Privacy notice

van4life is a van rental business operating in Davao City and the surrounding region. When you book with us we are the personal information controller for the data described below, which means we decide what is collected and why, and we are answerable for it.

You can reach us on +63 965 059 3568 with any question about your data, including a request to see it or have it deleted.

When you create an account we collect your name, email address, and a password.

When you request a van we collect your name, email address, mobile number, the dates and times of your trip, your pick-up address, your destination, whether you want a driver, whether the van should be delivered, and optionally the number of passengers and what the trip is for.

If you choose an address from the suggestions we offer, we also store the approximate map coordinates of that place so we can find you on the day.

We do not collect your government ID through this site. Self-drive customers hand one over in person when they collect the van and take it back when they return it. No copy is made and nothing about it is stored here.

We never collect card or bank details. This site takes no payments. You pay us directly, and we record only whether a payment has been received.

We keep a short-lived record of failed sign-in attempts against the network address they came from, so that we can block attacks on your account. It is deleted within the hour.

We use your data to quote your trip, to confirm it, to reach you about it, to hand you the van on the day, and to keep a record of what was paid. That is the whole of it.

Our lawful basis is the contract between us: without these details we cannot arrange your trip. Where you have given consent, such as by creating an account, you may withdraw it at any time by asking us to close the account.

We do not sell your data, and we do not use it for advertising or profiling. We do not send marketing.

Inside the business, only staff with an admin account, who need it to arrange your trip.

Your name and mobile number are shared with the driver assigned to your trip so that they can find you. Nothing else is.

We use service providers to run the site: a hosting provider and a database provider, both of whom store data on our behalf under their own security obligations. When you type an address, the text you type is sent to a mapping service to fetch suggestions. We do not send your name, number, or booking to that service.

We will disclose data where the law requires it, and not otherwise.

Not indefinitely, and these are the actual periods rather than a promise to be reasonable.

A request nobody took up is deleted 6 months after the date you asked about. Nothing was agreed and no money changed hands, so there is nothing for us to keep.

A trip that went ahead, or that you cancelled, keeps your details for 5 years, after which your name, email, mobile number and addresses are removed from it. The record of the trip itself stays, with the dates and the amounts, because that is our own account of work we did. It no longer says who you are.

Password reset links are removed once they have been used or have expired. Failed sign-in records are deleted within the hour.

You do not have to wait for any of that. Ask us and we will remove your details now: see your rights below.

The site is served only over an encrypted connection. Passwords are stored hashed and cannot be read by us or anybody else, including our own staff. Sessions use cookies that scripts on the page cannot read, and every action that changes data carries a separate token to stop other sites acting as you.

Bank and e-wallet details for paying us are shown only to a signed-in customer who has a live booking.

No system is perfect. If a breach affects your data and puts you at risk, we will tell you and the National Privacy Commission, as the law requires.

We set three cookies and none of them track you. One keeps you signed in, one protects forms against other sites submitting them on your behalf, and one remembers whether you chose light or dark appearance.

There is no advertising, no analytics, and no third-party tracking on this site.

Republic Act No. 10173 gives you the right to:

• be told that your data is being processed, and why;
• see the data we hold about you, and be given a copy;
• have anything inaccurate corrected;
• object to processing, or withdraw a consent you gave;
• have your data blocked or erased where it is outdated, unlawfully obtained, or no longer needed;
• be given your data in a portable form;
• claim damages if you are harmed by inaccurate, unlawful, or unauthorized use of it.

To exercise any of these, call us on +63 965 059 3568. We will answer within a reasonable period and will not charge you for it.

Asking to be erased is something we can actually do, not a form of words. Your name, email, mobile number and addresses are removed from your account and from every booking on it, and the account can no longer be signed into. The bookings themselves stay, with their dates and amounts, as our record of work we did, but they no longer identify you.

Please raise it with us first, on +63 965 059 3568, so we have a chance to put it right.

If you are still not satisfied you may complain to the National Privacy Commission, which regulates data protection in the Philippines, at privacy.gov.ph.

If we change how we handle your data we will update this page and the date at the top. If the change is significant we will tell you directly.