Privacy Policy

Booking fulfillment, payment processing, communicating with you, and complying with our legal obligations.

Guests: full name, email address, phone number, and payment details. Payment card details are processed by our payment processor (Xendit) and are not stored by Tuloy.

Operators: government-issued ID, DTI registration, BIR registration (TIN), and bank or e-wallet (e.g. GCash) details used for payouts.

We share personal data only with: (a) the counterparty to your booking (the Operator or Guest, as applicable); (b) Xendit, for payment processing; and (c) government agencies where required by law.

We retain personal data for approximately three (3) years after your last transaction, or longer where required by law.

You may request access to your personal data and correction of any inaccuracies. You may also withdraw your consent, though doing so may prevent us from fulfilling bookings.