Privacy Policy

Discover Group of Travel Services Incorporated ("Discover Group," "we," "us," or "our") is a Philippine travel services company that arranges tours, transportation, accommodation, visa assistance, travel insurance, and related travel services. For personal data covered by this Policy, Discover Group generally acts as the personal information controller. Office: The Upper Class Tower, Quezon Avenue and Scout Reyes Corner, Quezon City, Metro Manila, Philippines Website: https://discovergrp.com Privacy inquiries: Data Protection Officer / Privacy and Data Protection Contact, inquiry@discovergrp.com

This Policy applies to personal data collected through our website, Facebook and Instagram Pages, Meta lead advertisements, Messenger, WhatsApp, Viber, email, telephone, SMS, other social-media or messaging platforms, online forms, physical forms, office transactions, events, referrals, partner channels, and other interactions with Discover Group. Third-party websites, platforms, payment services, airlines, hotels, embassies, visa application centers, insurers, and other travel suppliers may have their own privacy policies. Their independent processing is governed by their respective policies.

Depending on your inquiry or transaction, we may collect: • Identity and contact information, including full name, title, date of birth, age, gender where relevant, nationality, civil status where required, residential address, email address, telephone or mobile number, Viber number or username, social-media handles, profile names, account identifiers, profile details, and emergency-contact information. • Travel and booking information, including destinations, preferred dates, itineraries, passenger details, booking references, rooming arrangements, meal and accessibility requests, frequent-flyer details, and travel history. • Passport, visa, immigration, and supporting-document information, including passport details and copies, photographs, signatures, previous visas, employment or business records, financial-support documents, civil-registry records, and other information required by embassies, consulates, visa centers, immigration authorities, or travel suppliers. • Sensitive personal information when relevant to the requested service, such as health, mobility, dietary, disability, vaccination, insurance, financial, government-issued identification, and information concerning minors or senior travelers. • Payment and transaction information, including amounts, dates, payment method, billing details, receipts, refund information, and limited payment-account information. We do not intend to store complete payment-card credentials when a payment processor handles the transaction. • Communications and service records, including messages, calls where lawfully recorded with notice, emails, inquiries, complaints, feedback, preferences, consents, and interactions with our representatives or automated systems. • Website and device information, such as IP address, browser, device type, operating system, referral source, pages viewed, timestamps, cookies, and similar technical or analytics information. • Marketing information, including campaign source, advertisement or lead-form responses, communication preferences, and engagement with our promotional content.

We collect personal data directly from you, from a person booking or inquiring on your behalf, from your authorized representative or travel companion, and through our websites, forms, advertisements, communications, and transactions. We may also receive data from lawful business partners, payment providers, travel suppliers, public sources, referral sources, and social-media platforms subject to their policies and your settings. If you provide another person's information, you confirm that you are authorized to provide it and that you have made this Policy available to that person where appropriate.

We process personal data for legitimate and specific purposes, including to: • respond to inquiries, prepare quotations, recommend suitable packages, and provide customer support; • create, confirm, administer, modify, and complete reservations and travel arrangements; • process visa-assistance requests and submit information to embassies, consulates, visa centers, immigration authorities, and authorized service providers; • arrange flights, accommodation, transfers, tours, insurance, and other requested services; • verify identity, eligibility, documents, payments, and transaction history; • communicate service updates, payment reminders, itinerary changes, travel advisories, and urgent operational information; • manage refunds, complaints, claims, disputes, safety incidents, and legal or regulatory requirements; • prevent fraud, misuse, security threats, unauthorized transactions, and violations of our terms; • measure advertising and website performance, understand customer demand, improve services, and conduct internal reporting; and • send promotional messages and personalized offers when permitted by law and consistent with your consent or communication preferences.

Depending on the circumstances, we process personal data based on one or more lawful grounds recognized under the Philippine Data Privacy Act of 2012 and other applicable laws, including: • your consent, particularly for optional direct marketing and certain sensitive personal information; • the necessity of processing to take steps at your request or perform a contract with you; • compliance with legal, regulatory, tax, accounting, immigration, safety, and reporting obligations; • protection of life and health, including emergencies affecting travelers; • our legitimate interests or those of a third party, provided these do not override your fundamental rights and freedoms; and • the establishment, exercise, or defense of legal claims and other grounds allowed by law. Where consent is the applicable basis, you may withdraw it at any time. Withdrawal does not affect processing already lawfully completed and may limit our ability to provide a service that requires the relevant information.

