Privacy Policy
Pawikan, a product of SistemaPH, is software that helps joiner tour organizers publish trips, take bookings, and keep payment records. This page explains what personal information passes through Pawikan and what happens to it.
Who handles your information
When you book a trip, you are booking with the organizer, not with Pawikan. The organizer decides what to ask for and uses your details to run the trip. Pawikan stores and processes that information for the organizer.
For organizer and staff accounts, Pawikan handles the account information itself, to run the service and keep it secure.
What we collect
- Bookers: name, mobile number, optional email, and any notes you write to the organizer.
- Travellers: full name and birthdate or age on departure. Depending on the organizer’s booking form, we also collect sex, nationality, mobile number (which may be a shared or guardian contact), city or municipality, bag tag nickname, and emergency contact details.
- Payments: amounts, reference numbers, and the receipt or screenshot you upload as proof of payment.
- Organizers and staff: name, email, password (stored only as a secure hash), organization details, and role.
- Technical data: sign-in sessions, IP address, browser type, and records of sensitive actions such as manifest exports and payment approvals.
Why we collect it
- to hold your slots and confirm your booking;
- to build the trip manifest. Boat operators, resorts, and local governments often require each traveller’s name and age, which is why the form asks for a birthdate or age on departure;
- to let the organizer review your payment and track balances;
- to send booking, payment, and trip updates;
- to reach your emergency contact if something goes wrong on the trip;
- to keep the service secure and prevent abuse.
We do not sell personal information or use it for advertising.
Who can see it
- The organizer and their team, based on their role. Trip guides see only what they need for the manifest.
- Service providers we rely on to run Pawikan: Amazon Web Services (hosting, database, and file storage in Singapore) and Resend (email delivery).
- Authorities, when the law requires it.
Public trip pages show trip details and, when enabled by the organizer, slot counts, never traveller information. Receipts are stored privately and opened only through short-lived links.
How long we keep it
We keep booking and payment records while the organizer’s account is active, so they have a history of their trips and payments. Organizers can ask us to delete their account and its records. You can also ask us to delete your own details (see below).
Your rights
Under the Data Privacy Act of 2012 (RA 10173), you can ask to see the information held about you, correct it, or have it deleted, and you can object to how it is used. For a booking, contacting the organizer is usually fastest. You can also email us and we will help, or pass the request to the right organizer.
If you are not satisfied with our response, you can complain to the National Privacy Commission at privacy.gov.ph.
How we protect it
Each organization’s data is kept separate from every other organization’s, access is limited by role, connections are encrypted, and receipts are stored privately. No system is perfectly secure; if a breach affects your information, we will notify the organizer and, where required, you and the National Privacy Commission.
Changes
We may update this policy as Pawikan grows. The date at the top shows the latest version.
Contact
Questions or requests: support.sistemaph@gmail.com