BookNest
Sign Up

Privacy Policy

Our privacy policy and how we use your data

Last updated: February 13, 2026

1. Introduction

BookNest ("we," "us," or "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, store, and disclose your information when you use our property booking management platform ("the Service").

This policy is designed to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, and password when you create an account
  • Property Data: Property names, addresses, descriptions, amenities, house rules, and pricing information
  • Booking Records: Guest names, contact details, check-in/check-out dates, payment amounts, booking sources, and special requests
  • Financial Data: Revenue records, expense entries, and payment status information
  • Team Information: Names and email addresses of team members you invite to your account
  • Communications: Messages you send to us through our contact form or support channels

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, actions taken within the Service, and timestamps
  • Device Information: Browser type, operating system, device type, and screen resolution
  • Log Data: IP address, access times, and referring URLs
  • Cookies and Similar Technologies: As described in our Cookie Policy

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process and manage your property listings and booking records
  • Enable team collaboration features and manage user permissions
  • Generate reports, analytics, and insights about your property performance
  • Send you service-related notifications (e.g., booking confirmations, account alerts)
  • Respond to your inquiries and provide customer support
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations and enforce our Terms of Service

4. Legal Basis for Processing

Under the Philippine Data Privacy Act, we process your personal data based on the following legal grounds:

  • Consent: When you create an account and agree to our Terms of Service
  • Contractual Necessity: To provide the Service you have requested
  • Legitimate Interest: To improve and secure the Service, and to communicate with you about your account
  • Legal Obligation: To comply with applicable laws and regulations

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your information only in the following circumstances:

  • Team Members: Information within your team account is accessible to team members based on their assigned roles and permissions
  • Service Providers: We may share data with trusted third-party providers who assist us in operating the Service (e.g., hosting, analytics, email delivery). These providers are contractually obligated to protect your data
  • Legal Requirements: We may disclose your information when required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change

6. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encrypted connections (TLS/SSL) for all data in transit
  • Row-level security policies to isolate account data
  • Secure authentication with password hashing
  • Regular security reviews and updates
  • Access controls limiting employee access to personal data on a need-to-know basis

While we take reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or necessary to resolve disputes.

Booking records and financial data may be retained for a period consistent with legal and regulatory requirements (e.g., tax record-keeping obligations).

8. Your Rights

Under the Philippine Data Privacy Act and other applicable laws, you have the following rights:

  • Right to Access: Request a copy of the personal data we hold about you
  • Right to Correction: Request correction of inaccurate or incomplete personal data
  • Right to Erasure: Request deletion of your personal data, subject to legal retention requirements
  • Right to Object: Object to the processing of your personal data for certain purposes
  • Right to Data Portability: Request your data in a structured, commonly used, and machine-readable format
  • Right to Withdraw Consent: Withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal

To exercise any of these rights, please contact us through our contact page. We will respond to your request within 30 days.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we learn that we have collected personal data from a child under 18, we will take steps to delete that information promptly.

10. International Data Transfers

Your data may be processed and stored on servers located outside the Philippines. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your data in accordance with the Philippine Data Privacy Act and applicable regulations.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us through our contact page.

You also have the right to file a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.