Last updated: July 17, 2026
Cebu Grand Realty Property Management Services, operating as Cebu Grand Realty (“we,” “us,” or “our”), respects your privacy. This Website Privacy Notice explains how we collect, use, disclose, retain, and protect personal data when you use cebugrandrealty.com or communicate with us about our real estate, leasing, property management, recruitment, and related services.
We process personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC).
1. Who we are and who this notice covers
Cebu Grand Realty Property Management Services is the personal information controller for the processing described in this notice. This notice applies to website visitors and people who communicate or transact with us, including buyers, sellers, tenants, landlords, property owners, developers, investors, applicants, vendors, contractors, representatives, and other business contacts.
Our website and services are intended primarily for adults. When a property transaction or tenancy legitimately involves a minor, we process the minor’s data only through a parent, legal guardian, or other authorized representative and as permitted by law.
2. Personal data we collect
The personal data we collect depends on how you interact with us.
- Contact and identity data: name, email address, telephone or mobile number, messaging-app contact details, and information needed to confirm your identity or authority.
- Property and service information: property location and type, ownership or occupancy details, selling or leasing timeline, budget, preferred area, property requirements, viewing or tour details, and information contained in your inquiry.
- Transaction and property-management records: offers, contracts, lease and renewal records, payment and disbursement information, security-deposit records, inspection and maintenance records, vendor coordination, handover records, and related communications.
- Financing, KYC, and compliance information: when needed at a later transaction stage, this may include government-issued identification, proof of address, civil-status documents, employment or income records, tax or bank records, proof of funds, title and tax-declaration records, contracts, and powers of attorney. Please do not send these documents through an ordinary website inquiry or Sophia chat unless an authorized Cebu Grand Realty representative gives you a secure, specific method and notice.
- Recruitment information: contact details, licence or accreditation status, work history, experience, application messages, and other information you choose to provide when applying to join Cebu Grand Realty.
- Communications: email, telephone, messaging-app, contact-form, chatbot, viewing, and meeting communications, including the content and context of your request.
- Website and device data: IP-related information, browser and device type, operating system, referring page, pages viewed, dates and times, session or conversation identifiers, A/B-test variant, cookie or browser-storage identifiers, and security or diagnostic events.
- Account and authentication data: username, password-related authentication records, password-reset information, and one-time-password verification events when account features are used. We do not display your password to our staff.
We collect data directly from you, from a person authorized to act for you, from parties involved in a property or service engagement, from public property or professional records where lawful, and automatically through the website technologies described below.
3. How and why we use personal data
We use personal data only for specific, legitimate purposes and only to the extent reasonably necessary. Depending on the purpose, we rely on steps you request before entering a contract, performance of a contract, compliance with a legal obligation, Cebu Grand Realty’s documented legitimate interests, your consent, or another basis permitted by Philippine law.
- Respond to inquiries and connect you with an appropriate licensed advisor.
- Recommend properties, arrange viewings or video tours, prepare offers, coordinate negotiations, and support sales, purchases, leases, and handovers.
- Provide property-management services, including tenant screening, lease administration, payment coordination, inspections, maintenance, vendor work, owner reporting, and move-in or move-out records.
- Verify identity, authority, eligibility, ownership, source-of-funds or related transaction information when necessary for a service, contract, fraud prevention, or a legal obligation.
- Comply with tax, accounting, court, regulatory, professional, anti-money-laundering, and other lawful requirements that apply to the transaction or service.
- Operate, secure, troubleshoot, measure, and improve the website, forms, account features, and Sophia chatbot.
- Manage recruitment, vendor, professional, and business relationships.
- Send newsletters or optional property and market updates when you subscribe or when another lawful basis applies, subject to your right to unsubscribe or object.
- Establish, exercise, or defend legal claims and protect clients, personnel, property, systems, and the public.
We do not require you to accept optional marketing in order to receive a response to a property or service inquiry. You may unsubscribe from marketing by using the link in a message or by contacting us.
4. Cookies, analytics, and similar technologies
Our website uses cookies and browser storage to operate features, maintain sessions, support authentication, protect the site, remember preferences, understand use, and improve performance. You can block or delete cookies and site data through your browser, although some features may no longer work correctly.
- Site and authentication technology: WordPress and related components may use cookies or similar storage for login, password reset, one-time-password verification, security, forms, and user preferences.
- Analytics and tag management: the site uses Google tag infrastructure to measure website use and performance. This may process device, browser, page, event, and IP-related information. Your browser and applicable Google controls may allow you to limit this processing.
- Sophia chatbot: Sophia is an automated assistant. It processes your message, a session identifier, a per-message conversation identifier, the current page URL, an A/B-test variant, and IP-related information. The public implementation uses local storage for the chat session and A/B variant and session storage for the opened state. It obtains the visitor IP through ipify before hashing the value in the browser for submission to Cebu Grand Realty. Do not send government IDs, bank details, proof of funds, or other sensitive documents through Sophia.
- Maps and external services: pages may use or link to OpenStreetMap, Google Maps, WhatsApp, Viber, social networks, video platforms, and other external services. Those services may receive technical data when you load their content or choose to follow a link, and their own privacy notices apply.
