Privacy Policy

1. Data Privacy Compliance

MetroBahay Realty ("we," "our," or "us") complies with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. This policy describes how we collect, use, store, and protect your personal data when you use our website and services.

2. Information We Collect

• Contact Information: Name, email address, phone number, and message content when you fill out our contact form, property inquiry form, or booking request.
• Property Preferences: Information about properties you view, inquire about, or book viewings for.
• Newsletter Data: Email address when you subscribe to our market updates.
• Technical Data: IP address, browser type, device information, and pages visited through cookies and analytics.

3. How We Use Your Data

• To respond to your inquiries and property booking requests
• To send you market updates and newsletters (with your consent)
• To improve our website and services
• To comply with legal obligations
• To communicate with you about properties and services you've expressed interest in

4. Data Storage and Protection

Your personal data is stored securely on our servers with the following safeguards:

• All data is transmitted over encrypted connections (HTTPS)
• Passwords are hashed using bcrypt encryption
• Database access is restricted to authorized personnel only
• CSRF protection prevents unauthorized form submissions
• Rate limiting prevents brute-force attacks
• Session timeouts automatically log out inactive users

5. Data Sharing

We do not sell, trade, or rent your personal data to third parties. We may share data only:

• With our licensed real estate brokers and agents to facilitate property transactions
• When required by law or legal process
• With your explicit consent

6. Your Rights Under the DPA

Under the Philippine Data Privacy Act, you have the right to:

• Right to be informed — Know how your data is collected and used
• Right to access — Request a copy of your personal data
• Right to correction — Correct inaccurate or incomplete data
• Right to deletion — Request deletion of your personal data
• Right to object — Object to the processing of your data
• Right to data portability — Receive your data in a structured format

7. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes described in this policy, or as required by law. You may request deletion of your data at any time by contacting us.

8. Cookies

Our website uses session cookies for essential functionality (admin login). We do not use tracking cookies or third-party analytics cookies that collect personal data without your consent.

9. Contact Information

For questions, concerns, or to exercise your data privacy rights, contact our Data Protection Officer: