Last updated: 6 November 2026
SouthLeyte.com is a local directory for Southern Leyte. This policy explains what information the website collects, why, who can see it, and the choices you have. We follow the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). If anything here is unclear, email support@southleyte.com.
What we collect
When you browse without an account
Saved places. If you save a place while signed out, the list stays only in your own browser. It is not sent to us.
Preferences. Your browser remembers small settings such as the map page layout. These also stay on your device.
A session cookie. One essential cookie keeps the site secure (for example, protecting forms from misuse). It contains a random code, not your name or email.
Technical information. To stop abuse such as repeated failed sign-ins, the site keeps short-lived counters linked to your internet (IP) address. They delete themselves automatically. Our web server may also keep standard request logs (IP address, page requested and time).
When you create an account
Your name and email address. We use your email to verify your account, reset your password and send messages about your account.
The date you accepted our terms. We record when you agreed to the Terms of Use and this Privacy Policy at sign-up.
Phone number and profile photo, if you add them. Both are optional. Your phone number is stored encrypted and is not shown on the site. Your profile photo is shown next to reviews you write.
Your password. It is stored only as a salted hash, so nobody, including us, can read it.
Two-factor authentication, if you turn it on. The authenticator secret is stored encrypted.
Sign-in sessions. A normal sign-in ends after 30 minutes without activity. If you choose to stay signed in, it lasts up to 30 days and ends sooner if the device is unused for 7 days. You can sign out your other devices from your dashboard.
Saved places you add while signed in, so they appear on all your devices.
When you use the site's features
Business claims and listings: the details you submit, including the proof you give that you manage a business, and changes you make to a listing.
Photos: business photos you upload. Every photo is re-saved by our system, which removes hidden details such as the location where it was taken. Photos are reviewed before they are published.
Reviews and replies: your rating and text. Approved reviews are shown publicly with your account name.
Comments on stories: your comment text. Approved comments are shown publicly with your account name.
Messages between you and a business. Messages are stored encrypted and are shown only to the two people in the conversation.
Bookings: the date and time, quantity, quoted price, status and cancellation terms. The business sees your name. No payment is collected on this website.
Activity records: we record important actions such as sign-ins, approvals, ownership changes and booking changes, with the time and the account involved. These records protect accounts and help us investigate problems.
What we do not do
We do not sell your personal information.
We do not use advertising trackers or third-party analytics on this website.
We do not show your email address to other users or businesses.
How we use your information
To run your account and keep it secure.
To publish business listings, reviews and photos after review.
To let customers and businesses exchange messages and manage bookings.
To review content, prevent spam and abuse, and fix problems.
To send emails about your account and activity, such as verification and password reset messages, booking and claim updates, and new message notices. These emails are delivered by our email provider, Brevo (Sendinblue SAS), which receives your email address, name and the email content only to deliver them.
Who can see your information
Everyone: published business listings, approved photos, approved reviews and approved story comments with the author's account name.
Businesses you contact or book: your name, your messages to them and your booking details.
Site administrators: the account details, submissions and activity records needed to review content, verify business owners and keep the site safe.
Service providers who help us run the website, such as hosting and email delivery, only as needed to provide their service.
Authorities, when the law requires it.
Reports about a business
If you use "Report this listing", we keep your report, your name and your email (and phone, if you give it) so our team can check the report and contact you. Contact details are stored encrypted, are only visible to SouthLeyte administrators, and are not shared with the business you reported.
Maps and outside links
Maps on this website are provided by OpenStreetMap. To show a map, your browser loads map images from OpenStreetMap's servers, which receive your IP address and the address of this website. See the OpenStreetMap Foundation privacy policy. Links to business websites and social media pages take you to sites with their own privacy policies.
Chat assistant
Makisig, the SouthLeyte AI Assistant, is an AI chat helper that answers questions using the directory. Before a chat starts we ask for your name and email address, and optionally a phone number, and we tell you that chats are recorded. With each chat we also record technical details: your IP address, your browser's user agent, the page you started the chat on, the page that sent you there (referrer, if your browser shares it), the last page you chatted from, and your account if you are signed in. Your details, these technical details, your messages and the assistant's replies are stored on our server for up to 30 days, so we can follow up with you if needed, improve the assistant and prevent misuse; our administrators can read them. To write replies, your messages and your first name are sent to our AI provider, OpenAI, which processes them under its privacy policy. Your email address, phone number and the technical details are not sent to OpenAI. Please do not share passwords, ID numbers or bank details in the chat.
How long we keep information
Account information is kept while your account is active.
Expired sign-in sessions and abuse-prevention counters are deleted automatically.
Chat assistant conversations are deleted automatically after 30 days.
When you delete your account, we delete or anonymise your personal information straight away, except records we must keep for security, to resolve disputes, or because the law requires it.
Your rights
Under the Data Privacy Act you have the right to be informed, to access your personal information, to have it corrected, to object to its processing, to have it erased or blocked, and to receive a copy of it. From your dashboard you can change your name, phone number and profile photo, sign out other devices, download a copy of your data, and delete your account. Deleting your account removes your name, email, phone number and photo; reviews, comments and messages you wrote stay on the site under "Deleted user" so other people's records still make sense. For anything else, email support@southleyte.com. You may also file a complaint with the National Privacy Commission.
Security
We protect accounts with hashed passwords, optional two-factor authentication, encrypted messages, strict permission checks and limits on repeated attempts. No online system can be perfectly secure, so please use a strong, unique password and tell us right away if you think your account has been misused.
Young users
Accounts are intended for adults. If you are under 18, please use the website with the permission and guidance of a parent or guardian.
Changes to this policy
We will update this page when the way we handle information changes, and change the date at the top. Important changes will also be shown on the website.
Contact
Questions or requests about your information: support@southleyte.com.