Prime Villas by Blue Everest
Privacy Notice
Last updated: October 4, 2026
This notice explains how we collect, use, share and protect your personal information when you use this website or contact us about Prime Villas and Bali Villas in Panglao, Bohol. We process personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations and the issuances of the National Privacy Commission (NPC). If you are in the European Union, the EEA or the United Kingdom, the General Data Protection Regulation (GDPR) also applies.
1. Who we are
The personal information controller for this website is:
Blue Everest Asset Group Holding, Inc.
Data Protection Officer: WhatsApp +63 954 255 5553
You can contact our Data Protection Officer at the address above about anything in this notice.
2. Information we collect
Information you give us
- Inquiry form (home page): full name, email address, phone number, country, the collection and villa you are interested in, purpose, preferred visit date and your message.
- Get a quote: your name and email address or phone number.
- Quotation pages: your name, email or phone number, and the selections in your quotation (villas, ownership structure, options). We generate a PDF of the quotation and email it to our sales team.
- Messages you send us by email or WhatsApp, and any documents you share with us during a purchase.
Information collected automatically
- Server logs kept by our web host: IP address, browser type, pages requested and time of request, used for security and to keep the site running.
- Campaign information: if you arrive through a link with campaign tags (for example utm_source), we keep those tags in your browser for the visit and send them with your inquiry, so we know which channel brought you.
- Cookies and browser storage described in our Cookie Notice: storage the website needs to work, Google reCAPTCHA cookies on the inquiry form and, only with your consent, Google Analytics and the Meta Pixel (to understand how the site is used and measure our advertising) and Kuula (360° tours). These record, for example, the pages you visit, your device and browser, your approximate location from your IP address, and whether you contact us or send an inquiry.
We do not ask for sensitive personal information on this website. Please do not send identity documents or financial details through the website forms.
3. Why we use it and our legal basis
| Purpose | Legal basis |
|---|---|
| Answering your inquiry, preparing and sending your quotation, arranging viewings | Steps you ask us to take before entering into a contract (DPA s.12(b); GDPR art. 6(1)(b)) |
| Reservations, contracts to sell, payments, handover and after-sales service | Performance of a contract (DPA s.12(b); GDPR art. 6(1)(b)) |
| Meeting legal duties, including tax, accounting, anti-money-laundering customer due diligence (RA 9160 as amended by RA 11521) and lawful requests of authorities | Legal obligation (DPA s.12(c); GDPR art. 6(1)(c)) |
| Keeping the website and forms secure, preventing spam and fraud (including reCAPTCHA), improving our service | Legitimate interests (DPA s.12(f); GDPR art. 6(1)(f)) |
| Measuring how the website is used and the results of our advertising (Google Analytics, Meta Pixel) | Your consent, which you can withdraw at any time |
| Showing 360° virtual tours from Kuula | Your consent, which you can withdraw at any time |
| Sending you project news or offers | Only with your separate consent. We do not use your inquiry details for marketing unless you ask us to keep you updated. |
4. Who we share it with
We do not sell or rent personal information. We share it only as needed for the purposes above, with:
- Our contractor and affiliates: Blueprint Building Group Inc. and, if you engage them, our affiliated property-management company, for construction, handover and after-sales service.
- Service providers acting on our instructions: our web host and email provider; Google LLC (Google Workspace, used to receive and store website inquiries; reCAPTCHA, which protects the inquiry form; and, only if you allow it, Google Analytics); Kuula (360° tours, only if you allow them); exchange-rate services (open.er-api.com and exchangerate-api.com) and jsDelivr (exchange rate and country-flag icons), which receive your IP address when the page looks up today's USD to PHP rate; and Meta Platforms (WhatsApp, if you choose to message us there, and, only if you allow it, the Meta Pixel, which Meta may link to your Facebook or Instagram account under its own policies).
- Professional advisers such as lawyers, notaries and accountants handling your purchase.
- Government authorities where the law requires it.
Google Analytics and the Meta Pixel are governed by the Google Privacy Policy and the Meta Privacy Policy.
Google's use of reCAPTCHA is governed by the Google Privacy Policy and Terms of Service.
5. International transfers
Some of our service providers (for example Google, Kuula and Meta) process information outside the Philippines. We remain responsible for personal information transferred to them (DPA s.21) and use providers that apply contractual and security safeguards comparable to Philippine law. For transfers of EU, EEA or UK data, we rely on adequacy decisions or standard contractual clauses where required.
6. How long we keep it
- Inquiries and quotations that do not lead to a purchase: up to two (2) years from our last contact, then deleted or anonymised.
- Purchase records: for as long as the law requires (for example tax and anti-money-laundering record-keeping rules, generally at least five (5) to ten (10) years after the transaction).
- Server logs: kept by our host for a limited period for security.
7. How we protect it
We use organisational, physical and technical measures appropriate to the risk, including encrypted connections (HTTPS), access limited to staff who need it, signed and HttpOnly cookies for the quotation pages, and spam protection on forms. If a personal data breach occurs that is likely to harm you, we will notify the NPC and affected individuals as required by NPC Circular 16-03.
8. Your rights
Under the Data Privacy Act you have the right to be informed, to access your personal information, to object to its processing, to have it corrected, to have it erased or blocked, to data portability, to claim damages, and to lodge a complaint with the National Privacy Commission. If the GDPR applies to you, you also have the rights to restrict processing and to withdraw consent at any time without affecting earlier processing.
To exercise your rights, contact us at WhatsApp +63 954 255 5553. We may ask you to confirm your identity and will reply within a reasonable time, and in any case within the period set by law. You may complain to the National Privacy Commission (privacy.gov.ph) or, in the EU/EEA/UK, to your local data protection authority.
9. Children
This website is intended for adults and is not directed at anyone under 18. We do not knowingly collect information from children.
10. Changes to this notice
We may update this notice. The date above shows when it last changed; important changes will be highlighted on this page.