Last updated: April 2026.

Introduction

Lunas Hilom Sanctuary ("we", "our", "us") is a small traditional healing practice operating at 2nd Floor, 38 Scout Borromeo Street, Barangay South Triangle, Quezon City 1103, Metro Manila, Philippines. We take the privacy of our guests seriously, and we aim to hold only the information we genuinely need in order to provide safe, thoughtful care and to run a lawful business. This Privacy Policy explains what we collect, why, how we use it, and the rights you have under the Data Privacy Act of 2012 (Republic Act No. 10173, the "Act") and the rules issued by the National Privacy Commission (NPC).

Information We Collect

We only collect information that is necessary for booking, care, and lawful communication. This may include:

  • Identifying information: your full name, contact number, and email address when you book a session or send us a message.
  • Service preferences: which therapy you are interested in, scheduling preferences, and any access or accessibility needs you share with us.
  • Health notes you choose to share: relevant musculoskeletal history, allergies, pregnancy, recent surgery, medications, or other health context you tell us about so we can deliver safer bodywork. You are never required to share more than you are comfortable with.
  • Payment information: when you pay in person or through GCash, Maya, or credit card, the relevant transaction is handled by the payment processor; we do not store full card numbers on our servers.
  • Website information: basic device and browser information collected automatically when you visit our website, including IP address, pages visited, and time spent.

How We Use Your Information

We use your information for the following purposes:

  • To confirm and manage your appointments at the sanctuary.
  • To provide care that is tailored to your health context and preferences.
  • To respond to enquiries you send by phone, email, or through our contact form.
  • To issue receipts, including HMO-friendly receipts where requested.
  • To comply with Philippine laws and regulatory requirements, including PITAHC and DOH reporting where applicable.
  • To improve the website and the quality of our services.

We do not use your information for profiling, automated decision-making, or advertising to you elsewhere on the internet.

Data Storage & Security

We keep client records in a combination of locked physical files at the sanctuary and secure digital records hosted with reputable providers. Access to health notes is limited to the practitioner assigned to your care and our practice manager. We retain records only for as long as reasonably necessary for safety, continuity of care, and tax purposes, after which they are securely destroyed in accordance with NPC guidelines.

Sharing

We do not sell your information. We do not share it with third parties for marketing purposes. We may share limited, necessary information only in the following circumstances: with a payment processor to complete a transaction; with a physician or allied health professional only when you have asked us to refer or coordinate your care; or when required by Philippine law or by a lawful order from a competent authority.

Cookies

Our website uses a small number of cookies to remember your preferences (for example, whether you have already dismissed the cookie notice) and to help us understand which pages are read most often. We do not use cookies to track personal health information. You can disable cookies in your browser settings at any time, though some parts of the site may work less smoothly.

Your Rights under RA 10173

Under the Data Privacy Act of 2012 you have the following rights concerning your personal information. You may:

  • Be informed about how your personal data is being or will be processed.
  • Access the personal data we hold about you.
  • Request the correction of inaccurate or incomplete data.
  • Object to the processing of your personal data where legally grounded.
  • Request the erasure or blocking of your data where legally grounded.
  • Request a copy of your data in a structured, commonly used format (the right to data portability).
  • Be indemnified for damages arising from inaccurate, incomplete, or unlawfully processed personal data.
  • Lodge a complaint with the National Privacy Commission (privacy.gov.ph) if you believe your rights have been violated.

Contact Us

If you have any questions about this Privacy Policy, or if you wish to exercise any of your rights above, please contact our Data Protection Officer at:

We will respond to requests within a reasonable time, and in any case within the periods required by the Act and NPC regulations.