DATA PRIVACY POLICY STATEMENT

Greetings from Makati Palace Hotel!

Makati Palace Hotel (referred to as ‘the Hotel’, ‘we’ or ‘us’) respects your privacy and is committed to
protecting your personal data in accordance with the Data Privacy Act of 2012 (Republic Act No.
10173), its Implementing Rules and Regulations (IRR), and all issuances of the National Privacy
Commission (NPC).

This Privacy Policy explains how we collect, use, disclose, safeguard, and store your information when
you stay with us, visit our property, use our website, or engage with any of our services.

Information We Collect
When you interact with the Hotel, we may collect personal information such as your name, contact
details, nationality, date of birth, and government-issued identification. We also process reservation
details, payment information, room preferences, and records related to your stay.
Sensitive information—such as medical or accessibility requirements—is collected only when you
voluntarily provide it.

For security, we also capture CCTV footage within hotel premises. When using our website or digital
services, we may receive technical information such as your device details, IP address, and browsing
activity.

Purpose of Processing
We process your personal data primarily to manage reservations, verify your identity during check-in,
provide hotel services, personalize your stay, and maintain accurate financial and booking records.

We may also use your information to comply with regulatory requirements from government agencies
such as the DOT, LGU, BIR, PNP, and other authorities when required by law. With your consent, we may
use your contact information for marketing and promotional communication.
CCTV data is processed exclusively for security, safety, and incident documentation.

Legal Bases for Processing
Your information is processed under lawful bases recognized by RA 10173. These include the fulfillment
of a contract (such as completing your reservation and providing services), compliance with legal
obligations, our legitimate interest in maintaining safety and improving operations, and your explicit
consent for optional or marketing-related processing.

Data Sharing and Disclosure
Your personal information may be shared with authorized hotel personnel, service providers such as
payment processors or IT providers, and government agencies when legally required. Any third parties
who handle your data are required to comply with the Data Privacy Act and uphold strict confidentiality
and security measures. We do not sell or trade your information.

Data Retention
We retain personal data only for as long as necessary and in accordance with NPC guidelines and
applicable Philippine laws. Guest records and financial documents may be stored for up to ten years to
comply with BIR requirements.
CCTV footage is generally retained for 30 to 90 days. Marketing-related information is kept only until
you withdraw your consent or request deletion.

Security Measures
To protect your data, we implement organizational, physical, and technical safeguards such as secure
servers, restricted access controls, encryption, internal privacy protocols, regular system monitoring,
and staff training. While we take reasonable steps to protect your information, no system can guarantee
absolute security.


Cookies and Website Tracking
Our website uses cookies and similar technologies to enhance your browsing experience and analyze
site performance. You may disable cookies in your browser settings, although doing so may affect
certain website features.

Contact Information
For concerns, requests, or clarifications regarding your personal data, you may contact us at:

Email: info@makatipalacehotel.com.ph
Phone: (632) 8 899 0344
Address: 5011 P. Burgos corner Caceres Street, Makati City, Metro Manila 1200

Policy Updates
This Privacy Policy may be updated to reflect changes in operations, legal requirements, or NPC
guidelines. Any revisions will be posted on our website with an updated “Last Updated” date.