Privacy notice

Who we are

ArkilaHub makes booking and management software for Philippine car rental businesses. This notice explains how we handle personal information on our own website and in the accounts of the businesses that use ArkilaHub, in line with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

If you booked with a rental business

Rental businesses use ArkilaHub to run their own booking websites. If you booked a vehicle or made an account on one of those websites, that business decides what information it asks for and what it uses it for, and it is responsible for it. ArkilaHub stores that information on the business’s behalf and uses it for nothing else.

Every one of those websites links to a privacy notice at the foot of each page. Please contact the business first with any question or request about your information. If you cannot reach them, contact us and we will help.

What we collect

• When you sign up a business: your name, email address and mobile number, your business name, and the password you choose. Passwords are stored only in a scrambled (hashed) form that cannot be read back.
• When you use your account: what you add to run your business, such as vehicles, rates, bookings and staff accounts, and a security record of important actions, showing who did them, when, and from which IP address and browser.
• When you sign in: a session record with your IP address and browser, so that you can see where your account is signed in and sign out other devices.
• When you send us an enquiry: what you type into the form (your name, business name, mobile number, email address, location, Facebook page and your answers about your business), together with the page you arrived from, the advertising campaign that brought you if there was one, your IP address and your browser.

Cookies

ArkilaHub sets the cookies it needs to work: one that keeps you signed in, and one that protects our forms against forgery. We do not use advertising or tracking cookies.

Why we use it

• To create and run your account and provide ArkilaHub to your business, which is the service you signed up for.
• To keep accounts secure, and to look into misuse.
• To reply to your enquiries and help you set up.
• To understand which of our pages and campaigns are useful.
• To meet our obligations under the law.

We do not sell personal information, and we never use the information of a rental business’s customers for our own purposes.

Who we share it with

Only the providers we need to run ArkilaHub, and only for that purpose:

• Hostinger, which hosts our servers and databases.
• Cloudflare, which carries traffic to our website and to rental businesses’ booking websites, and protects it from attack.
• The service that delivers our emails, such as booking confirmations and password resets.

These providers may store information on servers outside the Philippines. We also disclose information when the law requires it, for example in answer to a lawful order from a court or government agency.

How we protect it

• Our website and every booking website run over encrypted connections (HTTPS).
• Passwords are hashed, two-step verification is available on every account, and accounts are signed out after a period of inactivity.
• Driver’s licences, identity documents and payment receipts are kept in private storage that cannot be reached from the web. They open only through links that expire after 15 minutes and need the person to be signed in, and every time one is opened it is recorded.
• Staff roles let each business decide which of its people can see what.

How long we keep it

We keep account information for as long as the account is open. When an account is closed we delete it, except for records the law requires us to keep. Enquiries are kept while we are in touch with you and deleted when you ask. Security records are kept for as long as they are needed to protect the service.

Your rights

Under the Data Privacy Act you have the right to:

• be told how your personal information is used, which is what this notice is for;
• see the personal information we hold about you;
• have it corrected if it is wrong or incomplete;
• object to its use, and have it deleted or blocked where the law allows;
• receive a copy of it in a form you can take elsewhere;
• be compensated for damage caused by its misuse; and
• complain to the National Privacy Commission.

To use any of these rights, message us on Messenger. We may need to confirm who you are before we act on a request.

Contact us

For any question about this notice or your information, message us on Messenger. You can also complain to the National Privacy Commission at privacy.gov.ph.

Changes to this notice

We update this notice when what we collect, or how we use it, changes. The date at the top shows when it last changed.