Privacy Policy

New Leaf Home Assist is a website, technology platform, and future mobile application owned and operated by NEW-LEAF-HOME-ASSIST WEB PORTAL SERVICES, a business operating in the Philippines (collectively, “New Leaf Home Assist,” “we,” “our,” or “us”). We act as the personal information controller for personal data we decide to collect and use through the Platform.

This Privacy Policy applies to website visitors, homeowners, tenants, motorists, account holders, provider applicants, approved service providers and their personnel, people who submit contact or service request forms, mobile app users, and other persons who interact with us. It applies to present features and to future booking, payment, review, messaging, notification, and mobile functionality. Independent providers may separately control information they receive to perform a service and must provide their own privacy information where required.

“Platform” means New Leaf Home Assist websites, portals, applications, communications, and related services. “Personal Data” means personal information, sensitive personal information, and privileged information protected under Philippine law. “User” includes any visitor, customer, motorist, applicant, provider, or account holder. “Provider” means an independent professional or business listed, matched, contacted, or booked through the Platform. “Processing” includes collecting, recording, organizing, storing, updating, retrieving, using, sharing, blocking, deleting, or destroying Personal Data.

Depending on how you use the Platform, we may collect:

• Identity and account data: name, email, mobile number, account identifiers, profile details, authentication records, account role, and communication preferences.
• Request and booking data: property or vehicle issue descriptions, category, urgency, preferred schedule, service address, landmarks, photographs, video, voice recordings and transcripts, provider assignment, job status, messages, completion notes, materials, quoted or final price, and complaints.
• Location data: GPS or device-derived location when permission is granted, entered addresses, service areas, route and distance information, and approximate location inferred from network information.
• Provider and personnel data: legal and business names, contact details, service categories, experience, operating hours, coverage areas, pricing, business registrations, permits, licences, insurance details, government identification, clearances, certifications, selfies, portfolio media, technicians, vehicles, availability, acceptance history, performance, earnings, and subscription status.
• Payment data: billing contact, transaction amount, payment status, refunds, receipts, payout information and limited payment method details. Full card or wallet credentials should be handled by payment processors, not stored by us unless clearly disclosed.
• Reviews and content: ratings, written reviews, uploaded content, support enquiries, survey answers, and reports.
• Technical and usage data: IP address, browser, device type, operating system, app version, identifiers, language, referring pages, pages and features used, timestamps, crash data, cookies, pixels, and similar technologies.
• Communications: contact-form submissions and records of email, SMS, push, phone, and in-platform communications with us or facilitated through the Platform.

Please do not upload information that is unnecessary for your request. If you provide another person’s data, you represent that you are authorized to do so and have given them this Policy where required.

We collect information directly from you when you visit, register, complete a form, request service, upload media or documents, communicate, review a provider, or manage a provider profile. We also receive information automatically from devices and cookies; from Providers concerning a request or completed job; from identity, mapping, communications, analytics, cloud hosting, payment, and fraud-prevention partners; and from public or lawful sources used to verify provider credentials. We will identify any materially new source at or before collection when required.

We process Personal Data only for declared, specified, and legitimate purposes. Depending on the activity, the legal basis may be your consent; performance of a contract or steps requested before entering one; compliance with law; protection of life and health in an emergency; or our legitimate interests or those of another person, where those interests do not override your rights.

• Creating and securing accounts; verifying identity; administering provider applications and badges; and maintaining accurate profiles.
• Receiving, diagnosing, routing, matching, scheduling, fulfilling, documenting, and supporting home or roadside requests and future bookings.
• Displaying relevant Providers based on category, availability, location, service area, quality, plan, and response information.
• Processing future payments, subscriptions, refunds, payouts, invoices, taxes, fraud checks, and transaction disputes.
• Operating AI-assisted diagnosis, transcription, recommendations, estimates, support, safety triage, and moderation. Human review may be used where appropriate.
• Sending essential account, request, safety, verification, payment, and service communications by email, SMS, push notification, telephone, or in-app message.
• Responding to enquiries, complaints, rights requests, legal demands, and emergencies; enforcing our terms; preventing fraud, abuse, and security incidents.
• Measuring performance, improving the Platform, debugging, conducting analytics, and developing new functions using aggregated or de-identified information where practicable.
• Sending promotions only where permitted and honoring opt-outs.

Where consent is the basis, you may withdraw it prospectively. Withdrawal does not invalidate prior processing and may prevent us from providing a feature that genuinely requires the information.

Location helps identify nearby Providers, estimate routes and response times, populate service locations, and dispatch emergency assistance. Precise location is collected only when you enable the relevant device permission or actively submit it. You may deny or revoke permission in device settings, but nearby matching, navigation, or emergency dispatch may be limited. During an active request, location may be shared with an assigned Provider and relevant support personnel.

