Your data

Privacy notice

What we keep when you request a booking, why, and how to have it removed. Last updated Friday, 9 October 2026.

Who we are

Leon Island Tours & Services, A. Batobalonos St, Santa Fe, Cebu, Philippines. We decide what happens to the details you send us, and you can reach us at [email protected] or on WhatsApp.

What we collect

When you request a booking on our booking page, we keep:

  • your name and WhatsApp number
  • your email, if you give one
  • the tour, date and size of your group
  • your hotel or pickup place and any notes, if you add them
  • a scrambled code made from your internet address, used only to stop the same connection sending lots of requests. We can’t turn it back into the address.

If you message us on WhatsApp or by email instead, we only have what you send us there.

Why we use it

Only to handle your booking: to check the date, hold your spot, confirm with you on WhatsApp and run your trip. You agree to this when you tick the box on the booking form. We don’t sell your details.

Where it’s kept, and who sees it

  • Bookings are stored in our booking database on Cloudflare (Cloudflare D1). Only our team can open it, after signing in.
  • The spam check on the booking form is Cloudflare Turnstile, which looks at your browser to tell people from bots.
  • When we message you on WhatsApp, those messages are handled by WhatsApp under its own privacy policy.

Your booking page link shows a summary of your trip (reference, tour, date, group size and status) to anyone who has the link, but never your name, number, email or notes. Keep it to yourself.

How long we keep it

Your name, WhatsApp number, email, pickup place, notes and the scrambled internet-address code are removed 12 months after your trip date. We keep the rest (tour, date and group size) without anything that identifies you, so we can see how busy each trip was.

Visiting the website

We use Google Analytics, which sets cookies, to see which pages people visit and which links bring them here. It doesn’t run on booking status pages. To credit the right link, your browser also remembers where you arrived from until you close the tab.

Your rights

Under the Philippine Data Privacy Act of 2012, you can ask to see the details we hold about you, correct them, or have them deleted before the 12 months are up. Email [email protected] or message us on WhatsApp with your booking reference or the number you booked with. You can also complain to the National Privacy Commission.