Skip to main content

Legal

Privacy policy.

How Bryan Condominium Suites collects, uses and protects your information when you browse, book and stay. Last updated 12 October 2026.

Who we are

Bryan Condominium Suites is the personal information controller for this website and for your stay, under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). Reservations, payments and website measurement run on isa, operated by isa Technologies OPC, which processes this information on our behalf and only on our instructions.

What we collect

When you book or contact us: your name, email address, phone number, stay dates, guest count, requests and messages, and the status and amount of your payment. Card and bank details are entered on our payment provider's hosted checkout (PayMongo) and never reach us. When you browse: the pages and booking steps you view, clicks, scrolling, time on page, the rooms and offers you look at, page performance, your device type, browser, operating system and country, the website or campaign that brought you here, and a random visitor identifier stored in a cookie for up to 180 days. Where replay applies, we record masked session replays of your navigation: all text and form fields are masked, and guest forms, payment and confirmation details, images and embedded content are blocked. If you allow advertising measurement: advertising click identifiers (for example from a Facebook or Google ad), Google Analytics and Meta browser cookies, and your IP address and browser at the time of booking.

Why we use it and on what basis

To take, confirm, manage and support your reservation and answer your messages (to perform our contract with you and take steps you ask for). To keep the website and payments secure and working, and to prevent fraud (legitimate interest and legal obligation). To understand how visitors use the website, fix problems and improve it, and to learn which websites, campaigns and ads bring guests and bookings: for visitors in the Philippines this is based on our legitimate interest, assessed and recorded under NPC Circular No. 2023-07, and you can object at any time; for visitors elsewhere it runs only with your consent. Advertising measurement always requires your consent: with it, when you book we send Meta and Google the booking value and a one-way hashed (SHA-256) copy of your email address, phone number, name and country so they can tell us which ads led to bookings and show our ads to people more likely to stay with us. We never sell your personal information.

Cookies and your choices

Necessary cookies keep your booking session working and cannot be switched off. Optional measurement has three separate settings: analytics and attribution, masked session replay, and advertising measurement. A notice appears on your first visit; choose Accept optional, Reject optional or Settings. You can change or withdraw your choices at any time through Privacy settings at the bottom of every page. Withdrawing stops future collection, removes the optional visitor cookie and stops pending advertising deliveries for your bookings.

Who receives it

isa (reservations, payments records and first-party measurement), Supabase (database hosting), Cloudflare (website hosting, security and email), PayMongo (payments), Resend (booking emails), PostHog (website analytics and masked replays), Sentry (error reports without guest details) and Better Stack (uptime checks). With your advertising consent only: Meta Platforms and Google, which also use the data under their own terms. Some of these providers store data outside the Philippines, including in the United States; we use providers bound by contract to protect it. We disclose information when the law requires it.

How long we keep it

Reservation, guest and payment records are kept as long as needed for your stay and for our tax, accounting and legal obligations. Website measurement and attribution records are deleted after 730 days, except the first visit record behind a booking we still keep. Advertising click identifiers and booking-time IP and browser details are deleted after 90 days or when you withdraw consent. The optional visitor cookie lasts up to 180 days. Provider copies follow each provider's retention settings.

Your rights

You have the right to be informed, to access, correct and port your information, to object to processing (including any measurement based on legitimate interest), to have it erased or blocked, and to claim damages, as provided by the Data Privacy Act. To exercise these rights, email privacy@bryancondominium.com, send a request through the contact form on this website or ask at the front desk; we answer within 15 working days. If you are not satisfied, you may complain to the National Privacy Commission (privacy.gov.ph).