Privacy Policy

Aravista / Skibidi Experience Travel & Tours

www.ara-vista.com

Effective date: 2nd May 2025

  1. Introduction

Aravista / Skibidi Experience Travel & Tours (“Aravista,” “Company,” “we,” “us,” or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you interact with our website https://ara-vista.com, make bookings, participate in our tours and services, or otherwise engage with us. 

We respect your privacy rights and are committed to complying with the Philippine Data Privacy Act (Republic Act No. 10173), the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable global data protection laws.

By using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data in accordance with its terms.

  1. Company Information and Contact Details

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at the details above.

  1. Scope of This Privacy Policy

This Privacy Policy applies to:

    • Visitors to our website;
    • Individuals who make bookings or inquiries;
    • Participants in our tours, programs, and activities;
    • Suppliers, vendors, and other partners who provide services to us.

It applies regardless of the device or technology you use to access our services and whether you interact with us online, by phone, email, or in person.

  1. Legal Basis for Processing Personal Data

We process your personal data only when we have a valid legal basis, including:

    • Consent: When you have given clear consent for us to process your data for a specific purpose (e.g., marketing communications).
    • Contractual necessity: When processing is necessary to fulfill a booking or service you have requested.
    • Legal obligation: When we are required to comply with applicable laws or regulatory requirements.
    • Legitimate interests: When processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights.

For residents of the European Economic Area (EEA), we rely on the legal bases outlined in Article 6 of the GDPR. For California residents, we comply with applicable provisions of the CCPA.

  1. Personal Data We Collect

We may collect the following categories of personal data:

    • Identity data: full name, date of birth, gender, nationality, passport or ID details.
    • Contact data: email address, phone number, mailing address.
    • Booking and travel data: trip details, dietary requirements, medical conditions relevant to participation, emergency contact information.
    • Payment data: billing details, transaction history, partial payment card data (processed securely via third-party platforms like PayPal; we do not store full card details).
    • Technical and usage data: IP address, browser type, device information, website interaction data, cookies.
    • Marketing and communications data: preferences for receiving marketing or promotional materials.

We collect only the data necessary for specific, explicit, and legitimate purposes.

  1. How We Collect Personal Data

We collect personal data through the following methods:

    • Direct interactions: when you fill out forms on our website, make a booking, contact us by phone or email, or provide information in person.
    • Automated technologies: when you use our website, we automatically collect technical and usage data through cookies and similar technologies.
    • Third-party sources: we may receive limited data from payment processors (e.g., PayPal) or referral partners as part of the booking process.
  1. Purposes of Processing Personal Data

We process your personal data for the following purposes:

    • To process bookings and deliver tours and services;
    • To communicate with you regarding your bookings, inquiries, or customer support needs;
    • To comply with legal and regulatory obligations;
    • To improve our website, services, and customer experience;
    • To send marketing communications where you have opted in;
    • To conduct analytics, performance monitoring, and service improvement.

We will not use your personal data for purposes incompatible with those disclosed in this Privacy Policy without providing notice and obtaining your consent where required by law.

Use of Photos, Videos, and Reviews
With your consent, we may collect and use photos and videos taken during the trip for promotional purposes on our website, social media platforms, and marketing materials. We may also invite you to provide a voluntary video review or testimonial of your experience, which we may use in our promotional efforts. Participation in photos, videos, or reviews is entirely optional, and you have the right to decline.

If you consent to the use of your image or testimonial, you may withdraw your consent at any time by contacting us at info@ara-vista.com. Upon receiving a withdrawal request or data deletion request, we will make reasonable efforts to remove your photos, videos, or reviews from our active platforms and promotional channels. Please note, however, that content already published or shared externally (e.g., on social media) may not always be fully retractable.

  1. Marketing and Communication Preferences

We may send you marketing communications about our services, special offers, promotions, or events only where you have provided your consent or where we are otherwise permitted by law. You have the right to opt out of marketing communications at any time by:

    • Clicking the “unsubscribe” link in any marketing email; or
    • Contacting us at info@ara-vista.com to update your preferences.

We will honor your opt-out request promptly and ensure you continue to receive only transactional or service-related communications necessary to fulfill your bookings.

  1. Sharing and Disclosure of Personal Data

We do not sell or rent your personal data to third parties. However, we may share your data with the following categories of recipients when necessary to deliver our services:

    • Service providers: such as payment processors (e.g., PayPal), accommodation providers, transportation operators, and local activity partners.
    • Regulatory and legal authorities: if required to comply with legal obligations, respond to lawful requests, or protect our rights and safety.
    • Business partners: only where you have expressly consented (e.g., promotional partnerships or joint offers).

