Privacy Policy

What we collect

We collect only what the service needs to work. That falls into four groups:

• Account details you give us when you register: your name, email address, and password, which is stored only as a one-way hash and is never readable by us.
• Enquiry details you submit on a listing: your name, your phone number or email address, and the message you write.
• Listing details you upload if you publish a property: the property information, photographs, address, and map location you provide.
• Technical data your browser sends automatically, such as your IP address, which we use for security and to limit abusive traffic.

Why we process it, and on what basis

We process your enquiry so the person who listed that property can reply to you. That is the whole purpose of the form, and it is the contract you enter into by sending it.

We process account details to operate your account, and listing details to publish the listing you asked us to publish.

We process technical data under our legitimate interest in keeping the site secure and available. We do not sell personal information, and we do not use your data for automated decision-making or profiling.

Who receives it

An enquiry you send on a listing goes to the person or company who published that listing, together with the contact details you supplied. That is the point of sending it, and it is the only routine disclosure we make.

We use service providers to run the site: a database host, an email delivery provider, and an image hosting service. They process data on our instructions and for no other purpose. We disclose data to anyone else only where the law requires it.

How long we keep it

Enquiries are kept for as long as the listing owner may reasonably need them to follow up, and no longer than two years from the date you sent them.

Account and listing data are kept while your account is open. If you close your account we delete or anonymise your personal data within thirty days, except where we are required to retain records for a longer period.

Your rights under the Data Privacy Act

Republic Act 10173 gives you specific rights over your personal data, and you may exercise any of them by writing to us:

• The right to be informed about how your data is processed.
• The right to access the personal data we hold about you.
• The right to correct anything inaccurate or incomplete.
• The right to erasure or blocking of your data where the grounds in the Act apply.
• The right to object to processing, including the right to withdraw consent.
• The right to data portability, meaning a copy of your data in a usable electronic format.
• The right to damages for a violation, and the right to complain to the National Privacy Commission.

Security and breaches

Passwords are hashed, traffic to the site is encrypted in transit, and access to the database is restricted. No system is perfectly secure, so we do not claim otherwise.

If a breach occurs that is likely to put your rights and freedoms at risk, we will notify the National Privacy Commission and the affected individuals within the period the law requires.

Cookies and analytics

We use a session cookie to keep you signed in. It is required for the account area to work and carries no advertising function.

Where site analytics are enabled, they measure aggregate page traffic. We do not run advertising trackers and we do not sell audience data.

Children

The service is intended for business use by adults. We do not knowingly collect personal data from children.

Contact

To exercise any right above, to ask a question about this policy, or to request deletion of your data, email support@commrey.com or call +63 930 074 3363. We aim to respond within fifteen days.

If you are not satisfied with our response, you may bring a complaint to the National Privacy Commission at privacy.gov.ph.