Core 360 is operated by Core Property Consulting OPC ("REMAX Core", "we"), a real estate brokerage affiliated with RE/MAX Philippines, with office at 2nd Floor, The Renaissance, 215 Salcedo St., Makati City, Philippines 1229. We are the personal information controller for the data in Core 360.

Our Data Protection Officer is Kenneth Montales, kenneth.equitas@gmail.com, +63 968 879 4478.

• Team members (broker-owner, brokers, agents, team leaders, assistants): name, display name, email, mobile, photo, position, team, PRC license or accreditation number and validity, DHSUD accreditation, supervising broker, birthday (month and day), date joined, digital signature, license and ID documents you upload, CPD records, notification settings, and sign-in records (time, device and browser, IP address, registered devices).
• Clients and leads (buyers, tenants and the people who inquire for them): name, mobile, email, the property or requirement they asked about, budget and preferences, the platform they used, notes from conversations, follow-ups, viewings and feedback, offers and deal details, and how and when they agreed to be contacted.
• Property owners and their representatives: name, company, mobile, email, preferred messaging platform, and the property's documents, such as the title (TCT/CCT), tax declaration, real property tax receipts, owner's ID, special power of attorney or secretary's certificate, and signed authority to sell or lease.
• Co-brokers and other agents: name, brokerage, mobile, email and the listings or clients they shared with us.

Some of these are sensitive personal information under the law, such as government-issued ID numbers and documents. We collect them only when a transaction needs them.

From the person directly, or through the channels they used to reach us (for example WhatsApp, Viber, Facebook Messenger, Lamudi, Rentpad, Carousell, phone calls and email), from property owners and their representatives, from co-brokers, and from public listings we research for a client.

• To answer inquiries, match clients with properties, follow up, arrange viewings, and prepare offers and contracts: to take steps you asked for and to perform our agreements (RA 10173, Section 12(b)).
• To market properties for their owners, keep the authority to sell or lease, and report activity to owners: our agreement with the owner, and our legitimate interests as a brokerage (Section 12(b) and 12(f)).
• To send follow-up messages and viewing reminders: with the person's consent. Core 360 records how consent was given (implied by their own inquiry, said yes, or in writing), when, and by whom (Section 12(a)).
• To keep records the law requires, for example for taxes, licensing and anti-money laundering rules that apply to real estate brokers (Section 12(c)).
• For team members: to manage accounts, access, supervision, commissions, statements and CPD (our working relationship, Section 12(b) and 12(f)).
• Sensitive personal information (such as IDs) only with consent or as needed for the transaction and to establish or defend legal claims (Section 13(a) and 13(f)).

• Core 360 is invite-only. Each person sees only what their role needs, and the database enforces this.
• All agents can see the office's listings, but an owner's name, contact details and documents are visible only to the listing's agents, their Team Leader and supervising broker, the Admin, and assistants the agent allows. Floor plans, lot plans, building rules and photos are shared with the whole office.
• Agents see the leads assigned to them. Admins see all; assistants see the leads of the agents they work for.
• We share client and owner details with the other side of a transaction, co-brokers, building administrators, lawyers and government offices only as the transaction needs.

• Supabase (database, sign-in and private file storage), in its Singapore region.
• Vercel (runs the app online), in its Singapore region.
• Resend (sends the app's automatic emails, such as invitations, password resets and reminders), a United States company sending from its Tokyo region: the recipient's name and email address, and the content of those emails.
• Google, only for a team member who connects their own account: sending emails from their Gmail, adding events to their Google Calendar, and saving files to their Google Drive. Calendar events may include a client's name and the property.
• Anthropic (AI features, United States): when someone uses an AI tool, only the text or picture needed for that task is sent, for example a contact screenshot to read the name and number, a lead's notes to write a label, or a listing's facts for a caption or market analysis. Owner names are not included in public-facing captions. Under Anthropic's Commercial Terms, it may not train its models on this data, and it processes the data under its Data Processing Addendum. Anthropic deletes it within 30 days, unless it must keep it longer to enforce its usage policy (up to 2 years for content its safety systems flag) or to comply with the law.

Using these providers means some data is stored or processed outside the Philippines. We use providers bound by contract to protect it.

• Leads, clients, listings and their documents: while active, then for 5 years after the last transaction or contact, unless the law requires longer. Records are archived rather than deleted, and the Admin can delete them for good.
• Sign-in, audit and document-access logs: 3 years.
• A team member's account: while they work with us; on leaving, the account is turned off and their open leads and listings are handed over.

• Invite-only accounts with two-step sign-in, and registered devices that can be removed at any time.
• Access rules for every role, checked by the database, not only by the screens.
• Files are kept in private storage and open only through short-lived links. Every upload, view and deletion of a property document is recorded.
• An audit log of changes, and a sign-in log. Data travels encrypted (HTTPS); Google connections are stored encrypted.

Under the Data Privacy Act you have the right to be informed, to access your data, to object, to have it corrected, to have it erased or blocked, to data portability, to be indemnified for damages, and to file a complaint. You can withdraw your consent to follow-up messages at any time; tell your agent or our Data Protection Officer.

To use these rights, contact our Data Protection Officer, Kenneth Montales, at kenneth.equitas@gmail.com. We may ask you to confirm your identity. If you are not satisfied with our answer, you may complain to the National Privacy Commission.

We will post any change here with its date. For questions, contact our Data Protection Officer or the REMAX Core office at +63 920 921 0935 or info@remaxcore.ph.

See also the Terms of use.