Privacy Policy

Last Updated: 29 June 2026

1. Introduction

Welcome to Cebu Air Travel & Tours Pte Ltd ("CebuAirTravel", "we", "our", or "us").

We operate the website www.cebuairtravel.com (the "Website"), an online platform where customers can browse, purchase, and receive tickets, activities, attractions, tours, travel experiences, vouchers, and promotional deals offered by us and our merchant partners.

We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, retain, and protect your personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA) and other applicable laws.

By accessing or using our Website or services, you acknowledge that you have read and understood this Privacy Policy.

2. Scope

This Privacy Policy applies to:

Visitors to our Website;
Customers purchasing products or services through our Website;
Individuals who contact us for enquiries or support;
Subscribers to our newsletters and promotional communications;
Users who create an account with us.

3. Personal Data We Collect

Depending on how you interact with us, we may collect the following personal data.

Identity Information

Full name
Date of birth (where required)
Nationality (where required by activity providers)
Identification document details where legally required

Contact Information

Email address
Mobile number
Billing address
Country of residence

Booking Information

Booking details
Travel dates
Number of participants
Special requests
Emergency contact information (where applicable)

Payment Information

Payments are processed through secure third-party payment providers.

We do not store your complete credit or debit card information on our servers.

We may receive limited payment information such as:

Transaction ID
Payment status
Payment method
Last four digits of your payment card (where provided by the payment processor)

Account Information

If you create an account, we may collect:

Username
Encrypted password
Saved preferences
Booking history
Wishlist or favourites (if applicable)

Communications

When you contact us, we may collect:

Emails
Chat conversations
Customer support records
Feedback
Reviews

Technical Information

When you browse our Website, we may automatically collect:

IP address
Browser type
Device type
Operating system
Referring website
Pages viewed
Time spent on pages
Clickstream data
Cookie identifiers

4. How We Collect Your Personal Data

We collect personal data when you:

Create an account;
Purchase tickets or services;
Subscribe to our newsletter;
Contact our customer support;
Participate in surveys or promotions;
Leave reviews;
Browse our Website;
Use cookies or analytics technologies.

We may also receive personal data from:

Activity providers;
Tour operators;
Payment providers;
Marketing partners;
Fraud prevention services.

5. Purposes for Collecting Personal Data

We collect and use your personal data to:

Process bookings;
Issue digital tickets and vouchers;
Confirm purchases;
Process payments;
Provide customer support;
Respond to enquiries;
Verify your identity where necessary;
Detect and prevent fraud;
Improve our Website and services;
Conduct analytics and reporting;
Personalise your experience;
Send booking reminders;
Notify you of schedule changes;
Send service-related communications;
Send promotional communications where you have provided consent;
Comply with legal and regulatory obligations.

6. Marketing Communications

With your consent, we may send you:

Promotional offers;
Exclusive discounts;
New attractions;
Holiday promotions;
Travel inspiration;
Newsletters.

You may unsubscribe at any time by:

Clicking the unsubscribe link in our emails; or
Contacting us directly.

Withdrawal of consent will not affect communications relating to your bookings or legal obligations.

7. Disclosure of Personal Data

We do not sell your personal data.

We may disclose your personal data to:

Activity operators;
Tour providers;
Attraction operators;
Hotel partners (where applicable);
Payment gateway providers;
IT service providers;
Cloud hosting providers;
Email service providers;
Customer support platforms;
Marketing service providers;
Analytics providers;
Professional advisers;
Auditors;
Government authorities where required by law.

We only disclose information that is reasonably necessary for the intended purpose.

8. International Transfer of Personal Data

As we work with travel operators and service providers in various countries, your personal data may be transferred outside Singapore.

Where such transfers occur, we will take reasonable steps to ensure that overseas recipients provide a level of protection comparable to that required under the Singapore Personal Data Protection Act.

9. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies to:

Remember your preferences;
Keep you logged in;
Improve Website functionality;
Analyse Website traffic;
Measure advertising effectiveness;
Personalise content.

We may use services such as:

Google Analytics
Google Ads
Meta Pixel
Microsoft Clarity
Other analytics or advertising platforms

You may disable cookies through your browser settings. However, some Website features may not function correctly if cookies are disabled.

10. Protection of Personal Data

We implement reasonable administrative, physical, and technical safeguards to protect your personal data against:

Unauthorized access;
Unauthorized collection;
Unauthorized use;
Unauthorized disclosure;
Copying;
Modification;
Disposal;
Loss;
Misuse.

These measures include:

SSL/TLS encryption;
Secure hosting infrastructure;
Access controls;
Password protection;
Regular software updates;
Monitoring for security threats.

While we strive to protect your information, no method of electronic transmission or storage is completely secure.

11. Accuracy of Personal Data

We rely on the personal data you provide to process bookings accurately.

Please ensure that all information submitted is complete and accurate, and notify us promptly of any changes.

12. Retention of Personal Data

We retain personal data only for as long as necessary to:

Fulfil the purposes for which it was collected;
Provide customer support;
Meet accounting requirements;
Comply with legal obligations;
Resolve disputes;
Enforce our agreements.

When personal data is no longer required, it will be securely deleted, destroyed, or anonymised.

13. Access and Correction

Subject to applicable law, you may request:

Access to your personal data;
Information on how your personal data has been used or disclosed;
Correction of inaccurate or incomplete personal data.

We may require verification of your identity before processing your request.

Where permitted by law, a reasonable administrative fee may apply for access requests.

14. Withdrawal of Consent

You may withdraw your consent for our collection, use, or disclosure of your personal data at any time by contacting our Data Protection Officer.

Please note that withdrawing consent may affect our ability to:

Process bookings;
Provide customer support;
Maintain your account;
Deliver services you have requested.

Withdrawal of consent does not affect any processing already carried out before the withdrawal.

15. Third-Party Websites

Our Website may contain links to third-party websites.

We are not responsible for the privacy practices or content of those websites. We encourage you to review their respective privacy policies before providing any personal data.

16. Children's Privacy

Our Website is not directed to children under the age of 13.

We do not knowingly collect personal data from children without appropriate parental or legal guardian consent.

If you believe that a child has provided us with personal data without appropriate consent, please contact us so that we can take appropriate action.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technology.

Any changes will be posted on this page together with the revised "Last Updated" date.

Your continued use of our Website after any changes constitutes your acceptance of the updated Privacy Policy.

18. Contact Us

If you have any questions about this Privacy Policy or our handling of your personal data, or if you wish to make a request to access, correct, or withdraw consent for the use of your personal data, please contact us:

Cebu Air Travel & Tours Pte Ltd
Trading Name: CebuAirTravel

Website: ntuc.cebuairtravel.com

Customer Support Email: cebuairtravel@yahoo.com

Data Protection Officer (DPO)

Email: cebuairtravel@yahoo.com

We will respond to your enquiry or request within a reasonable timeframe in accordance with applicable laws and regulations.

19. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of Singapore.

Nothing in this Privacy Policy limits any rights that you may have under the Singapore Personal Data Protection Act 2012 or any other applicable law.