Privacy Policy — Sunset Cove Beach & Dive Resort
Last updated: 2 October 2026
- Who we are
Sunset Cove Beach & Dive Resort (“we”, “us”) is a sole proprietorship registered in the Philippines to Charolyn Oliwka, Purok 1 San Gabriel, Lamao, Alad Island, Romblon 5500, Philippines. Our diving operations are run under Romblon Fun Divers Co. Ltd., an SDI/TDI 5-Star Dive Resort registered with the Securities and Exchange Commission of the Philippines. Although registered separately, Sunset Cove and Romblon Fun Divers operate as one combined resort and dive operation, and are responsible together for your personal data. Contact: info@sunsetcoveromblon.com, +63 908 653 7589. For visitors in the European Economic Area or the United Kingdom, our EU representative under Article 27 GDPR is Ronny Oliwka, based in Pfungstadt, Germany. You can reach our EU representative, as well as us directly, at info@sunsetcoveromblon.com. This policy covers our guests, divers and website visitors; it does not cover the personal data of our own staff, which we handle separately. - Information we collect
When you make an inquiry or booking we collect your name, email address, phone number, nationality, estimated arrival time, diving experience level, the details of your stay, and the messages you send us. For diving we also ask for your certification and a medical questionnaire. Health information is sensitive personal information: we ask for it only with your explicit consent, use it only to decide whether it is safe for you to dive and to respond to a diving emergency, and share it only with our dive team and, when needed, with doctors or medical services, for example if you answer “yes” to a question and need a doctor’s clearance to dive, or in an emergency. If you take a diving course with us, we also forward the personal details your certification requires — your name, date of birth, and contact details — to SDI/TDI, our certifying agencies, so they can issue your certification card. When you use our guest WiFi, our network records the device name, MAC address, and data volume used, for network security and management purposes. We do not see or store your card number. Card and e-wallet payments are processed by our payment processor. - How we use it
To process bookings and payments, respond to inquiries, send confirmations, provide diving, accommodation and transfer services, keep records that the law requires, and keep our systems secure. We rely on performance of our contract with you (bookings, payments, diving and accommodation services), your consent (health information, marketing emails), and our legitimate interests (keeping our systems secure and preventing fraud) as the legal basis for these uses. If you agree, we may also send you news about the resort. You can opt out at any time using the unsubscribe link in any email we send, or by writing to info@sunsetcoveromblon.com. - Who receives it
Our reservation and property management system. Our payment processor. Our accounting system. Our website hosting provider. If you book through an online travel agency, we receive your booking details from them and share back what’s needed to confirm, modify or cancel your stay. Our diving certification agencies, when you complete a course with us and need a certification card issued. Our ticketing agent, when we book transport tickets on your behalf. Transport companies we subcontract, if you make use of their service, for your transfers to and from the resort. Our WiFi network management app, which stores device name, MAC address and data volume for devices connected to our guest network, processed in Singapore, the United States, Ireland and other countries where that provider operates. The Philippine Coast Guard, for the boat and passenger documentation required for boat trips, and the Department of Tourism, as a DOT-accredited establishment, as required for our accreditation. Doctors, hospitals, recompression chambers and emergency services, if you need medical help or a doctor’s clearance to dive. Authorities, when the law requires it. We do not sell your data. - Storage, security and transfers
Website data is stored on servers hosted by our website host, and booking data in our reservation system. Your data may be processed in the Philippines, Germany (where the resort is partly managed) and other countries where our providers operate, including the United States. Where we transfer your data outside the European Economic Area or the United Kingdom to a country without an EU adequacy decision, we rely on Standard Contractual Clauses or equivalent safeguards offered by our service providers. We use reasonable organizational and technical measures to protect it. Medical questionnaires are currently completed on paper and kept locked in the resort owner’s office. Only the resort owners, the dive guide and the staff member who collects the form can see them. We are introducing a QR-based digital check-in system that lets you complete and sign this information, including the medical questionnaire, electronically through an online provider. When this is in use, we will update this policy with the provider’s name and where your data is stored. - How long we keep it
For as long as needed for your stay and for legal, tax and accounting obligations. Booking and payment records are kept for five years after the end of the tax year they belong to, as tax rules require. Medical questionnaires are kept for 4 years after your last dive with us, so that we can respond to any claim, and are then destroyed securely. WiFi network logs (device name, MAC address, data volume) are kept by our network provider for as long as needed for network security and management, then deleted. Records of your cookie consent choice are kept for up to 1 year, then deleted. - Cookies
Our website uses cookies to improve your browsing experience, to analyse traffic with Google Analytics, and to measure advertising with the Meta Pixel. If you are visiting from Europe or the UK, a cookie banner lets you accept all cookies, reject non-essential ones, or set your own preferences, and these cookies are not set until you make that choice. You can change your choice at any time, and you can also disable cookies in your browser settings. - Your rights
Under the Data Privacy Act of 2012 (Republic Act No. 10173) you may ask to access, correct, block or delete your personal data, object to how we use it, and receive a copy of it. You may also complain to the National Privacy Commission of the Philippines. If you are in the European Economic Area or the United Kingdom, you have further rights under the GDPR, including the right to complain to your local data protection authority. To use your rights, write to info@sunsetcoveromblon.com. We will respond to your request within 30 days. - Children
For guests under 18, we collect their data from a parent or guardian, who gives consent on the child’s behalf, including for the medical questionnaire. - Data breaches
If a data breach puts your rights or freedoms at risk, we will notify the National Privacy Commission within 72 hours of becoming aware of it, and notify you directly if the breach is likely to result in a high risk to you. - Photos, videos and security cameras
We and our guests regularly take photos and videos at the resort, including underwater shots of dives. If you are recognisable in a photo or video we take, or that you share with us, we may use it on our website, social media or in marketing materials, and we will ask for your consent before doing so, unless you shared it with us publicly yourself (for example by tagging us or posting it on your own account). You can withdraw your consent at any time by writing to info@sunsetcoveromblon.com, and we will remove the image from future use where reasonably possible. We also operate security cameras covering common areas of the property for guest and staff safety. Footage is retained for approximately 7 days and then automatically overwritten. We provide footage only in response to a written request to the resort owner. - Contact
Sunset Cove Beach & Dive Resort, operating together with Romblon Fun Divers Co. Ltd., Purok 1 San Gabriel, Lamao, Alad Island, Romblon 5500, Philippines. Email: info@sunsetcoveromblon.com