A future mobile application may request camera, photo library, microphone, location, and notification permissions. Camera and photo access support issue evidence and provider documents; microphone access supports voice notes and transcription; notifications provide request and account updates. Permissions are optional unless necessary for a feature, can be managed through device settings, and will not be used for unrelated purposes without notice.

We may use essential cookies or local storage for authentication, security, preferences, and session continuity; analytics technologies to understand visits and feature use; and, if introduced, advertising or attribution technologies. Analytics may collect pages viewed, interactions, approximate location, device and referral information. Where consent is required, non-essential technologies will not be used until consent is obtained. Browser controls may reject cookies, though essential features may then fail. We do not presently respond to every “Do Not Track” signal because no uniform standard applies, but we will honor legally required preference signals.

We do not sell Personal Data. We may disclose only what is reasonably necessary to:

• Providers and their authorized technicians to assess, accept, navigate to, communicate about, perform, document, and resolve a service request;
• customers, so they can evaluate a Provider’s public business profile, credentials or verification badges, service areas, availability, pricing indicators, rating, and relevant contact information after matching or booking;
• cloud hosting, authentication, AI, mapping, storage, analytics, customer support, email, SMS, push notification, payment, fraud-prevention, and professional advisers acting under appropriate obligations;
• government, courts, regulators, emergency responders, law enforcement, or other persons when required by law, necessary to protect life or safety, or needed to establish or defend legal claims;
• a successor in a merger, financing, reorganization, or transfer, subject to applicable law and continued protection.

Private provider documents are not public profile content. We require service providers handling data for us to use it only for authorized purposes and apply appropriate safeguards.

The Platform may integrate third-party authentication, maps and navigation, artificial intelligence, communications, analytics, storage, and payment services. Their processing is also governed by their own terms and privacy notices when they act independently. Some providers may process information outside the Philippines. We use contractual, organizational, and technical measures appropriate to the risk and remain accountable for transfers made by us as required by the Data Privacy Act of 2012 and its implementing rules.

We may send non-promotional messages necessary for registration, security, provider review, service dispatch, booking, payment, complaint, or legal notices. You cannot opt out of essential messages while using the relevant service. Promotional messages will include a reasonable opt-out method, and you may also contact us. Carrier or data charges may apply to SMS and mobile notifications. Opting out of marketing does not stop transactional communications.

We retain Personal Data only as long as necessary for the stated purposes, including while an account is active and for periods needed to complete transactions, resolve complaints, enforce agreements, prevent fraud, maintain audit and safety records, and satisfy tax, accounting, consumer, privacy, and other legal obligations. Retention varies by record type, legal requirement, dispute risk, and operational need. Provider verification, job, payment, and consent records may be retained after account closure when necessary to demonstrate compliance or address claims.

When retention is no longer justified, we securely delete, anonymize, or render information inaccessible. Backup copies may persist for a limited cycle and remain protected. A deletion request does not require deletion of information we must or are permitted to retain, or content that has been lawfully anonymized.

We use reasonable and appropriate organizational, physical, and technical measures proportionate to the nature of the information and risk, including access controls, role-based permissions, encrypted transmission, protected storage, logging, monitoring, backups, provider confidentiality obligations, and incident procedures. Provider verification documents receive restricted access. No internet system is absolutely secure, so users must protect credentials, use strong unique passwords, keep devices secure, and promptly report suspected misuse.

If a personal data breach occurs, we will assess it, contain it, document it, and notify the National Privacy Commission and affected data subjects when and within the period required by law.

Subject to lawful conditions and exceptions, Philippine data subjects have the rights to be informed; object; access; correct inaccurate or incomplete data; erase or block data; receive data in a structured and commonly used format where applicable; withdraw consent; lodge a complaint with the National Privacy Commission; and seek damages for violations. You may also ask about the source, recipients, purpose, manner, and expected retention of your data.

To exercise a right, contact us using the details below and describe your request. We may verify identity and authority before acting. We will respond within periods required by law. We will not discriminate against a person for exercising a privacy right, although some features cannot operate without necessary information.

The Platform is intended for adults capable of entering contracts. A person under 18 should use it only through a parent or legal guardian. We do not knowingly invite children to create independent provider accounts or submit verification documents. If we learn that a child’s Personal Data was collected without appropriate authority, we will take reasonable steps to delete or restrict it. In emergencies involving vulnerable persons, information may be processed to protect life, health, or safety as permitted by law.

We may update this Policy as the Platform, law, or our practices change. The revised version will show a new “Last Updated” date and be made readily accessible. For material changes, we may provide additional notice through the Platform, email, SMS, or push notification and obtain renewed consent where required. Continued use after an effective update means the updated Policy applies to later processing, but does not replace consent where law requires it.

Questions, complaints, requests to access, correct, delete or obtain a copy of data, and withdrawals of consent may be sent to:

You may also lodge a complaint with the Philippine National Privacy Commission. Contacting us first may allow us to resolve the concern promptly, but it does not limit your right to approach the Commission.