Privacy Policy

ARTICLE 1. IDENTITY OF THE PERSONAL INFORMATION CONTROLLER

The Personal Information Controller (PIC) as defined under Republic Act No. 10173 (Data Privacy Act of 2012) is:

BOOKniNAM
Registered Address: Philippines
info@bookninam.com

ARTICLE 2. SCOPE AND APPLICATION

This Privacy Policy applies to all personal data collected, processed, stored, and shared by the Company through the BOOKniNAM Platform, including through its mobile application, website, APIs, and related services. It applies to all Users, including Customers, Service Providers, and visitors to the Platform.

ARTICLE 3. PERSONAL DATA WE COLLECT

3.1 Data You Provide Directly

We collect personal data that you voluntarily provide when you:

• Register for an Account (name, email address, mobile number, password);
• Complete your profile (profile photo, business name, address, for Service Providers);
• Make or receive a booking (appointment details, service type, date, and time);
• Submit a payment (billing name, payment method details, processed by third-party gateways);
• Contact our support team (communications and attachments);
• Submit business verification documents (for Service Providers: government-issued ID, business permits, DTI/SEC/BIR registration).

3.2 Data We Collect Automatically

When you use the Platform, we automatically collect:

• Device information
• Log data
• Usage data
• Cookie and session data (see Article 9).

3.3 Data from Third Parties

We may receive data about you from third-party services including payment processors, identity verification providers, and analytics platforms, subject to their respective privacy policies.

ARTICLE 4. LEGAL BASIS AND PURPOSE OF PROCESSING

We process your personal data on the following legal bases under Section 12 of the Data Privacy Act of 2012:

4.1 Performance of a Contract

• Account creation and management;
• Processing, confirming, and managing bookings;
• Processing payments and issuing transaction records.

4.2 Legitimate Interests of the Company

• Improving and developing Platform features;
• Fraud detection, security monitoring, and abuse prevention;
• Internal analytics, business reporting, and performance measurement;
• Defending the Company's legal rights and interests.

4.3 Consent

• Sending promotional emails, newsletters, and marketing communications;
• Non-essential cookies and tracking technologies.

4.4 Compliance with Legal Obligations

• Responding to lawful orders from courts, government agencies, or regulatory bodies;
• Compliance with applicable Philippine tax, corporate, and regulatory laws.

ARTICLE 5. HOW WE USE YOUR PERSONAL DATA

We use your personal data for the following purposes:

• To create, verify, maintain, and secure your Account;
• To process and confirm booking appointments between Customers and Service Providers;
• To send booking confirmations, reminders, cancellation notices, and service updates;
• To facilitate communications between you and other Platform Users as necessary for service fulfillment;
• To process payments, handle billing, and maintain transaction records;
• To provide customer support and resolve disputes;
• To improve, personalize, and optimize Platform performance;
• To conduct research, analytics, and Platform development;
• To send marketing and promotional content, where you have consented;
• To comply with legal obligations and defend the Company's legal rights;
• To detect, prevent, and investigate fraud, abuse, and security incidents.

ARTICLE 6. DATA SHARING AND DISCLOSURE

The Company does not sell, rent, trade, or monetize your personal data. We disclose personal data only as described below:

6.1 Between Platform Users

Booking-related information (such as name, contact details, and appointment specifics) is shared between the relevant Customer and Service Provider solely for the purpose of fulfilling the booking.

6.2 Service Providers and Processors

We engage trusted third-party vendors (including cloud hosting, payment processing, analytics, and communication services) who process data on our behalf under binding data processing agreements, in compliance with the DPA.

6.3 Legal and Regulatory Authorities

We may disclose personal data when required by law, court order, subpoena, or competent government authority, or when necessary to protect the rights, property, or safety of the Company, its Users, or the general public.

6.4 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal data may be transferred to a successor entity, subject to equivalent data protection obligations.

6.5 With Your Consent

We may share your data with third parties for purposes not listed above when you have given explicit, informed consent.

ARTICLE 7. DATA RETENTION

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected and in accordance with applicable law:

• Active Account data: retained for the duration of your Account;
• Booking and transaction records: minimum of five (5) years for legal and audit compliance;
• Payment records: retained in accordance with BIR and applicable Philippine tax regulations;
• Support and communication records: up to three (3) years from the date of the interaction;
• Inactive Accounts: anonymized or purged after two (2) consecutive years of inactivity, with prior notice to the registered email address.

Upon expiration of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.

