under their terms; we access them through Meta’s official business tools to reply to you.
• Hosting providers — our website and booking system run on reputable cloud infrastructure with access limited to our team.

How long we keep it

Booking and payment records are kept as long as Philippine tax and accounting law requires. Conversation history is kept so we can serve you on future trips — unless you ask us to delete it (below).

Your rights & data deletion

You can ask us at any time to see the personal data we hold about you, correct it, or delete it. To request deletion:

• Email reservations@castawaytours.ph from the address you used with us, with the subject “Delete my data”, or
• Message us “delete my data” on the same channel you used to contact us (website chat, WhatsApp, Facebook Messenger, or Instagram).

We will delete your conversation history and personal details within 30 days, keeping only what Philippine law obliges us to retain (for example, official payment records). This includes any data we received through Facebook, Instagram, or WhatsApp. Under the Philippine Data Privacy Act of 2012 you may also lodge a complaint with the National Privacy Commission.

Changes to this policy

If we change how we handle your data, we will update this page and its date. Significant changes will be announced on the website.