Privacy Policy

Cordova Reef Village Resort Cordova Reef Village Resort Schiefer's Food & Drinks Schiefer's Food & Drinks St. Lazarus Catholic Cemetery St. Lazarus Catholic Cemetery Agila Resort Agila Resort Cocolife — SM City Cebu Cocolife — SM City Cebu Krave Cafe Krave Cafe

Places on ListGOPH — tap one to take a look

Last updated: August 30, 2026

ListGOPH ("we", "us") operates a directory of places and businesses in the Philippines through our website and mobile app. This policy explains what information we collect, why we collect it, and the choices you have. We handle personal data in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

1. Information We Collect

Account information. When you register we collect your name, email address, and a password (stored only in hashed form). Business owners and staff may also provide business contact details.

Content you create. Reviews, ratings, photos you attach to reviews, blog posts, listing suggestions, itineraries, and messages you send us through the contact form.

Location data (mobile app, optional). If you enable visit tracking in the app, we collect your device's precise location while the feature is on — including in the background — solely to detect when you have spent time at a listed place so it can be tagged as "Visited" on your profile. This feature is off by default, requires your explicit permission, and can be turned off at any time in the app's Profile screen or your device settings.

Usage data. Pages and listings you view, and basic technical data such as IP address and browser type, used for security, rate limiting, and aggregate visitor statistics shown to business owners.

Searches. What you type into our search boxes, so we can show you your own recent searches and work out which terms are trending across the site. A search is stored against your account if you are signed in, and otherwise against your browser alone — never against your name or email. Searches are kept for six months, and you can remove any of them, or all of them, from the "Recent searches" list that appears under any search box.

Place searches. When you press Search while dropping a pin on a map, the words you type go to our server, and our server — not your browser — asks the geocoder (Photon) and ranks its answers against listings we already hold. Photon never sees your IP address or your browser: it sees one request from us. In exchange the search passes through our servers and rests there a while — the geocoder's answers to a given search are cached for up to 24 hours, and the last set of results that worked for up to three days, so a provider outage does not leave the box empty. Those entries are filed under a hash of the words you typed, not under your name, your account, or your IP address, and our logs record how many results a search returned rather than what you searched for.

2. How We Use Your Information

  • To operate your account, itineraries, comparisons, and saved content across web and mobile.
  • To publish the reviews, photos, and posts you choose to share, shown with your name and any badges.
  • To tag places as "Visited" when you have opted into visit tracking.
  • To show business owners aggregate view counts for their listings (never your identity).
  • To respond to messages, moderate content, prevent abuse, and keep the platform secure.

We do not sell your personal data, and we do not use it for third-party advertising.

3. Sharing

Content you publish (reviews, ratings, photos, blog posts, your public name and badges) is visible to other users. Beyond that, we share personal data only with:

  • Service providers that host our infrastructure, bound to confidentiality;
  • Map and geocoding providers (OpenStreetMap / Nominatim / Photon) which receive only the addresses or coordinates needed to render maps and look up places — never your account identity. Map tiles and the address look-up that fills in a dropped pin still go from your browser straight to the provider; place searches go through our server instead, so the provider sees us rather than you (see "Place searches" above);
  • Authorities, when required by law or a lawful order.

4. Retention

We keep your data while your account is active. If you delete your account, we remove or anonymize your personal data within 30 days, except records we must keep for legal, security, or dispute-resolution reasons. Location pings used for visit detection are processed transiently and only the resulting visit record (place and date) is kept.

5. Your Rights

Under the Data Privacy Act you may access, correct, or ask us to delete your personal data, object to processing, and withdraw consent (such as disabling visit tracking) at any time. To exercise these rights, contact us using the details below. You may also lodge a complaint with the National Privacy Commission.

6. Security

Passwords are hashed, API access is token-based, accounts can be suspended for abuse, and access to admin tools is restricted by role. No system is perfectly secure, so please use a strong, unique password.

7. Children

ListGOPH is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will remove it.

8. Changes to This Policy

We may update this policy as the platform evolves. Material changes will be announced on this page with a new "Last updated" date.

9. Contact

Questions or requests about your data: support@listgoph.com. You can also use our contact form.