Last updated: 12 August 2026 · Operated by Lalaguna Holdings Inc.
The short version
Written plainly, because you should not have to read a legal document to know what we do.
- We never sell your personal information, and we do not pass it to data brokers.
- None of this is required to browse or to book. You can decline every optional cookie and the site, the enquiry forms and the booking engine all work exactly as normal.
- Most of what we collect is counting. Which pages people look at, and which advert or search brought them here, so we can tell whether our marketing is worth what we spend on it. That is measurement, not a profile of you.
- We do run a Facebook advertising tag. If you use Facebook or Instagram, Meta may use the fact that you visited us to show you our adverts later. That is the one thing here that reaches beyond our own site, so we would rather point at it than bury it. You can refuse it in our cookie settings, and you can also control it in your own Facebook ad preferences.
- You can ask us what we hold about you and ask us to delete it, at any time and free of charge. Section 8 explains how, and Matthew Shannon will handle it.
Everything below sets the same thing out in full, for completeness and for regulators. You do not need to read it to understand what we do.
1. Who we are
This website, lalagunavillas.com, is operated by Lalaguna Holdings Inc. ("Lalaguna Villas", "we", "us"), which runs Lalaguna Villas Luxury Dive Resort & Spa at Small Lalaguna Beach, Sabang, Puerto Galera, Oriental Mindoro, Philippines.
We are the data controller for the personal information described in this policy. For any privacy question, or to exercise the rights set out in section 8, contact us at info@lalagunavillas.com.ph or on +63 917 570 3415.
Our data protection contact is Matthew Shannon, who can be reached at matthews@lalagunavillas.com.ph. Please direct any question about how we handle your personal information, or any request to exercise the rights described in section 8, to him.
2. Information you give us directly
Enquiry and contact forms. When you send an enquiry through the website we collect your name, email address, and where you provide them your phone number, the subject of your enquiry, your diving certification level, your preferred dates, and the content of your message. This is sent to our reservations or dive training team by email so we can reply. It is not published anywhere on the website.
Newsletter sign-up. If you subscribe to our updates we collect your name and email address. These are stored on this website and also emailed to our team. You can unsubscribe at any time by contacting us.
Careers. If you apply for a role you may send us a CV and related details by email to hr@lalagunavillas.com.ph. We use this only to consider your application.
3. Bookings
Room bookings are not taken on this website. When you click to book you are taken to a secure booking engine operated on our behalf by Profitroom. The information you enter there, including your name, contact details, stay dates, guest details and payment information, is collected through that system so that we can take and manage your reservation.
We receive and hold the reservation details that result. Payment card details are handled by the booking and payment providers, not by this website, and we do not store full card numbers. Profitroom processes this information on our behalf and under our instructions, and publishes its own privacy notice covering the booking engine.
4. Information collected automatically
Like most websites, we and our service providers collect some information automatically when you visit, including your IP address, browser and device type, the pages you view, how you arrived at the site, and the approximate region you are browsing from. This is used to keep the site secure, to understand how it is used, and to measure our advertising.
Cookies and similar technologies
Cookies are small files stored on your device. We use them in the following ways.
- Strictly necessary. Required for the website and booking engine to work, and to keep them secure. These cannot be switched off.
- Analytics. Help us understand which pages are useful and where visitors run into difficulty.
- Marketing. Let us measure whether our advertising works and show relevant advertising to people who have visited us.
The third party services we use on this website are:
- Google Tag Manager, Google Analytics and Google Ads (Google) — website analytics and advertising measurement, including recording when a booking follows an advertisement.
- Meta Pixel (Meta Platforms) — advertising measurement for Facebook and Instagram.
- HubSpot — our live chat widget, enquiry forms and related visit analytics.
- Profitroom — the booking widget on our site and the booking engine itself.
- Trustindex — displays our Tripadvisor reviews.
- Spotlight — displays our Instagram feed.
- YouTube (Google) — video, on pages where video is embedded.
- Google Fonts — website typography.
- TrustedSite — site trust and security certification.
- Wordfence — website security and protection against attacks.
You can control cookies through your browser settings, and you can withdraw consent at any time. Blocking some cookies may affect how parts of the site work.
5. How we use your information, and our legal basis
- To answer your enquiries and provide the services you ask for. Basis: taking steps at your request before entering a contract, and performing that contract.
- To take, manage and honour your booking. Basis: performance of our contract with you.
- To send you updates and offers where you have asked for them. Basis: your consent, which you can withdraw at any time.
- To measure and improve our website and advertising. Basis: your consent for analytics and marketing cookies, where consent is required.
- To keep the website and our guests safe, and to meet our legal and accounting obligations. Basis: our legitimate interests in securing our systems, and compliance with legal obligations.
6. Who we share it with
We do not sell your personal information. We share it only with organisations that help us run the resort and this website, including our booking engine provider, our email, hosting and security providers, our analytics and advertising providers, and our payment providers. Each is required to protect your information and to use it only for the purposes we specify.
We may also disclose information where the law requires it, or to establish or defend legal claims.
7. International transfers
We are based in the Philippines. If you are visiting us from the United Kingdom, the European Economic Area or elsewhere, your information will be transferred to and processed in the Philippines, and by the service providers listed in section 4, who may store data in other countries.
We require those providers to protect your information and to use it only for the purposes we specify. If you would like details of the arrangements that apply to a transfer of your information, please contact us using the details in section 1 and we will provide them.
8. Your rights
Under the Philippine Data Privacy Act of 2012, and under the UK and EU General Data Protection Regulation where it applies to you, you have the right to:
- be informed about how your information is used;
- ask for a copy of the information we hold about you;
- have inaccurate information corrected;
- ask us to erase your information, or to restrict or object to how we use it;
- ask us to transfer your information to another organisation;
- withdraw your consent at any time, including for marketing;
- lodge a complaint with a regulator.
To exercise any of these, email info@lalagunavillas.com.ph. We will respond within the period required by law.
If you are not satisfied, you may complain to the National Privacy Commission of the Philippines (privacy.gov.ph). If you are in the United Kingdom you may complain to the Information Commissioner's Office (ico.org.uk), and if you are in the European Economic Area, to your local supervisory authority.
9. How long we keep it
We keep your personal information only for as long as is necessary to provide the services you have asked for, and to meet our legal, tax and accounting obligations. Once it is no longer needed for either purpose, we delete or anonymise it.
In practice this means enquiry correspondence is kept while we are helping you and for a reasonable period afterwards, reservation and financial records are kept for the period our legal and tax obligations require, and newsletter details are kept until you unsubscribe. Cookie lifetimes are set by the providers listed in section 4 and typically range from a single browsing session to around two years.
10. Security
The website is served over an encrypted connection, is protected by a security firewall and malware scanning, and is backed up regularly. No system can be guaranteed completely secure, but we take reasonable steps to protect your information and to restrict access to those who need it.
11. Children
This website is intended for adults. We do not knowingly collect personal information from children through the website. Where children are included in a booking or a junior diving programme, their details are provided by a parent or guardian.
12. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed, and material changes will be highlighted on this page.