Privacy Policy

This Privacy Policy describes how Nook Asia Pacific Enterprise Inc. ("Nook", "we", "us", or "our") collects, uses, discloses, processes and protects your personal data in connection with our website, app and the home loan services we offer (together, the "Site" and "Services"). We process your personal data fairly, accurately and lawfully, and only under the conditions set out below, in accordance with the Data Privacy Act of 2012 (the "DPA") and its implementing rules and regulations.

"Personal Data" here means any information that relates to an identified or identifiable natural person. We encourage you to read this policy in full so you can make an informed decision about sharing your personal data with us. This Privacy Policy supplements our Terms and Conditions of Use.

The personal data that we collect

To use the Site's full features and avail of our Services, you may need to provide us with personal data such as:

Your name and contact details, including email address and telephone number;
Any username and password you use on the Site;
Information that helps us determine your eligibility for a loan or complete a transaction — such as your address, identification details and financial information;
A record of your activity on the Site and your interactions with our staff and systems;
Information you provide through your communications with us;
Location and geographic information collected through your use of the Site;
Other information about you provided to us by third parties; and
If you refer someone for loan assistance, the personal data needed to help that person and to help us find a suitable loan.

Where the data we process is sensitive personal information (for example, information about your health, age, marital status or affiliations, as defined under the DPA), we make sure we meet the DPA's criteria for processing such information. Where consent is our basis for processing, we will obtain it from you.

How we use your personal data

We collect personal data when you choose to provide it — for example when you create an account or request our Services — and sometimes from a third party that has engaged our Services. We generally use your personal data to:

Verify your identity and maintain your account with us;
Provide our Services, including loan referral, and tailor the content we show you;
Facilitate your loan application, including credit reporting, and refer you to your preferred lender(s);
Process transactions on the Site and send you updates and notifications about them;
Keep you informed about loan products and maintain a record of your activity;
Detect fraudulent or prohibited activity on the Site;
Respond to your queries or complaints and provide customer support;
Send you marketing, newsletters, alerts and event information relating to Nook's products and services;
Conduct surveys and research on the quality of our Services so we can improve your experience; and
Comply with applicable laws and regulations.

We may transfer, store or process your personal data outside of the Philippines. Where we do, we continue to comply with the DPA and its implementing rules and regulations.

How we share your personal data

We may disclose or share personal data about you from time to time, including:

With Nook and its affiliates and subsidiaries, to offer you products and services that suit your preferences;
With our bank partners and other financial institutions that may provide suitable financial products, and their agents or representatives;
With property developers and sellers, and their agents, who are connected to the loan you avail;
With third-party service providers and contractors who support our operations — for example website infrastructure, data analytics, credit assessment, marketing, loan processing and fraud protection;
With potential partners or investors in the context of a possible merger, acquisition, joint venture or similar arrangement; and
With government agencies, law enforcement bodies and courts, to comply with legal and regulatory requirements or to assist an investigation of fraud or other unlawful activity.

Cookies

A cookie is a small text file placed on your device that helps us understand your browsing habits, log visits and visitor behaviour, and serve you the most relevant content. You can set your browser or device to accept or reject cookies. By continuing to use the Site with cookies enabled, you agree to our use of cookies.

We use technologies such as Google Analytics and the Facebook Pixel to understand how the Site is used and to measure the effectiveness of our advertising. Information generated by Google Analytics (such as page views, referral source and time on Site, in de-personalised format) is transmitted to Google's servers. The Facebook Pixel helps us build and optimise relevant campaigns based on the content you have viewed; data collected through it is anonymous to us but may be processed by Facebook in line with its own data policy. You can manage how you see advertising through your browser and Facebook account privacy settings.

Access, correction and removal of your personal data

Please make sure the personal data you provide is accurate, complete and up to date. You can review and update much of your information directly in your account profile on the Site. If you believe we hold incorrect information that you cannot correct yourself, or you wish to withdraw your consent to our processing, or you would like your personal data removed, please contact us through any of our chat channels and we will act on your request accordingly.

If you ask us to delete your personal data, we may need to close your registered account and stop providing the Services to you. In that case, you agree that we will not be liable for any loss or damage resulting from the termination of the Services or your use of the Site.

Retention and protection of your personal data

We retain your personal data only for as long as necessary to fulfil the purposes set out above, to establish or defend legal claims, for legitimate business purposes, or as required by law. To protect the confidentiality of your personal data, we undertake all reasonable and appropriate measures against accidental or unlawful destruction, alteration, disclosure and unlawful processing.

Your rights as a data subject

Under the DPA and its implementing rules and regulations, you have the right to:

Be informed whether your personal data is being, or has been, processed;
Object to the processing of your personal data, including for direct marketing, automated processing or profiling;
Reasonably access your personal data on demand;
Dispute and require the correction of any inaccuracy in your personal data;
Suspend, withdraw or block personal data that is incomplete, false or processed without authorisation;
Be indemnified for damages arising from inaccurate, outdated, unlawfully obtained or unauthorised use of your personal data;
Obtain a copy of your personal data in a commonly used, structured electronic format; and
Lodge a complaint with the appropriate privacy regulator.

Links to other websites

The Site contains links to other websites, including those of our partners. Once you click those links and leave the Site, we have no control over how those other websites process your personal data.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, so please check this page periodically. Where changes are material, we will notify you, for example by posting a notice on the Site. Your continued use of the Site and Services constitutes acceptance of any changes to this policy.

Contact us

If you have any questions, concerns or complaints, or you wish to exercise any of your rights as a data subject, please reach out through any of our live chat channels — Messenger, WhatsApp or Telegram — or visit our contact page. When you message us, please tell us how we can help (for example, "removal of my personal data") so our team can assist you quickly. Our consultants are available every day from 9:00am to 9:00pm.