Your privacy at GR8 Escapes

Effective 22 October 2026.

GR8 Escapes Travel & Tours is responsible for the information collected through this website and our Facebook Page’s Messenger planner. Our address is Pangasinan, Manaoag, Philippines, 2430. For privacy questions or requests, email [email protected] or call (075) 505-1167.

Information we collect

• Inquiries: your name, email, optional phone number, destination, dates, traveler count and message.
• Trip planning: your name, selected destination, travel preferences, optional notes, draft answers and a saved preview with a reference and private link.
• Messenger: your Page-specific account identifier, our Page identifier, Facebook profile name, messages and button selections, timestamps, planning progress, messaging preferences and queued replies.
• Website chat: messages and conversation history when that feature is available. History is tied to the browser that created it.
• Privacy and security: policy dates, acceptance times, AI and analytics choices, withdrawal times, verified request records and limited information needed to secure the service. Our hosting and network services may also receive connection information such as your IP address.

When you accept Messenger trip planning, we request your profile name from Meta to label your trip and help our staff assist you. We request only the name, without your profile photo or other profile fields. If Meta cannot provide a name, we ask you for the name you would like us to use. A Facebook profile name is a display name, not verified identity or the name required on travel documents. Contact us through the same Messenger account if a saved name needs correction.

We use planning and inquiry details to respond to your request, recommend published trips and provide staff assistance. Necessary inquiry processing supports steps you request before a possible booking. Proportionate security processing protects the service under our legitimate interests. Optional external AI and analytics require your choice. Acknowledging this notice does not permit unrelated uses.

Please do not submit payment credentials, identity documents, health information or other sensitive personal information in chat or free-text fields.

Your choices

The bottom banner has one Accept and one Reject button. As its text explains, both choices acknowledge this notice and accept our terms. Accept records permission for optional analytics and AI features. Reject keeps both optional purposes off while browsing published trips and staff assistance remain available. Closing the banner records no acceptance.

Click the words “analytics” or “AI features” in the banner to adjust either purpose independently. When an individual choice is open, Accept and Reject update that purpose and leave the other preference unchanged. You can reopen these controls below and withdraw either choice at any time. Previously collected records without a consent record are not treated as accepted.

The website chatbot and guided trip builder require the AI features choice. Rejecting AI keeps them closed; selecting either feature reopens that choice in the bottom bar. Existing saved previews remain readable through their private links. Rejecting analytics alone does not block these features.

In Messenger, the automated trip planner also requires AI permission before starting or continuing. Choose Agree and continue to accept this notice and the terms and permit AI processing. You can choose Talk to the team instead. Send Withdraw AI to pause planning and withdraw permission, or Privacy to review and accept again. Published trips, saved previews and staff assistance remain available.

External AI: DeepSeek

With your current AI permission, we send relevant information to DeepSeek, operated by Hangzhou DeepSeek Artificial Intelligence Co., Ltd., to suggest published trips, answer website chat messages and prepare guidance for our travel staff. This permission also covers staff guidance based on your saved trip. It does not authorize unrelated marketing or other uses by GR8 Escapes.

• Trip suggestions use your selected destination, questionnaire preferences and redacted optional notes, together with our published trip information.
• Staff guidance uses your destination, traveler count, saved answers, redacted notes and relevant itinerary information.
• Website chat uses your current message and relevant earlier chat messages after identifier reduction, together with our published travel information. We do not send the entire Messenger inbox.

We exclude structured traveler names, including Facebook profile names, from trip-suggestion and staff-guidance prompts. We do not include Messenger account identifiers, Meta access tokens, contact fields or private trip references in those requests. We reduce email addresses, telephone numbers and links in free text, and the saved traveler name in planning notes. This does not make free text anonymous: other names, addresses, health details or sensitive information can remain. Please leave those details out and use staff assistance when needed.

DeepSeek is based in China, and its processing may occur outside the Philippines. Its published general privacy policy describes processing and storage in the People’s Republic of China. The applicable API arrangements govern information sent through this service; the general privacy policy does not establish all rules for our customers’ API inputs. See DeepSeek’s API terms, general terms and privacy policy.

DeepSeek’s general terms describe limited use of de-identified inputs and outputs for service improvement. We do not promise zero retention or exclusion from provider model improvement or training. Our local retention periods do not set DeepSeek’s retention period. Contact our privacy inbox for the applicable provider arrangements. If you do not want this transfer, reject AI or choose Talk to the team; published trips, saved previews and staff assistance remain available.

