Tikigo (“we”, “us”, “our”) operates the website www.tikigo.net (the “Platform”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our Platform, in compliance with the EU General Data Protection Regulation (GDPR) and other applicable privacy laws.
1. Information We Collect
Information you provide directly:
- Account information: name, email address, password (hashed)
- Profile information: phone number, bio, website, avatar
- Booking details: tour selections, dates, number of guests, special requests
- Communications: messages sent through our contact form or messaging system
- Reviews and ratings you submit
- Newsletter subscription preferences
Information collected automatically:
- Device information: browser type, operating system, screen resolution
- Usage data: pages visited, time spent, click patterns (via Google Analytics, only with your consent)
- IP address and approximate location
- Cookies and similar technologies (see Section 5)
2. How We Use Your Information
- To provide and operate the Platform
- To process and manage your bookings
- To communicate with you about your account, bookings, and support requests (transactional emails)
- To send marketing communications (only with your explicit consent)
- To improve our Platform using aggregated analytics data
- To detect and prevent fraud or abuse
- To comply with legal obligations
3. Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds:
- Contract performance — processing necessary to fulfill bookings and provide our services
- Consent — for analytics cookies, marketing emails, and marketing cookies (you may withdraw consent at any time)
- Legitimate interest — for Platform security, fraud prevention, and service improvement
- Legal obligation — when required by applicable law
4. Third-Party Services
We share data with the following categories of third-party services:
- Stripe (payment processing) — When you make a payment, you are redirected to Stripe's secure checkout. We never receive, store, or process your credit card number, CVV, or full card details. Stripe acts as an independent data controller for payment data. See Stripe's Privacy Policy.
- Google Analytics (GA4) — We use Google Analytics to understand how visitors use our Platform. Analytics cookies are only loaded after you give consent via our cookie banner. Google Analytics data is anonymized and retained for 14 months. See Google's Privacy Policy.
- Resend (email delivery) — We use Resend to send transactional and marketing emails. Your email address and name are shared with Resend for this purpose.
- Tour Organizers — When you make a booking, your name, email, and booking details are shared with the relevant tour organizer to fulfill the service.
We do not sell your personal data to any third party.
5. Cookies
Tikigo uses cookies and similar technologies. We categorize them as follows:
- Essential cookies — Required for the site to function (authentication, session management, CSRF protection). These cannot be disabled. Legal basis: legitimate interest.
- Analytics cookies — Google Analytics (GA4) helps us understand how visitors use the site. Only loaded after you give consent. Legal basis: consent.
- Marketing cookies — Used for personalized advertising and promotions.Only loaded after you give consent. Legal basis: consent.
You can manage your cookie preferences at any time via the cookie consent banner at the bottom of the page, or by clearing your browser cookies. Your choices are stored locally and respected across all pages.
6. Your Rights (GDPR)
If you are in the European Economic Area (EEA) or similar jurisdictions, you have the following rights:
- Right of access — Request a copy of the personal data we hold about you
- Right to rectification — Request correction of inaccurate data
- Right to erasure — Request deletion of your personal data (“right to be forgotten”)
- Right to data portability — Request an export of your data in a machine-readable format
- Right to restrict processing — Request limitation of how we use your data
- Right to object — Object to processing based on legitimate interest
- Right to withdraw consent — Withdraw consent for marketing emails or analytics cookies at any time
To exercise any of these rights, contact us at hello@tikigo.net. We will respond within 30 days. You may also contact your local data protection authority if you believe your rights have been violated.
7. Data Retention
- Account data — Retained as long as your account is active. Deleted within 30 days of account deletion request.
- Booking records — Retained for 7 years after the booking date for tax and legal compliance purposes.
- Analytics data — Google Analytics data is retained for 14 months.
- Newsletter subscriptions — Retained until you unsubscribe.
- Support communications — Retained for 3 years after resolution.
8. Data Security
We implement industry-standard security measures including encrypted connections (TLS/SSL), hashed passwords (bcrypt), and secure payment processing through Stripe (PCI DSS Level 1 compliant). We never store credit card details on our servers.
9. International Data Transfers
Your data may be transferred to and processed in countries outside the EEA, including the United States (for services like Stripe, Google, and Resend). These transfers are protected by Standard Contractual Clauses (SCCs) or the service provider's participation in recognized data protection frameworks.
10. Children's Privacy
Our Platform is not intended for children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Platform. The “Last updated” date at the top reflects the most recent revision.
12. Contact Us
For privacy-related inquiries, data requests, or complaints:
Email: hello@tikigo.net
Tikigo
Puerto Princesa, Palawan, Philippines