Blue Everest Asset Group
Privacy Notice
Last updated: October 9, 2026
This notice explains how we collect, use, share and protect your personal information when you use this website or contact us about our villas in Panglao, Bohol and elsewhere. We process personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations and the issuances of the National Privacy Commission (NPC). If you are in the European Union, the EEA or the United Kingdom, the General Data Protection Regulation (GDPR) also applies.
1. Who we are
The personal information controller for this website is:
Blue Everest Asset Group Holding, Inc.
Data Protection Officer: Marketing@blue-everest.com or WhatsApp +63 954 255 5553
You can contact our Data Protection Officer at either address about anything in this notice.
2. Information we collect
Information you give us
- Inquiry form: your name, email address, phone or WhatsApp number and your message.
- Messages you send us by email, WhatsApp or Facebook, and any documents you share with us during a purchase.
Information collected automatically
- Server logs kept by our web host: IP address, browser type, pages requested and time of request, used for security and to keep the site running.
- Campaign information: if you arrive through a link with campaign tags (for example utm_source), we keep those tags in your browser for the visit and send them with your inquiry, so we know which channel brought you.
- Cookies and browser storage described in our Cookie Notice: storage the website needs to work and, only with your consent, Google Analytics, Google Ads and the Meta Pixel (to understand how the site is used and measure our advertising). These record, for example, the pages you visit, your device and browser, your approximate location from your IP address, and whether you send an inquiry.
We do not ask for sensitive personal information on this website. Please do not send identity documents or financial details through the website form.
3. Why we use it and our legal basis
| Purpose | Legal basis |
|---|---|
| Answering your inquiry, preparing information for you, arranging viewings | Steps you ask us to take before entering into a contract (DPA s.12(b); GDPR art. 6(1)(b)) |
| Reservations, contracts to sell, payments, handover and after-sales service | Performance of a contract (DPA s.12(b); GDPR art. 6(1)(b)) |
| Meeting legal duties, including tax, accounting, anti-money-laundering customer due diligence (RA 9160 as amended by RA 11521) and lawful requests of authorities | Legal obligation (DPA s.12(c); GDPR art. 6(1)(c)) |
| Keeping the website and form secure, preventing spam and fraud, improving our service | Legitimate interests (DPA s.12(f); GDPR art. 6(1)(f)) |
| Measuring how the website is used and the results of our advertising (Google Analytics, Google Ads, Meta Pixel) | Your consent, which you can withdraw at any time |
| Sending you project news or offers | Only with your separate consent. We do not use your inquiry details for marketing unless you ask us to keep you updated. |
4. Who we share it with
We do not sell or rent personal information. We share it only as needed for the purposes above, with:
- Our contractors and affiliates involved in the construction, handover and after-sales service of your purchase.
- Service providers acting on our instructions: our web host, database and email providers; Google LLC (Google Workspace and, only if you allow them, Google Analytics and Google Ads); the exchange-rate service (open.er-api.com), Google Fonts, Cloudflare (cdnjs) and jsDelivr, which receive your IP address when the page loads a rate, a font or a script; and Meta Platforms (WhatsApp, if you choose to message us there, and, only if you allow it, the Meta Pixel, which Meta may link to your Facebook or Instagram account under its own policies).
- Professional advisers such as lawyers, notaries and accountants handling your purchase.
- Government authorities where the law requires it.
Google Analytics and Google Ads are governed by the Google Privacy Policy, and the Meta Pixel by the Meta Privacy Policy.
5. International transfers
Some of our service providers (for example Google and Meta) process information outside the Philippines. We remain responsible for personal information transferred to them (DPA s.21) and use providers that apply contractual and security safeguards comparable to Philippine law. For transfers of EU, EEA or UK data, we rely on adequacy decisions or standard contractual clauses where required.
6. How long we keep it
- Inquiries that do not lead to a purchase: up to two (2) years from our last contact, then deleted or anonymised.
- Purchase records: for as long as the law requires (for example tax and anti-money-laundering record-keeping rules, generally at least five (5) to ten (10) years after the transaction).
- Server logs: kept by our host for a limited period for security.
7. How we protect it
We use organisational, physical and technical measures appropriate to the risk, including encrypted connections (HTTPS), access limited to staff who need it, and spam protection on the form. If a personal data breach occurs that is likely to harm you, we will notify the NPC and affected individuals as required by NPC Circular 16-03.
8. Your rights
Under the Data Privacy Act you have the right to be informed, to access your personal information, to object to its processing, to have it corrected, to have it erased or blocked, to data portability, to claim damages, and to lodge a complaint with the National Privacy Commission. If the GDPR applies to you, you also have the rights to restrict processing and to withdraw consent at any time without affecting earlier processing.
To exercise your rights, contact us at Marketing@blue-everest.com or WhatsApp +63 954 255 5553. We may ask you to confirm your identity and will reply within a reasonable time, and in any case within the period set by law. You may complain to the National Privacy Commission (privacy.gov.ph) or, in the EU/EEA/UK, to your local data protection authority.
9. Children
This website is intended for adults and is not directed at anyone under 18. We do not knowingly collect information from children.
10. Changes to this notice
We may update this notice. The date above shows when it last changed; important changes will be highlighted on this page.