We require all third parties to respect the security of your personal data and to process it in accordance with applicable laws and our contractual instructions.

  1. International Data Transfers

As a company based in the Philippines serving international travelers, we may transfer your personal data to and from countries outside the Philippines, including the European Economic Area (EEA), the United States, or other jurisdictions. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as:

    • Standard contractual clauses approved under GDPR;
    • Transfers to countries deemed to provide an adequate level of protection; or
    • Transfers with your explicit consent.

We take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.

  1. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

    • Fulfilling bookings and contractual obligations;
    • Complying with legal, tax, and accounting requirements;
    • Resolving disputes and enforcing our agreements.

When we no longer require personal data, we securely delete or anonymize it. For example:

    • Booking records are retained for 6 years after trip completion.
    • Marketing preferences are kept until you withdraw consent.
  1. Cookies and Similar Technologies

We use cookies and similar technologies on our website to:

    • Enable essential site functionality;
    • Improve user experience;
    • Analyze website traffic and performance;
    • Personalize content and offers.

You can manage cookie preferences through your browser settings or the cookie banner on our website. For more details, please refer to our Cookie Policy.

  1. Your Rights Under Philippine Law

Under the Philippine Data Privacy Act, you have the following rights:

    • Right to be informed of how your data is processed;
    • Right to access personal data we hold about you;
    • Right to object to or restrict processing under certain conditions;
    • Right to correct or update inaccurate data;
    • Right to request deletion or blocking of your data;
    • Right to data portability;
    • Right to lodge complaints with the National Privacy Commission.

You may exercise these rights by contacting us at info@ara-vista.com.

  1. Your Rights Under GDPR

If you are located in the EEA, you have the following rights under the General Data Protection Regulation (GDPR):

    • Right of access to your personal data;
    • Right to rectification of inaccurate data;
    • Right to erasure (“right to be forgotten”);
    • Right to restrict or object to processing;
    • Right to data portability;
    • Right to withdraw consent at any time (where processing is based on consent);
    • Right to lodge a complaint with a supervisory authority in your country.

We are committed to honoring these rights in accordance with EU law if applicable.

  1. Your Rights Under CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

    • Right to know what categories of personal information we collect, use, disclose, and the purposes for which they are used;
    • Right to access specific pieces of personal data we hold about you;
    • Right to request deletion of your personal information, subject to legal exceptions;
    • Right to opt out of the sale of your personal data (note: we do not sell personal data);
    • Right to non-discrimination for exercising your CCPA rights.

To exercise your CCPA rights, please contact us at info@ara-vista.com or follow the instructions on our website.

  1. Children’s Privacy

Our services are not directed to children under the age of 18 without the consent of a parent or legal guardian. We do not knowingly collect personal data from children under 18. If we learn that we have inadvertently collected data from a minor without appropriate consent, we will promptly delete such information. Parents or guardians who believe we have collected data from their child may contact us at info@ara-vista.com to request removal.

  1. Data Security Measures

We take the protection of your personal data seriously and have implemented appropriate technical, organizational, and administrative measures to safeguard it against unauthorized access, disclosure, alteration, or destruction. These measures include:

    • Encryption of sensitive data;
    • Access controls and authentication;
    • Secure data storage and backups;
    • Staff training on data protection.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

  1. Automated Decision-Making and Profiling

We do not use your personal data for automated decision-making that produces legal or similarly significant effects, nor do we engage in profiling as defined under GDPR or similar regulations. If this changes in the future, we will notify you and provide the legally required safeguards.

  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal, regulatory, operational, or business requirements. We will notify you of material changes by posting the updated policy on our website and updating the “Effective Date” at the top of this document. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

  1. Contact and Complaints

If you have questions, requests, or complaints regarding this Privacy Policy or our data handling practices, please contact us at:

Data Protection Contact:
Afiq Zudin Hadi
afiq@ara-vista.com
Masbate, Cataingan, Bahia Vista Resort, XXM6+2X5, 5415

If you are unsatisfied with our response, you have the right to file a complaint with:

    • The Philippine National Privacy Commission at https://privacy.gov.ph;
    • The competent data protection authority in your jurisdiction (for EEA or UK residents);
    • The California Attorney General’s Office (for California residents).
  1. Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities without undue delay, in compliance with applicable legal requirements, including the Philippine Data Privacy Act, GDPR, and CCPA.

This Website Is Using Cookies

We use them to enhance your browsing experience. By continuing to use our site, you agree to our use of cookies.

50% OFF Early Bird Sale!