We Take Your Privacy Seriously.

We are committed to protecting your personal data throughout its entire lifecycle—from collection and processing to storage and secure disposal. Our privacy practices comply with the provisions of Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR).

National Privacy Commission (NPC) Seals and Certificates

Banana Leaf Asian Café Inc. DBA Nanyang Kopitiam has received NPC Seals and Certificates of Registration in recognition of the successful registration of our DPO and DPS:

Our Privacy Policy

At Nanyang, we value and respect your privacy. This Privacy Policy explains how we collect, use, process, share, and protect your personal data when you transact with any of our restaurants, access or use this website (including its pages), or interact with our official social media platforms.

We are committed to safeguarding your personal information in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations. We believe that transparency in our data privacy practices helps build and maintain the trust of our customers, employees and applicants.

Information We Collect

Depending on your interaction with Nanyang, we may collect personal information that you voluntarily provide through registrations, service requests, transactions, promotions, inquiries, or employment applications.

1. 1 In-Store Transactions

1.1.1 When you dine at or transact with our restaurants, we may collect the following personal information to process your transactions, respond to your feedback, or comply with applicable legal and regulatory requirements, including the processing of Senior Citizen (SC) and Person with Disability (PWD) discounts:

• Full name
• Address
• Contact number
• Feedback or comments you voluntarily submit
• Signature
• Senior Citizen (SC) or Person with Disability (PWD) Identification Card and the information contained therein, when required by law
• Payment method details necessary to process your transaction

1.2 Contacting Our Customer Service Team

1.3.1 When you submit an inquiry, request, or feedback through nanyang.com.ph/contact/, we collect, process, and store the following information to respond to your concerns and continuously improve our products and services:

• Name
• Email address
• Mobile number
• Any additional information you voluntarily provide through the message field on our website

1.3 Employment Applications

1.4.1 If you apply for employment opportunities with Nanyang, whether through our website or other recruitment channels, we collect and process your personal information to evaluate your application and determine your suitability for available positions.

Where permitted by law, we may also share your personal information with authorized third-party service providers for employment verification and background checks as part of our recruitment process.

The information we may collect includes:

• Name
• Email address
• A copy of your cover letter, résumé or curriculum vitae (CV), and/or portfolio, which may contain the following information:
  • Full name
  • Date of birth or age
  • Contact number
  • Home address
  • Email address
  • Educational background
  • Employment history and work experience

1.4 User-Generated Content – we may collect and process content that you voluntarily post or upload on our website, mobile applications, or official social media pages, including but not limited to photos, comments, reviews, and other materials.

1.5 Communications – we may collect and process communications between you and the appropriate Nanyang representative in connection with our products and services. These communications may include, but are not limited to:

• Service-related emails
• SMS or text messages
• Mobile application notifications
• Account verification messages
• Updates to our products, services, or website features
• Technical, security, and administrative notices

1.6 Closed-Circuit Television (CCTV) – or the safety and security of our customers, employees, visitors, and property, CCTV systems are installed in our restaurants and office premises. These systems may record video footage and capture images of individuals who enter areas covered by our CCTV cameras.

1.7 Processing of Personal Data Without Consent – We may process your personal data without your consent where such processing is permitted or required under Sections 12 and 13 of the Data Privacy Act of 2012, its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC).

Analytics information:

1.8 We use analytics tools to help us understand how visitors interact with our website. These tools collect information transmitted by your device, including:

• Pages you visit
• Browser and device information
• Website usage and navigation data
• Add-ons, cookies, and similar technologies
• Other technical information that helps us measure website traffic and usage trends

The information collected is used to analyze website performance, improve user experience, enhance our services, and maintain the security and functionality of our website. Where possible, analytics data is aggregated or anonymized and is processed in accordance with applicable data privacy laws.

1.09.1 Cookies -When you visit our website, we may use cookies and similar technologies, such as pixels, web beacons, and local storage, to collect information about how you access and use our website and services. These technologies help us improve website functionality, enhance your browsing experience, analyze website traffic, and personalize content where appropriate.

