Privacy Policy

Last updated: October 4, 2026

We collect only the details we need to answer your questions, reserve a plot and look after your account. This page explains what we collect, why, who sees it, and the choices you have under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

Who we are

This website is run by [Registered company name] (“Golden Harmonic”, “we”, “us”), the owner of Golden Harmonic Memorial Park in Taytay, Palawan. We are the personal information controller for the information described here.

Address: [Registered business address]
Email: [Contact email]
Phone: [Contact phone number]

Our Data Protection Officer is [Data Protection Officer name], reachable at [DPO email].

What we collect

What we collect depends on how you use the site.

When you request the price list: your first and last name, email address, mobile number, the plot you are interested in, and whether you are planning ahead or at need.
When you create an account or sign in: your name, email address and a password. Passwords are handled by our sign-in provider and we cannot read them.
When you place an order or reserve a plot: the plot and quantity you chose, the payment plan and term, your contact details, the payment method you picked (bank transfer, GCash or cash) and the payment reference number or receipt you give us.
Documents you choose to send us: for example proof of eligibility for the Valor Plot, or papers needed to prepare a contract.
Messages: anything you write to us by form, email, phone or social media.
Basic technical data: your browser type, device and the pages requested, which our hosting provider records in standard server logs.

We do not collect debit or credit card numbers through this website. We do not currently use advertising trackers.

Why we use your information

We use your information to:

send you the price list and answer your questions;
process orders, reservations, payment plans and receipts;
prepare contracts and look after your plot and account over time;
contact you about your request, your payments or your reservation;
keep the website secure and working properly; and
meet our legal, tax and regulatory obligations.

We rely on your consent (for example when you submit a form), on performing a contract with you or taking steps you ask for before one, on our legal obligations, and on our legitimate interests in running a secure and well-managed memorial park. We do not use your information to make decisions about you by automated means, and we do not sell it.

Who we share it with

We share information only with people who need it to help you:

Our staff, limited to what their work requires.
Service providers that run parts of the website for us: Google Firebase (database and sign-in), Vercel (website hosting) and EmailJS (confirmation emails).
Payment channels you choose, such as your bank or GCash, when we confirm a payment.
Government agencies, courts or regulators when the law requires it.

Some of these providers store data on servers outside the Philippines. We use providers that apply their own security safeguards, and we share only what is needed for the service.

How we protect it and how long we keep it

We use sign-in controls, access limits for staff, and encrypted connections (HTTPS). No system is perfectly secure, but we work to protect your information and will notify you and the National Privacy Commission of a serious breach as the law requires.

We keep price-list requests for up to [2 years] after our last contact unless you ask us to delete them sooner. We keep customer and contract records for as long as your contract lasts and for the period the law requires after that. When we no longer need information, we delete or anonymise it.

Your rights

Under the Data Privacy Act you have the right to:

be informed about how your information is used;
access the personal information we hold about you;
object to certain uses, or withdraw your consent;
correct information that is wrong or out of date;
ask us to suspend, remove or destroy your information, in the cases the law allows;
receive a copy of your information in a commonly used format; and
claim compensation if you suffered damage from the unlawful use of your information.

To use any of these rights, write to our Data Protection Officer using the details above. We will reply within a reasonable time. If you are not satisfied with our answer, you may file a complaint with the National Privacy Commission.

Cookies and your device

The website stores small pieces of data in your browser so it can work: for example to keep your cart and to keep you signed in. You can clear this data in your browser settings, but your cart and sign-in will reset. If we add analytics or advertising tools later, we will update this page first.

Children

This website is for adults aged 18 and over. We do not knowingly collect information from children. If you believe a child has sent us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If we make a significant change, we will say so on the website.

Contact us

Questions about this policy or your information? Contact [Data Protection Officer name] at [DPO email], or write to us at [Registered business address].