Privacy Policy

Introduction

The Nest by the Sea (TNBTS) House Rental and Leasing Services Corp (“TNBTS,” “we,” “us,” or “our”) respects and values your right to privacy. We are committed to protecting the confidentiality, integrity, and security of the personal data you provide to us, or that we collect when you use our website, book accommodations, contact our guest services, or otherwise engage with us.

This Privacy Policy explains in detail how we handle your personal data — including what we collect, how we use it, why we may need to disclose it, and how long we retain it. It also sets out the rights available to you under applicable laws, including the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), and, where relevant, international standards such as the General Data Protection Regulation (GDPR).

By using our website or services, you acknowledge and agree to the practices described in this Privacy Policy. In some cases, we may request your express consent, particularly for marketing purposes or when processing sensitive personal data as discussed below.

Personal Data We Collect

We may collect personal data in different ways, depending on how you interact with us:

a. Information you provide directly: This includes details you give us when making a reservation, completing forms on our website, contacting us by phone or email, or providing feedback after your stay. Examples include your name, email address, contact number, payment details, guest preferences, and any other information you choose to share.

b. Information we collect automatically: When you visit our website, we automatically gather technical details such as your IP address, browser type, device identifiers, and browsing behavior through cookies and similar technologies. This helps us understand how visitors use our site and allows us to improve it.

c. Information from third parties: In some cases, we may receive information from travel agents, online booking platforms, or payment processors that you use to complete a transaction with us.

We only collect data that is necessary for the purposes described in this Policy, and we handle it responsibly at all times.

How We Use Your Personal Data

We process your personal data for a variety of purposes, depending on the nature of your interaction with us.

First, we use personal data to deliver our services to you. This includes processing reservations, managing check-ins and check-outs, preparing your room according to your preferences, handling payments and deposits, and assisting you with any requests during your stay. Without this information, we would be unable to confirm your booking or provide you with the level of service you expect.

Second, we use personal data to provide customer support and communication. This means responding to your inquiries, updating you on the status of your reservations, confirming special arrangements you have requested, and addressing feedback or complaints. By having accurate and up-to-date details about you, we can ensure a smoother guest experience.

Third, we use your data for administrative and financial purposes. This covers issuing invoices and receipts, managing refunds, preventing fraudulent transactions, and keeping accurate records for accounting and auditing purposes.

Fourth, we may use your personal data for marketing and promotional activities, but only where we have your consent. This could include sending you newsletters, seasonal offers, or information about new accommodations under Nest. You may opt out at any time if you no longer wish to receive these communications.

Fifth, we process data for safety and security reasons. This includes monitoring our properties through CCTV, verifying guest identities, handling emergencies, and investigating incidents. This helps us create a safe environment for all guests and staff.

Finally, we may use your data to comply with legal and regulatory obligations. For example, we may be required by law to maintain guest records, report to government authorities, or assist in legal investigations.

Disclosure of Personal Data

We do not sell or trade your personal data to unrelated third parties. However, in order to provide our services effectively, we may share information with:

a. Other Nest properties where your booking or stay may be coordinated.

b. Trusted third-party service providers such as housekeeping, IT support, marketing agencies, payment processors, and logistics partners, who help us run our operations.

c. Travel agencies, tour operators, and booking platforms that facilitate your reservation.

d. Regulators, courts, or government authorities, where disclosure is required by law or regulation.

e. Professional advisors such as auditors, lawyers, and accountants who assist us in maintaining legal compliance and managing risks.

Whenever we share your personal data, we ensure that these third parties comply with strict confidentiality and data protection obligations.

Direct Marketing

From time to time, we may send you communications about Nest properties, offers, events, or services that we believe may be of interest to you. We will only send these messages if you have given us your consent. You may withdraw this consent at any time, either by clicking the “unsubscribe” option in our communications or by contacting us directly.

Even if you choose not to receive marketing messages, we may still send you service-related communications, such as booking confirmations, payment reminders, or important updates about your stay.

Retention of Personal Data

We retain your personal data only for as long as necessary to achieve the purposes described in this Policy, or as required by applicable law. The exact length of time may vary depending on the type of data and the reason it was collected.

a. Guest records: These may be retained after your last stay to comply with legal obligations and to facilitate smoother future bookings.

b. Financial and payment information: Records of transactions are retained in order to meet accounting, tax, and auditing requirements.

c. CCTV footage: Security footage is generally retained for 90 days unless required for an ongoing investigation, legal process, or claim.

d. Marketing and promotional data: If you have consented to receive marketing messages, we will keep your contact information until you opt out or withdraw consent.

Once data is no longer needed, or its retention period has lapsed, we take reasonable steps to securely delete, anonymize, or de-identify it, ensuring it cannot be linked back to you.

Data Security

We take data security seriously and use a range of technical and organizational measures to safeguard your personal data. This includes secure servers, firewalls, encryption technologies, and restricted access controls. Only authorized employees and service providers with a legitimate business need are granted access to your personal data.

While we strive to protect your data, please note that no system is entirely immune to cyber threats. We encourage you to also take precautions, such as using strong passwords and avoiding sharing sensitive information over unsecured networks.

Third-Party Websites

Our website may contain links to external websites or services provided by third parties. Please note that we do not control these sites and are not responsible for their privacy practices. We encourage you to review their privacy policies before providing them with any personal data.

Your Rights

You have a number of rights under applicable law with respect to your personal data. These include the right to access the data we hold about you, request corrections, object to certain processing activities, withdraw consent where it was previously given, or request deletion of your data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, new technologies, or legal requirements. Any updates will be posted on our website with the “Last Updated” date clearly indicated. We encourage you to review this page regularly to stay informed.

Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or our handling of personal data, please contact us at: dpo.thenestbythesea@gmail.com