1.09.2 By using our website, you acknowledge that we may engage advertisers and other authorized third-party partners to display advertisements on our behalf. These partners may use cookies and similar technologies, subject to applicable laws, to deliver relevant advertisements, measure the effectiveness of advertising campaigns, and improve the services they provide.

Where required by applicable law, the use of non-essential cookies and similar technologies will be subject to your consent, and you may manage your cookie preferences through your browser settings or our cookie management tools, where available.

1.10 Log file information:

1.10.1 Collection of Log Information -When you visit our website, your browser automatically sends certain information to our servers. Log file information may also be collected when website content is downloaded to your browser or device.

1.10.2 Types of Log Information Collected – Our servers automatically record certain technical information, which may include:

• Internet Protocol (IP) address
• Browser type and version
• Web requests
• Referring and exit pages or URLs
• Domain names
• Landing pages
• Pages viewed
• Number of clicks
• Interactions with links on our website
• Device and browser information
• Other similar technical and diagnostic information

We may also collect similar information from emails that we send to you, such as whether an email has been opened or whether links contained in the email have been clicked. This information helps us evaluate the effectiveness of our communications, improve our website and services, enhance user experience, and maintain the security and performance of our systems.

How We Use Your Information

1.11 In addition to the specific purposes described in the preceding sections, we may use the personal information we collect to:

• Help you securely access your account and information after signing in.
• Remember your preferences and information so that you do not have to re-enter them during future visits to our website or applications.
• Provide personalized content, recommendations, advertisements, and other marketing communications from Nanyang, its affiliates, subsidiaries, and authorized business partners, where permitted by law.
• Provide, maintain, improve, test, and monitor the effectiveness of our products and services.
• Develop, evaluate, and introduce new products, services, and features.
• Monitor website and business performance metrics, including visitor traffic, purchase frequency, and demographic trends.
• Enhance and improve your overall dining and customer experience.
• Diagnose, troubleshoot, and resolve technical issues affecting our systems or services.
• Establish, verify, and authenticate your identity where necessary.
• Protect and secure our website, information systems, facilities, and other business assets.
• Detect, investigate, prevent, and address fraudulent, unauthorized, or illegal activities.
• Comply with applicable laws, regulations, court orders, and other legal obligations.
• Perform other necessary business processes, including data sharing and related activities required to fulfill our contractual obligations, provide our services, support our legitimate business operations, and comply with legal requirements.
• Evaluate and process employment applications and other recruitment-related activities.
• Monitor and enforce compliance with Nanyang’s internal policies, procedures, standards, and codes of conduct.
• Conduct transaction verification, internal reviews, client audits, third-party audits, and other compliance-related assessments.
• Protect the security, confidentiality, integrity, and availability of personal data, customer information, and Nanyang’s data, systems, property, facilities, and premises.

How We Protect Your Personal Data

We safeguard the confidentiality, integrity, and availability of your personal data to prevent loss, improper use, unauthorized access, alteration, disclosure, destruction, and any other unlawful processing. We implement reasonable technical, organizational, and physical security measures. However, we cannot absolutely guarantee against risks involving personal data processing, whether in storage or in transit, as there is no computer system that is 100% secure.

How Long We Keep Your Information

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required to comply with applicable legal, regulatory, contractual, and legitimate business requirements. Once your personal data is no longer necessary for these purposes, it will be securely disposed of or anonymized in accordance with our records retention and disposal policies and applicable laws.

Your Rights as a Data Subject

Subject to the limitations provided under the Data Privacy Act of 2012 and other applicable laws, you have the following rights with respect to your personal data:

• Right to Object
• Right to Access
• Right to Rectification
• Right to Erasure or Blocking
• Right to Damages
• Right to Lodge a Complaint
• Right to Data Portability
• How to Contact Us

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our legal, regulatory, operational, or business requirements. Any updates will be posted on this website and will become effective upon publication unless otherwise stated.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal data.