- Hosting and delivery: Cloudflare and our hosting and security providers process technical request information to deliver, protect, and monitor the website.
5. Sophia and automated processing
Sophia helps answer common questions and route inquiries. It does not independently approve transactions, determine eligibility, set binding prices, or make decisions that produce legal or similarly significant effects. A human Cebu Grand Realty advisor handles substantive advice, verification, negotiation, and transaction decisions. You may ask to communicate with a person at any time by using the contact details below.
6. When we share personal data
We disclose personal data only when reasonably necessary for a documented purpose, subject to appropriate access restrictions and safeguards. Recipients may include:
- Cebu Grand Realty personnel, licensed advisors, and authorized contractors who need the data to handle your request or service.
- Property owners, landlords, sellers, buyers, tenants, developers, cooperating brokers, and their authorized representatives when needed for a viewing, negotiation, transaction, lease, or property-management engagement.
- Banks, lenders, payment or accounting providers, lawyers, notaries, inspectors, maintenance providers, and other professional or operational partners when you request or authorize the relevant service or when the disclosure is otherwise lawful and necessary.
- Website hosting, content-delivery, security, analytics, communications, email, customer-relationship, data-storage, productivity, and support providers acting for Cebu Grand Realty.
- Courts, regulators, law-enforcement bodies, the Anti-Money Laundering Council, the National Privacy Commission, tax authorities, and other public authorities when disclosure is legally required or permitted.
- A successor or transaction adviser in connection with a legitimate business reorganization, acquisition, or transfer, subject to confidentiality and applicable law.
Some technology and communications providers operate infrastructure outside the Philippines. When personal data is processed or transferred internationally, Cebu Grand Realty remains accountable and uses contractual, organizational, and technical measures reasonably designed to provide a comparable level of protection required by Philippine law.
7. How long we keep personal data
We retain personal data only while it is needed for the purpose for which it was collected, a continuing client or business relationship, legitimate follow-up, security, dispute handling, or a legal and regulatory obligation. We apply the following criteria:
- Inquiry, viewing, chatbot, and correspondence records are retained while we respond and for the reasonable follow-up and claims period relevant to the interaction, unless they become part of a transaction or property-management record.
- Transaction and property-management records are retained throughout the engagement and for the applicable contractual, accounting, tax, professional, limitation, and regulatory periods afterward.
- KYC and transaction records subject to anti-money-laundering rules are retained for at least the legally required period, generally five years where the requirement applies, or longer when a lawful hold or unresolved case requires it.
- Newsletter subscription data is retained until you unsubscribe or withdraw consent; limited suppression information may be kept so we can honor your request not to receive further marketing.
- Recruitment data is retained for the hiring process and any additional period lawfully needed for administration, claims, or future opportunities for which you have been properly informed.
- Security, diagnostic, cookie, and session data is retained for the operational or security purpose for which it was created, then deleted, anonymized, or aggregated when no longer needed.
When retention is no longer justified, we securely delete, anonymize, or dispose of the data, subject to technical backup cycles and lawful preservation requirements.
8. How we protect personal data
We use reasonable and appropriate organizational, physical, and technical safeguards based on the nature of the data and the risks of processing. These measures include access controls, role-based handling, secure transmission where supported, system and account protection, backups, monitoring, vendor controls, personnel confidentiality, and incident-response procedures. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.
If we confirm a personal data breach that requires notification, we will notify affected data subjects and the National Privacy Commission within the period and manner required by law.
9. Your privacy rights
Subject to the conditions and exceptions in Philippine law, you may exercise the right to:
- Be informed about the processing of your personal data.
- Access personal data we hold about you.
- Object to processing or withdraw consent where consent is the basis.
- Correct inaccurate or incomplete data.
- Request erasure, blocking, or deletion where legally available.
- Receive data in a portable format where the right to data portability applies.
- File a complaint with the National Privacy Commission and seek damages where provided by law.
To protect you and other people, we may ask for information needed to verify your identity and authority before acting on a request. We will respond without undue delay and generally within 30 working days, subject to a lawful extension and notice where a request is complex or numerous. Some data may need to be retained despite a request when required by law or necessary for legal claims, security, or the rights of another person.
10. External links
Our website links to third-party websites and services. Cebu Grand Realty does not control their independent privacy practices. Review the privacy notice of the relevant provider before giving it personal data.
11. Changes to this notice
We may update this notice when our services, technologies, vendors, or legal obligations change. We will publish the revised version on this page, update the date above, and provide additional notice when a change is material and applicable law requires it.
12. Contact us about privacy
For privacy questions, marketing opt-outs, or requests to exercise your rights, contact our Data Privacy Contact:
Cebu Grand Realty Property Management Services
#8, The Regency Crest, Paseo Saturnino
Cebu City 6000, Philippines
Email: info@cebugrandrealty.com
Mobile: +63 917 777 2350
Telephone: +63 32 384 7280
If you believe your privacy rights were violated, you may also contact or file a complaint with the National Privacy Commission.
