Data Privacy Notice
General Privacy Statement
King Aces Travel and Tours Service, Inc. (KATTSI) is committed to ensuring the protection and privacy of your personal information in compliance with the Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations (IRR), and relevant issuances of the National Privacy Commission (NPC). This Data Privacy Notice explains what information will be gathered and the details how collected information is used without breaching its privacy and confidentiality.
Scope
This Notice applies to personal information about KATTSI’s clients, employees, stakeholders, and partners which KATTSI collect, store, share, maintained, used, processed and/or kept in custody by King Aces Travel and Tours Service, Inc. (KATTSI).
Types of Personal Information
A. Personal Information: Recorded information about an identifiable individual, that makes the identity of a person apparent, or when put together will reasonably identify the person.
B. Sensitive Personal Information: Personal information about a living individual’s race or ethnicity, political opinions, religious or philosophical beliefs, sexual preferences or practices, criminal record, or memberships details, such as trade union or professional, political or trade associations, genetic data and biometric data.
C. Financial Information: Bank account details, transaction records, and other financial data required to process the payment.
D. Medical information: Information about a living or deceased individual’s physical, mental or psychological health, including your medical history, diagnosis of illness(es), disability and dietary needs.
Personal Information We Collect
We collect personal information necessary to provide you with our services and to comply with legal and regulatory requirements. This may include, but is not limited to:
A. Full Name, Date of Birth, and Age
B. Contact Information (Phone Number, Email Address, Mailing Address)
C. Government Issued Identification (SSS, TIN, Passport, etc.)
For VISA Requirements:
A. Financial Information (Bank Accounts, Loan Information, Savings, Investments)
B. Employment Information (Branch of Service, Rank, Serial Number, Company Name, Job Title, Income)
C. Other information voluntarily provided by you during interactions with us.
How We Collect Your Information
KATTSI may collect your personal data in several ways:
A. From the information you provide to KATTSI when you contact us and you express your interest in our product and services (whether online, by phone, in person, or via email);
B. When you fill out registration, booking, feedback, or inquiry forms via our website, mobile platform, or affiliated third-party platforms;
C. When you apply for employment or submit documents in relation to recruitment or HR processes;
D. When you participate in surveys, promotional events, contests, or loyalty programs offered by KATTSI;
E. When you make inquiries, or communicate with us via email, through our KATTSI Social Online accounts in various social media platforms (Facebook, KATTSI Website, etc.);
F. Automatically Collected Data: when you access or use our website or online platforms, where we may collect information such as your IP address, browser type, device information, browsing behavior, and cookies, in accordance with our Cookies Policy;
G. From Third Parties, when: (1) we receive referrals, confirmations, or verification of bookings through partner agencies or third-party platforms you engage with (e.g., online booking sites); and (2) Background checks, employment verification, or reference checks are made during recruitment and employment processes.
How We Use Your Personal Information
KATTSI uses your personal data only for legitimate business purposes and as required or authorized by law. Your personal information is used for the following purposes:
A. To process flight, hotel, transport, and tour bookings.
B. To confirm travel arrangements with service providers (e.g., airlines, hotels, tour operators).
C. To assist in the application or processing of travel documents (e.g., VISA, permits).
D. To submit required reports to government agencies or embassies.
E. To verify the identity of the client for fraud prevention and security purposes.
F. To contact designated individuals in case of emergencies during the trip.
G. To provide support services such as medical or insurance coordination (if needed).
H. For accounting, auditing, reconciliation purposes, and maintain internal records
I. For employment purposes
J. To send you updates, notifications, promotions, and surveys related to KATTSI products and services.
K. To coordinate logistics and ensure the safety of travelers (especially for group tours or international travel).
L. For statistical, research, and analytics purposes for service improvements.
M. To comply with internal and external audit requirements.
N. To comply with legal obligations
O. For security, fraud prevention, and risk management, to detect and prevent fraudulent or suspicious activity, unauthorized access, and abuse of our systems and services.
KATTSI will ensure that the use of your personal data is limited to what is necessary for the fulfillment of the declared purposes and that such processing complies with the principles of transparency, legitimate purpose, and proportionality under the Data Privacy Act.
How We Share Your Personal Information
We may share your personal information with third parties, including:
A. Government agencies, such as the Bureau of Internal Revenue (BIR), and other regulatory bodies.
B. Airlines, Hotels, Tour operators, Embassies, Insurance companies, and other partner service providers who fulfill your travel reservations.
C. We may share your information with third-party vendors who perform services such as payment processing, analytics, customer support, or marketing on our behalf. They are only authorized to use your data as needed to fulfill these functions and are not permitted to use it for any other purpose without KATTSI’s consent.
D. Legal, accounting, and audit professionals who require access to the data for legal or audit purposes
E. External partners who provide services for purposes of risk management, fraud detection, and prevention.
We ensure that these third parties comply with the Data Privacy Act and process personal information with the same degree of care and diligence that we apply.
How We Protect Your Personal Information
If you leave a comment, the comment and its metadata are retained KATTSI takes appropriate security measures to protect your personal information from loss, and unauthorized access or disclosure. We implement a wide range of organizational, physical, and technical security measures to protect your personal data, including:
A. Secure and encrypted data transmission
B. Limited access to personal data on a need-to-know basis
C. Regular audits, risk assessments, and reviews of data privacy and cybersecurity protocols
D. Staff training and confidentiality agreements
E. Strict adherence to data retention and disposal policies
Data Retention and Disposal
KATTSI shall retain your personal information only for as long as necessary to fulfill the purposes for which it was collected. Specifically:
A. Stored information is archived in accordance with the ICT Policy of KATTSI which determines when information should be retained or disposed. When the data is no longer necessary for the declared and legitimate purposes, personal information shall be securely disposed of or anonymized in a manner that will prevent further processing, unauthorized access, or disclosure.
