Gr8 Escapes Booking App · TravelPass · Messenger Feature
Effective Date: 25 June 2026
Last updated: 20 August 2026 — extended to cover TravelPass and sign-in with Google.
CPR InsightsPH (“we,” “our,” or “us”) values and respects your privacy. This Privacy Policy explains how information is collected, used, stored, and protected when you interact with the Gr8 Escapes Booking App (“App”), with TravelPass, the traveller companion issued with a confirmed booking, and with the Messenger feature integrated into them.
By using TravelPass, or by communicating with Gr8 Escapes through Facebook Messenger or any Messenger-enabled functionality within the App, you acknowledge and agree to the collection and use of your information in accordance with this Privacy Policy.
Sections 6 and 7 below address the two third-party sign-in and messaging platforms specifically: Facebook Messenger, and sign-in with Google. This Policy should be read together with the Terms of Service of the Gr8 Escapes Booking App.
When you communicate with us through Messenger, or use TravelPass, we may collect and process the following information:
Subject to permissions granted by Meta and your privacy settings, we may collect:
We may collect and store:
If you use Messenger to inquire about or confirm bookings, we may collect:
Where you use TravelPass, we may collect and store:
We may automatically record:
Information collected through Messenger may be used for the following purposes:
The Messenger feature may utilize automated systems, chatbots, or artificial intelligence tools to assist in responding to inquiries, generating quotations, collecting booking information, and facilitating customer support.
While reasonable efforts are made to ensure the accuracy of automated responses, all quotations, bookings, prices, schedules, and travel arrangements remain subject to human verification and final confirmation by authorized Gr8 Escapes personnel.
Users should not rely solely on automated responses for final travel decisions.
We do not sell or rent your personal information.
We may share your information only when necessary with:
Authorized employees, officers, agents, and contractors who require access in the performance of their duties.
Your information may be shared with:
Such disclosure shall be limited to what is necessary for the fulfillment of travel services.
We may engage third-party providers for:
These providers are contractually required to protect your information.
We may disclose information when required by:
The Messenger feature operates through platforms provided by Meta Platforms, Inc.
Your use of Facebook Messenger is likewise governed by Meta’s own privacy policies and terms of service. We encourage users to review Meta’s privacy practices independently.
We are not responsible for the privacy practices, policies, or security measures implemented by Meta.
TravelPass is the traveller companion Gr8 Escapes issues with a confirmed booking. It presents your itinerary, your travel documents, your points of contact, and the record of your trip, and is reached through a private link provided by your travel consultant. There is no public registration: a TravelPass exists only where Gr8 Escapes has created one against a booking.
A TravelPass link functions without signing in. Signing in with Google serves a single purpose: to secure a TravelPass to the traveller it belongs to, so that access survives a lost link or a change of device, and so that personal travel documents are released only to that traveller.
Where you choose to sign in with Google, we receive only the following from your Google account:
We do not receive, and cannot access, your Google password. We do not request access to Gmail, Google Contacts, Google Calendar, Google Drive, Google Photos, or any other Google service, and we do not post to, write to, or modify your Google account in any way.
Information received from Google is used solely to establish and maintain your ownership of your TravelPass — to recognise you on return visits, to associate you with the traveller record held against your booking, and to protect the personal documents stored against that record.
It is not used for advertising or marketing profiling; it is not sold, rented, or licensed; and it is not disclosed to third parties for their own purposes. It is not used for any purpose unrelated to delivering the travel arrangements you have booked.
Signing in establishes who you are. It does not, by itself, open a booking. A TravelPass is released only where Gr8 Escapes has already recorded you as a traveller on that booking. A Google account whose email address happens to match a booking record is not, on that basis alone, granted access to it.
You may disconnect your Google account from TravelPass at any time at myaccount.google.com/permissions. Doing so does not delete your booking or your trip record; to request deletion of information we hold, see the Data Deletion Requests provision in this Policy.
Your use of your Google account remains governed by Google’s own privacy policy and terms. We are not responsible for the privacy practices of Google LLC.
Messenger communications and related information shall be retained only for as long as necessary to:
When information is no longer necessary, it shall be securely deleted, anonymized, or archived in accordance with applicable retention policies.
We implement reasonable administrative, technical, and organizational safeguards to protect personal information, including:
However, no method of electronic transmission or storage is completely secure. Consequently, while we strive to protect your information, absolute security cannot be guaranteed.
Subject to applicable laws, users may exercise the following rights:
Requests relating to personal information may be submitted using the contact details provided below.
You may request the deletion of personal information we have collected through the Messenger feature, including your Messenger profile data and conversation history, at any time.
To submit a data deletion request, email info@deveralaw.net with the subject line “Messenger Data Deletion Request,” together with the Facebook name and account used to message Gr8 Escapes. We will verify the request and delete the associated personal information within thirty (30) days, except where retention is required by law.
The Messenger feature is not intended for use by individuals below eighteen (18) years of age without parental or legal guardian consent.
We do not knowingly collect personal information from minors without appropriate authorization.
Because our systems and service providers may utilize cloud-based infrastructure, personal information may be processed or stored in jurisdictions outside the Philippines.
Whenever international transfers occur, reasonable safeguards shall be implemented to ensure that personal information receives an adequate level of protection consistent with applicable privacy laws.
We reserve the right to amend or update this Privacy Policy at any time to reflect operational, legal, regulatory, or technological changes.
Updated versions shall become effective upon posting within the App or through other appropriate notification mechanisms.
Continued use of the Messenger feature following any modification constitutes acceptance of the revised Privacy Policy.
For inquiries, requests, or concerns regarding this Privacy Policy or the processing of personal information, you may contact:
Data Protection Officer
DE VERA LAW
Email: info@deveralaw.net
Address: Manaoag, Pangasinan
Telephone: +63 075 505 1167
By using TravelPass or the Messenger feature of the Gr8 Escapes Booking App, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.