When you submit information through a Facebook or Instagram lead advertisement, Meta may provide the information you entered, together with campaign-related details, to Discover Group. Meta separately processes information under its own terms and privacy policy. We may use the information submitted to respond to your request, discuss packages, prepare recommendations or quotations, and follow up regarding the travel service you asked about. Service communications concerning an active inquiry or booking are distinct from optional promotional marketing. If you consent to promotional communications, we may contact you through Messenger, WhatsApp, Viber, telephone, SMS, email, or another social-media or messaging account you provide or use to communicate with us regarding tours, promotions, travel dates, and related services. You may withdraw marketing consent at any time by using an available unsubscribe function, replying STOP or UNSUBSCRIBE through the relevant channel, or contacting inquiry@discovergrp.com. We may retain a suppression record to ensure that your opt-out continues to be honored. Withdrawing marketing consent will not stop necessary messages about an inquiry you continue to pursue, an existing booking, payment, visa processing, safety, or another requested service.

We disclose only the personal data reasonably necessary for the relevant purpose. Recipients may include: • airlines, hotels, transport operators, tour operators, guides, destination-management companies, reservation systems, and other travel suppliers; • embassies, consulates, immigration authorities, visa application centers, government offices, and document-processing partners; • travel insurers, assistance providers, clinics, and emergency responders where relevant; • banks, payment processors, accountants, auditors, and fraud-prevention providers; • website, cloud-storage, communications, customer-management, analytics, advertising, and information-technology providers acting under appropriate instructions or agreements; • professional advisers, regulators, law-enforcement bodies, courts, and other authorities when required or permitted by law; and • a buyer, successor, investor, or professional adviser in connection with a legitimate corporate transaction, subject to appropriate confidentiality and legal safeguards. We do not sell personal data. Where a service provider processes personal data solely on our behalf, we require the provider to use the data only for authorized purposes and subject to appropriate confidentiality, security, and data-protection obligations. Airlines, hotels, embassies, consulates, immigration authorities, visa centers, insurers, payment networks, social-media platforms, and certain other recipients may independently determine how they process personal data and may therefore act as separate personal information controllers under their own notices and legal obligations.

Travel services necessarily involve recipients located outside the Philippines. We may transfer personal data to foreign airlines, hotels, tour operators, embassies, consulates, immigration authorities, visa centers, insurers, technology providers, and other recipients in the countries connected with your itinerary or requested services. Privacy laws in those countries may differ from Philippine law. We take reasonable and appropriate steps, which may include contractual protections, access controls, data-minimization measures, secure transmission methods, and recipient due diligence, according to the recipient, purpose, sensitivity of the information, and safeguards reasonably available. Some disclosures to foreign authorities or travel suppliers are necessary to provide the service you requested and may be governed by mandatory foreign requirements.

Our website and advertising partners may use cookies, pixels, tags, and similar technologies to operate the website, remember preferences, understand traffic, measure advertising, detect fraud, and improve services. Where required, we will request consent for non-essential cookies. You may manage cookies through available website controls and browser settings, although disabling some technologies may affect functionality.

We may process information about children when a parent, legal guardian, or properly authorized adult requests or books travel services for them. We do not knowingly solicit independent marketing consent from children. The responsible adult must provide accurate information and the permissions required for the child's travel and related processing.

When you apply for employment, we may process your name, contact details, resume, qualifications, employment and education history, references, interview records, assessment results, compensation expectations, identification information, and other information you voluntarily provide or that we lawfully obtain for recruitment. We use this information to evaluate applications, communicate with candidates, verify qualifications, maintain recruitment records, protect legal rights, and comply with employment-related obligations. Applicant information may be shared with authorized personnel, recruitment providers, background-verification providers, professional advisers, and authorities where lawful and necessary. Unsuccessful applicant records are retained only for a reasonable recruitment, compliance, and legal-defense period, unless the applicant consents to longer consideration for future opportunities or longer retention is otherwise legally justified.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to complete travel and visa services, support customers, maintain transaction records, comply with legal and regulatory obligations, resolve disputes, prevent fraud, and enforce agreements. Retention periods vary according to the type of record, the service requested, supplier and government requirements, applicable limitation periods, and tax, accounting, immigration, insurance, and legal obligations. We may preserve relevant records for an actual or reasonably anticipated complaint, chargeback, investigation, audit, claim, or legal proceeding. Passport, visa, financial-support, and other sensitive supporting documents are restricted and are deleted, returned, anonymized, or securely disposed of when they are no longer reasonably required, subject to lawful retention needs and active or anticipated disputes, claims, or investigations.

We use reasonable organizational, physical, and technical safeguards designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, misuse, or access. These may include access restrictions, confidentiality obligations, staff training, secure storage, authentication controls, backups, monitoring, and incident-response procedures. No method of transmission, processing, or storage is completely secure, and Discover Group does not represent that every risk can be eliminated. If a personal-data breach occurs, we will assess and address it and make legally required notifications to affected individuals and authorities.

