Privacy Policy of LaunchPad Nexus Workspace

Effective Date: 27 April 2026

1. Introduction and Company Information

This Privacy Policy explains how LaunchPad Nexus Workspace (“we,” “us,” or “our”) collects, uses, stores, discloses, transfers, and protects personal information in connection with our startup-office and workspace services, including office space inquiries, memberships, bookings, visitor management, events, billing, customer support, website interactions, and related business operations.

We are committed to protecting personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable guidance issued by the National Privacy Commission of the Philippines.

Data Controller / Operator: LaunchPad Nexus Workspace
Address: Unit 4B, 3rd Floor, The Podium West Tower, ADB Ave, Ortigas Center, Pasig City, 1605 Metro Manila, Philippines
Email: [email protected]
Phone: +63 2 8828 7604

2. Data Collection and Processing

We may collect and process the following categories of personal information, depending on your interaction with us:

• Identity and contact information: full name, email address, phone number, company name, job title, and mailing address.
• Account and membership information: login credentials, membership type, booking history, preferences, and service usage details.
• Payment and billing information: invoice details, payment status, transaction references, and limited payment-related data necessary for processing.
• Visitor and access information: visitor logs, entry/exit records, access card or pass details, and security-related records.
• Communications: inquiries, feedback, support requests, correspondence, and records of meetings or calls.
• Technical and usage data: IP address, device identifiers, browser type, pages visited, timestamps, and cookies or similar technologies used on our website.
• Event and marketing information: event registrations, attendance details, preferences, and consent-based marketing interactions.
• Security and compliance data: CCTV footage, incident reports, and other records necessary for safety, fraud prevention, and legal compliance.

We generally collect personal information directly from you, from your organization, from authorized representatives, from our website, from payment processors, from service providers, and from publicly available or lawful sources where appropriate.

We do not intentionally collect sensitive personal information unless it is necessary for a lawful purpose, such as security, access control, legal compliance, or where you have provided valid consent or another lawful basis applies.

3. Purpose of Data Processing

We process personal information for the following purposes:

• to provide and manage workspace, office, membership, booking, and related services;
• to verify identity, manage access, and maintain security within our premises;
• to communicate with you regarding inquiries, reservations, billing, support, and service updates;
• to process payments, issue invoices, and manage accounts receivable and records;
• to administer events, promotions, and community activities;
• to improve our services, website, operations, and customer experience;
• to comply with legal, regulatory, tax, accounting, and reporting obligations;
• to protect our rights, property, personnel, clients, and visitors;
• to detect, investigate, and prevent fraud, unauthorized access, misuse, or other unlawful activity;
• to send marketing communications where permitted by law and, where required, with your consent;
• to manage disputes, claims, and enforcement of agreements.

4. Legal Basis for Processing

We process personal information only when we have a lawful basis under applicable law. Depending on the context, our legal bases may include:

• Consent: where you have given clear and informed consent, such as for certain marketing communications or optional data collection.
• Contractual necessity: where processing is necessary to enter into, perform, or manage a contract with you or your organization.
• Legal obligation: where processing is required to comply with Philippine laws, regulations, lawful orders, or regulatory requirements.
• Legitimate interests: where processing is reasonably necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms.
• Protection of life and safety: where processing is necessary to protect your vital interests or those of another person.
• Performance of a public function or lawful mandate: where applicable.

Where we rely on consent, you may withdraw it at any time, subject to legal and contractual limitations.

5. Data Sharing and Third Parties

We may disclose personal information to third parties only as necessary and in accordance with applicable law. These may include:

• Service providers: IT hosting providers, email and communications platforms, payment processors, accounting and bookkeeping providers, security providers, and customer support tools.
• Professional advisers: lawyers, auditors, consultants, and insurers.
• Business partners: event collaborators, co-working ecosystem partners, and affiliated service providers, where relevant to your use of our services.
• Government authorities and regulators: when required by law, subpoena, court order, or lawful request.
• Other parties: where necessary to protect our rights, enforce agreements, investigate fraud, or respond to emergencies.