ARTICLE 8. COOKIES AND TRACKING TECHNOLOGIES

BOOKniNAM uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use include:

• Strictly Necessary Cookies — Essential for core Platform functionality. Cannot be disabled without affecting your ability to use the Platform;
• Performance/Analytics Cookies — Measure Platform usage and help us improve features (requires consent);
• Preference Cookies — Remember your settings and personalization choices (requires consent);
• Marketing Cookies — Deliver targeted content and measure campaign effectiveness (requires consent).

You may manage or withdraw cookie consent at any time through your browser settings or the Platform's cookie preference tool. Withdrawing consent for non-essential cookies will not affect your core use of the Platform.

ARTICLE 9. DATA SECURITY

The Company implements appropriate technical, organizational, and physical security measures to protect your personal data against unauthorized access, loss, alteration, disclosure, or destruction. THE COMPANY DOES NOT GUARANTEE ABSOLUTE SECURITY OF YOUR DATA. YOU ACKNOWLEDGE THAT NO TRANSMISSION OVER THE INTERNET OR ELECTRONIC STORAGE SYSTEM IS 100% SECURE, AND YOU ASSUME RESPONSIBILITY FOR USING THIS PLATFORM WITH THIS UNDERSTANDING.

ARTICLE 10. CHILDREN'S PRIVACY

The Platform is not intended for use by individuals under the age of eighteen (18) without the involvement, supervision, and consent of a parent or legal guardian. By accessing or using the Platform, any user under the age of eighteen (18) represents and warrants that they have obtained permission from, and are using the Platform under the supervision of, their parent or legal guardian. The Company reserves the right to restrict, suspend, or terminate access to users who fail to comply with these requirements.

ARTICLE 11. CROSS-BORDER DATA TRANSFERS

Your personal data is primarily stored and processed within the Philippines. Where data is transferred to or accessible from servers outside the Philippines, including through third-party cloud providers, the Company ensures that appropriate safeguards are in place, including standard contractual clauses and equivalent data protection obligations.

ARTICLE 12. DEVELOPER AND COMPANY PROTECTIONS

12.1 The Company processes personal data strictly in furtherance of legitimate Platform operations. Personal data is never processed in ways that are incompatible with the purposes stated in this Policy without your prior consent.

12.2 The Company retains the right to use anonymized, aggregated, and non-identifiable data derived from User interactions for product development, research, business intelligence, and Platform improvement without restriction or compensation.

12.3 Any individual who provides false, fabricated, or misleading personal data to the Company, including for the purpose of exploiting Platform features or manipulating Service Providers, may be held legally liable under applicable Philippine law, including but not limited to the Revised Penal Code and Republic Act No. 10175 (Cybercrime Prevention Act of 2012).

12.4 The Company shall not be liable for any breach of data security attributable to the User's own negligence, including but not limited to sharing login credentials, using unsecured networks, or failing to update device security software.

ARTICLE 13. DATA SUBJECT RIGHTS

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights regarding your personal data:

13.1 Right to Be Informed. You have the right to know whether your personal data is being processed, including its purpose, scope, and method.

13.2 Right to Access. You may request a copy of your personal data held by the Company.

13.3 Right to Rectification. You may request correction of any inaccurate, incomplete, or outdated personal data in our records. Basic profile updates may be made directly through your Account settings.

13.4 Right to Erasure or Blocking. You may request the removal or blocking of your personal data where it is no longer necessary, unlawfully obtained, or where you have withdrawn consent. The Company may retain data where required by law or for the defense of legal claims.

13.5 Right to Object. You may object to processing for direct marketing, profiling, or legitimate interest purposes. The Company will cease such processing unless overriding legal grounds exist.

13.6 Right to Data Portability. Where feasible, you may request your personal data in a structured, machine-readable format for transfer to another controller.

13.7 Right to Lodge a Complaint. You may file a complaint with the National Privacy Commission at www.privacy.gov.ph.

13.8 How to Exercise Your Rights. Send a written request to info@bookninam.com with the subject line Data Subject Rights Request. The Company will acknowledge within ten (10) business days and respond within thirty (30) calendar days. Identity verification may be required.

ARTICLE 14. AMENDMENTS TO THIS POLICY

The Company reserves the right to revise this Privacy Policy at any time to reflect changes in law, technology, or data practices. Material changes will be communicated to registered Users through the Platform or via email at least seven (7) calendar days before taking effect. The updated Policy will be posted with a revised effective date. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

ARTICLE 15. CONTACT INFORMATION

For questions, concerns, or notices regarding these Terms, contact:

BOOKniNAM
Email: info@bookninam.com

By using BOOKniNAM, you confirm that you have read, fully understood, and unconditionally agree to this Privacy Policy.