Withdraw AI permission through the website privacy controls or send Withdraw AI in Messenger. This blocks new AI requests and prevents pending AI results from being saved, but cannot recall information already sent. Deleting GR8 Escapes records does not automatically erase information held by DeepSeek. Contact our privacy inbox to request provider-side deletion assistance; we will explain the remaining steps, any lawful retention restriction and the confirmed outcome. AI can make mistakes. Staff must confirm prices, availability and booking details.

Cookies and browser storage

Essential cookies identify the browser that owns your trips and chat and support staff sign-in. The browser ownership cookie lasts 24 hours. These cookies are needed for their functions and remain necessary when optional processing is rejected. Browser storage remembers that you made a choice and may hold a chat identifier; a conversation identifier alone does not authorize access to its history.

Optional analytics: Google Analytics 4

With your current analytics permission, we use Google Analytics 4, provided by Google, to measure visits to published pages, engagement, clicks on our contact options and successfully saved website inquiries. We load the Google tag only after your saved choice permits analytics. Rejecting analytics keeps the tag from loading. Previous permission recorded before this notice does not enable Google Analytics; we ask you to choose again.

Google may receive technical information such as your IP address, browser, device, language and screen size, together with a cookie-based identifier and permitted events. Our page events use public page paths and titles. We remove query strings and fragments, and reduce the initial referring address to its website origin. We do not send inquiry fields, traveler names, email addresses, phone numbers, messages, private trip links, chat content or ownership tokens as analytics event data. CMS, private planning and deletion-status pages are excluded.

The first-party cookies _ga and _ga_F1SB49529P distinguish browsers and sessions. We set their expiry to 90 days; measurement on later visits can refresh that period, and browser limits may shorten it. Withdrawing analytics permission stops further measurement by this tag and clears these cookies on this browser. It does not recall information already sent. We disable Google signals and advertising personalization and do not request advertising storage or use advertising cookies in this integration.

Google may process analytics information outside the Philippines. Analytics records follow the retention and processing settings of our Google Analytics property and Google’s applicable arrangements, rather than the retention rules for our inquiry database. See how Google uses information from partner sites and Google’s privacy policy. Contact our privacy inbox for the current settings or help with a request concerning information already collected.

Who can access information

Authorized travel staff can review inquiries and saved previews for customer assistance. Administrators handle verified privacy requests. Hosting, database, storage, network and email providers process information needed to operate the service. Cloudflare provides our configured network edge, and Meta handles Messenger delivery. Contact-page maps use MapLibre with CARTO/OpenStreetMap resources; those services may receive your IP address when the map loads. Contact us for current hosting, email and processor details.

A private trip link allows anyone who has that link to read its preview. Share it carefully. It does not authorize deletion or access to other trips or conversations.

Retention and deletion

• Inquiries and saved previews: retained indefinitely to assist with future travel planning and repeat bookings, unless you request deletion.
• Messenger conversations: retained indefinitely to maintain continuous customer support history, unless you request deletion. Profile names saved with conversations and trip records follow the same retention and deletion rules as those records.
• Unfinished drafts and inactive website chat: 24 hours.
• Finished processing-job content: seven days.

Inquiries, saved previews and Messenger conversations have no automatic age cutoff. Archived records follow the same rules. You may request deletion at any time. Confirmed requests are processed promptly, and a supervised worker removes expired drafts and finished-job content. Records may also be removed when they no longer serve a necessary, lawful purpose.

Deletion removes the applicable inquiries, drafts, previews, staff guidance, notification records, conversations, processing content and consent records. Shared published trips and media remain. Minimal private request receipts are retained for up to 180 days after completion. Limited non-readable identifiers and messaging preferences help honor Stop, reject old sessions and prevent deleted information from returning through repeated events. Stop remains effective until explicit resumption.

Backups, email copies and information held by Meta or an external provider need separate handling. Contact us for their confirmed expiry and deletion status. Deleted records must be removed again before a restored backup is returned to service.

Your Philippine privacy rights

Under the Philippine Data Privacy Act, you may request information, access, correction, objection, erasure or blocking, applicable portability and withdrawal of optional consent. You may raise concerns with the National Privacy Commission. We verify control of your originating browser, Messenger account or original contact channel before releasing or changing records. A name, trip reference or shared preview link alone is insufficient.

See our data-deletion and privacy-request instructions. We will explain any lawful restriction on a request and update this notice and its effective date when our processing changes.