B. Upon request, information will be destroyed unless applicable law requires destruction after the expiration of an applicable retention period. The manner of destruction shall be appropriate to preserve and ensure the confidentiality of your information given the level of sensitivity and value.
C. Personal information may be stored as hard/printed copies, as electronic data, in KATTSI’s Management Information System and other application systems in network or its designated repositories.
D. Disposal methods may include secure deletion, shredding of physical documents, or anonymization of digital records, in accordance with the standards set by the National Privacy Commission (NPC).
Your Rights Under The Data Privacy Act
As a data subject, you have the following rights under the Data Privacy Act:
A. Right to be informed about how your personal data is collected, processed, and used.
B. Right to access the personal information we hold about you.
C. Right to object to the processing of your personal data, including for direct marketing purposes.
D. Right to correct any inaccurate, outdated, or incomplete data.
E. Right to erasure or blocking of your data if it is no longer necessary for the purpose for which it was collected.
F. Right to data portability, which allows you to obtain and reuse your personal data for your own purposes.
G. Right to damages if you suffer damage due to the unlawful processing of your personal data.
H. Right to file a complaint for any breach of Data Protection as required by the Data Privacy Act.
How To Exercise Your Rights
Subject to applicable laws, data privacy regulations, and payment of reasonable administrative fees, you are entitled to the following rights regarding your personal data provided to us. Where applicable you may be allowed the following (provided it is legal to do so):
A. The Right to be Informed and to Access Your Personal Data, including:
i. The sources from which your data was collected (e.g., online forms, email, third-party platforms);/
ii. How your personal data is processed (e.g., for flight bookings, visa applications, hotel reservations, insurance);
iii. The purpose and details of any sharing or disclosure to third-party partners such as airlines, embassies, hotels, or insurance providers, including their names and contact details;
iv. Information on automated decision-making, if applicable, that may significantly affect you (e.g., travel eligibility scoring or marketing segmentation);
v. The date your personal data was last accessed and updated within our system.
B. The Right to Rectification, allowing you to correct or update any inaccurate or outdated personal data we maintain.
C. The Right to Data Portability, which enables you to obtain a copy of your personal data in a commonly used electronic format for your further use.
D. The Right to Object, including:
i. Withdrawing your consent from activities such as direct marketing, promotional messages, profiling, or cross-selling;
ii. Requesting the blocking, removal, or destruction of your personal data from our records, provided such action is not required by law or essential for the fulfillment of any ongoing travel services.
iii. The Right to File a Complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.
iv. The Right to Claim Damages arising from unlawful or unauthorized use, access, or processing of your personal data.
For more information about your data privacy rights, you may visit the National Privacy Commission’s website at www.privacy.gov.ph.
How To Contact Us
If you have any concerns or inquiries regarding this Data Privacy Notice or how we handle your personal information, you may contact our Data Protection Officer through the contact details provided below.
Data Protection Officer (DPO)
📧 dpo.kingacestravel@gmail.com
🏢 3rd Floor Col. Godofredo M Juliano Building, Lot 13 Blk 86 Bayani Road AFPOVAI Western Bicutan, Taguig City, Philippines
📞Tel. No: (02) 8843-2234
We will respond to your request in accordance with applicable laws and within the timeframes
provided under the Data Privacy Act.
Amendment Notice
We may amend this Data Privacy Notice from time to time. Any changes will be posted on our website and communicated through appropriate channels.
Effectivity
This Privacy Notice took effect upon the approval and signature of the KATTSI President on September 5, 2025.
Data Privacy Compliance Statement
We, at KING ACES TRAVEL AND TOURS SERVICE, INC., care about the privacy and security of your personal data. Thus, we are implementing fair information practices as part of our commitment to product and service quality that goes beyond your expectations.
This Data Privacy Notice carefully explains: a) what and why personal data may be collected from you; b) why we process your personal data and who has access to the same; c) how we protect and safeguard the personal data we collect, process, disclose and dispose; and d) what privacy rights you have and how you can exercise them as mandated by Republic Act No. 10173, also known as The Data Privacy Act of 2012, its Implementing Rules and Regulations, and other related issuances from the National Privacy Commission (NPC).
This Notice covers both our online and offline data collection activities, including personal information that we collect and process through our various channels such as, but not limited to, websites, social networking sites, telephone conversations, members engagement services, and events, and other similar activities. This Notice likewise outlines the general practice of the Company in relation to our processes and contents which are made available through the foregoing networks. It also includes the privacy practices for our members who apply for and obtain products and services from us.
For any comments or queries, or if you want to report what you reasonably believe is a compromise to the security and privacy of your personal data, or you wish to exercise any of your rights, you may reach our Data Protection Officer at:
Data Protection Officer (DPO)
🏢3rd Floor Col. Godofredo M Juliano Building, Lot 13 Blk 86 Bayani Road AFPOVAI Western Bicutan, Taguig City, Philippines
📧Email: dpo.kingacestravel@gmail.com
📞Tel. No: (02) 8843-2234
ADOPTED this 05 day of September, 2025.
King Aces Travel and Tours is duly registered with the National Privacy Commission (NPC) in full compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012. This law upholds the fundamental right to privacy while ensuring the free flow of information to promote innovation and growth.
To demonstrate our commitment and compliance, please click the links below to view our official documents:
NPC Seal of Registration (PDF)
Certificate of Registration (PDF)
Approved Data Privacy Notice (PDF)