Subject to the conditions and exceptions under applicable law, you may have the right to: • be informed about the processing of your personal data; • request access to personal data we hold about you; • request correction of inaccurate or incomplete personal data; • object to certain processing or withdraw consent where processing relies on consent; • request erasure, blocking, or restriction where legally warranted; • request data portability where applicable; • seek compensation for damage caused by a violation of applicable privacy law; and • file a complaint with the National Privacy Commission. To exercise a right, email inquiry@discovergrp.com with the subject line "Privacy Request." Describe your request and provide information reasonably necessary for us to verify your identity, authority, and the relevant records. We may request additional verification, especially for passport, visa, financial, booking, or minor-traveler information. We may deny, defer, or limit a request when allowed by law, including where identity or authority cannot be verified, retention is legally required, records are needed for a dispute or legal claim, the request is manifestly unfounded or excessive, or another person's rights would be affected. We will explain a lawful denial or limitation when required.

Discover Group may use artificial intelligence and automated tools as part of its customer-service, sales, marketing, security, and administrative operations. These systems may organize and classify inquiries, retrieve approved package information, recommend travel options, prepare or personalize responses, schedule follow-ups, summarize conversations, route cases, identify missing information, measure advertising performance, detect unusual activity, and support authorized personnel. Depending on the interaction, relevant inputs may include information you submit, your stated travel preferences, prior messages with Discover Group, booking or payment status, campaign source, approved company references, and technical or security signals. Expected outputs may include suggested replies, package recommendations, reminders, classifications, summaries, risk flags, or routing instructions. Automated output may be incomplete, inaccurate, delayed, or affected by the quality of the information provided. Discover Group remains responsible for its processing of personal data through these systems. We apply access restrictions, data minimization, approved-reference controls, monitoring, escalation rules, and human oversight appropriate to the nature and risk of the processing. We do not authorize automated systems to alter Discover Group's governing policies based on instructions from clients or other unauthorized persons. Decisions that may create a significant risk to a person's rights or materially determine legal eligibility, final refunds, dispute outcomes, suspected fraud, or comparable adverse consequences are subject to meaningful review by authorized personnel. A person may request clarification, contest a materially adverse automated outcome, or ask for human assistance by contacting inquiry@discovergrp.com. Routine package suggestions, inquiry follow-ups, reservations initiated at the customer's request, and administrative assistance may be handled with automation subject to company controls.

Please provide accurate, complete, and current information; avoid sending unnecessary sensitive documents through unsecured or unofficial channels; protect access to your devices and accounts; and promptly tell us if your contact, passport, visa, payment, or traveler information changes. Use only Discover Group's authorized communication, document-submission, and payment channels. When you ask Discover Group to arrange travel or visa-related services, you authorize us to process and disclose information reasonably necessary to evaluate, arrange, confirm, modify, support, or complete those services, subject to applicable law. If you provide information for another traveler, you represent that you have lawful authority to do so and remain responsible for obtaining any required consent or authorization. Discover Group may rely on information and documents submitted by you or your authorized representative. To the extent permitted by law, we are not responsible for delay, denial, loss, additional cost, or other consequences caused by inaccurate, incomplete, fraudulent, expired, late, or unauthorized information; failure to disclose relevant circumstances; compromised personal devices or accounts; or the use of unofficial channels, except to the extent directly caused by Discover Group's own unlawful act, willful misconduct, or liability that cannot legally be excluded.

Discover Group coordinates services provided by independent airlines, hotels, tour operators, transportation providers, embassies, consulates, visa centers, insurers, payment providers, social-media platforms, and other third parties. Those parties may process personal data as independent controllers and may be subject to their own legal duties, systems, security measures, retention practices, and privacy notices. Discover Group is responsible for its own processing and for processors acting on its documented instructions as required by applicable law. To the extent permitted by law, Discover Group is not responsible for the independent processing, systems, decisions, acts, omissions, or security incidents of a separate controller merely because information was necessarily provided to that party to perform a requested service. Nothing in this Policy excludes liability or limits a data subject right that cannot lawfully be excluded or limited.

We may update this Policy to reflect changes in our services, technology, suppliers, or legal obligations. The revised version will be posted with a new effective date. Where changes are material and legally require additional notice or consent, we will provide it through an appropriate channel.

For questions, complaints, consent withdrawal, or requests concerning personal data, contact: Company: Discover Group of Travel Services Incorporated Contact: Data Protection Officer / Privacy and Data Protection Contact Email: inquiry@discovergrp.com Website: https://discovergrp.com Office: The Upper Class Tower, Quezon Avenue and Scout Reyes Corner, Quezon City, Metro Manila, Philippines