We require third parties that process personal information on our behalf to implement appropriate confidentiality, security, and data protection measures and to use the information only for authorized purposes.

6. Data Transfer to Third Countries

Some of our service providers or systems may be located outside the Philippines. As a result, your personal information may be transferred to, stored in, or accessed from countries or jurisdictions that may have different data protection laws.

When we transfer personal information outside the Philippines, we take reasonable and appropriate steps to ensure that the transfer is lawful and that the recipient provides a level of protection consistent with applicable data privacy requirements. These steps may include contractual safeguards, vendor due diligence, security controls, and other lawful mechanisms.

7. Storage Duration

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.

• Contract and membership records: retained for the duration of the relationship and for a reasonable period thereafter for audit, legal, and operational purposes.
• Billing and accounting records: retained in accordance with applicable tax, accounting, and regulatory requirements.
• Security records: retained for a limited period necessary for safety, incident handling, and investigation, unless needed longer for legal claims or compliance.
• Marketing data: retained until you withdraw consent, unsubscribe, or object, subject to lawful retention requirements.
• Website and technical logs: retained for a limited period for security, analytics, and troubleshooting purposes.

When personal information is no longer needed, we will securely delete, anonymize, or dispose of it in accordance with our retention and disposal procedures.

8. User Rights

Subject to applicable law, you may have the following rights regarding your personal information:

• Right to access: to obtain confirmation of whether we process your personal information and to request a copy of it.
• Right to rectification: to request correction of inaccurate, incomplete, or outdated information.
• Right to erasure or blocking: to request deletion or blocking of personal information where legally permissible.
• Right to restriction: to request that we limit the processing of your information in certain circumstances.
• Right to data portability: to receive certain personal information in a structured, commonly used, and machine-readable format, where applicable.
• Right to object: to object to processing based on legitimate interests or to direct marketing, where applicable.
• Right to be informed: to know how your personal information is collected, used, and shared.
• Right to damages: to seek compensation for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal information, subject to law.

To exercise your rights, please contact us using the details in Section 12. We may require verification of your identity before responding to your request. We will respond within the timeframes required by applicable law and may decline requests where permitted by law.

9. Withdrawal of Consent

Where our processing is based on your consent, you may withdraw that consent at any time by contacting us or using any unsubscribe or preference-management mechanism we provide.

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. In some cases, we may still process your personal information where another lawful basis applies, such as compliance with legal obligations or performance of a contract.

10. Right to Complain

If you believe that your privacy rights have been violated or that we have not adequately addressed your concerns, you may contact us first so we can investigate and attempt to resolve the issue.

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines or other competent authority, subject to applicable procedures and requirements.

11. Data Security

We implement reasonable and appropriate organizational, physical, and technical security measures designed to protect personal information against accidental or unlawful destruction, alteration, disclosure, access, use, or other processing.

• access controls and role-based permissions;
• confidentiality obligations for personnel and contractors;
• secure storage and transmission practices;
• network and endpoint protection;
• visitor and premises security measures, including access management and CCTV where applicable;
• regular review of security practices and vendor safeguards;
• incident response procedures for suspected data breaches.

While we strive to protect personal information, no method of transmission over the internet or electronic storage is completely secure. You are encouraged to take precautions when sharing information online.

12. Contact Information

If you have questions, requests, or concerns regarding this Privacy Policy or our handling of personal information, please contact:

LaunchPad Nexus Workspace
Unit 4B, 3rd Floor, The Podium West Tower, ADB Ave, Ortigas Center, Pasig City, 1605 Metro Manila, Philippines
Email: [email protected]
Phone: +63 2 8828 7604

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any changes will be posted on our website or otherwise communicated to you as appropriate.

The updated policy will take effect on the date stated in the revised version unless otherwise required by law. We encourage you to review this Privacy Policy periodically.

By using our services, visiting our premises, interacting with our website, or otherwise providing personal information to LaunchPad Nexus Workspace, you acknowledge that you have read and understood this Privacy Policy.