Maintaining your privacy is an important part of the products and services that we provide. This Privacy Statement, hereafter referred to as “Statement”, explains how we collect, protect, use, and share information when you access our websites and/or apply for and avail of our products and services.

This Statement outlines the general practices of the Rural Bank of Itogon(Benguet), Inc. (“RBI”) in relation to our processes and content which are made available through our network of websites, our online and mobile applications, and social media pages (collectively referred to as “websites”). This Statement also covers the privacy practices for our customers who apply for and obtain products and services from us, such as, but not limited to, deposits, loans, Western Union Money Transfer, POS, RuralNet, and other such products and services that the Bank may offer from time to time.

Our Privacy Practices

The privacy practices described in this Statement are primarily intended for individuals in the Philippines and are designed to comply with the Data Privacy Act of 2012 (R.A. 10173) and its implementing rules and regulations. When accessing our websites and/or availing of our services from outside the Philippines, you acknowledge and agree that your information may be transferred to and processed in the Philippines following legal and regulatory standards for data protection that may differ from your current or home jurisdictions.

What We May Collect From You

When you apply for or avail of any product or service that RBI offers or when you interact with our employees, authorized representatives, agents and service providers, we collect your personal information so that we may provide valuable and useful content and services and to offer you additional products and services. Personal information is any data that can be used to identify a person. This may include, among others:

• your name and personal particulars such as contact details, address, birthdate, education;
• specimen signatures;
• government ID details;
• financial information (such as income, expenses, balances, investments, tax, insurance, financial and transaction history, income, etc);
• employment details;
• business interests and assets;
• images via CCTV and other similar recording devices and processes which may be observed when visiting our offices and/or using our other facilities;
• voice recordings of our conversations with you

We may, as and when necessary, seek to verify or augment these information with third-party entities including government regulators, judicial, supervisory bodies, tax authorities or courts of competent jurisdiction and, in the process, gain additional information about you.

In the course of availing our products and services, we also collect information about your transactions and dealings which include your account activities, movements and interactions with third parties such as merchants and utility companies.

When you access our websites, we may provide information about us as well as information regarding our products and services. In the course of using our network of websites and electronic platforms, we may collect non-personal information such as those provided by your device which may include the IP address, operating system, browser type and version, and other machine identifiers. We may track your location if you use our location-based content such as branch locators. We may likewise use web analytics tools, including those of third parties’, that use cookies to collect anonymous information and data generated in connection with your activities when you visit the pages and our network of websites.

We may also collect, use and keep your personal opinions or comments made known to us via feedback or responses to surveys or any other interaction that you had with our employees, authorized representatives, agents and service providers.

If the client provides RBI with any Personal data relating to a third party (for example, information of his/her spouse, children, parents, or a connected person), by submitting such information to RBI, the client represents that he/she have obtained the consent of the third party to the client providing us with his/her Personal Data for the respective purposes. “Connected Person” may include but is not limited to any beneficial owner, authorized signatory, director, shareholder, officer of a company, partner or member of a partnership, settlor, trustee, beneficial owner, power of attorney holder, surety, third party security provider, provider of funds, founder and/or employee, payee of designated payment, representatives, agents or nominees.

The client should ensure that Personal Data submitted to the bank is complete, accurate, true and correct. The client agrees to inform RBI immediately of any change of facts or circumstances which may render any information or Personal Data previously provided inaccurate, untrue or incorrect and provide any information or documentation as RBI may reasonably require for the purposes of verifying the accuracy of the updated information or Personal Data.

How We Use Your Information

We use the information collected to deliver and provide the products and services that you have availed to:

• approve, facilitate, administer and process applications and transactions;
• respond to inquiries, requests, complaints, feedback and suggestions;
• verifying identity and customer due diligence;
• send you statements, billings, notices and other such documents necessary for continued use of our products and services;
• conduct studies and researches for the purpose of reviewing, developing and improving our products and services;
• perform profile analysis, behavioral modeling and analytics to understand needs, preferences and market trends to be able to improve and recommend suitable products and services;
• to reach out to you regarding products and services information, including offers, promotions, discounts, rewards; and for personalizing your experience with our various touchpoints such as branches, email, messaging and other channels;
• determine the effectiveness of our marketing efforts and initiatives;
• provide location-based services such as finding the nearest branch to you;
• perform certain protective safeguards against improper use or abuse of our products and services including fraud prevention;
• comply with our operational, audit, administrative, credit and risk management processes, policies and procedures, the terms and conditions governing our products, services, facilities and channels, the Bangko Sentral ng Pilipinas rules and regulations, legal and regulatory requirements of government regulators, judicial, supervisory bodies, tax authorities or courts of competent jurisdiction, as to the same may be amended or supplemental from time to time
• To comply with applicable laws of the Philippines, the laws on the prevention of money laundering including the provisions of Republic Act No. 9160 (Anti-Money Laundering Act of 2001, as amended (AMLA) and the implementation of know your customer and sanction screening checks;
• comply with legal and regulatory requirements such as submission of data to credit bureaus, credit information companies, the Credit Information Corporation (CIC) (pursuant to RA No. 9510 and its implementing rules and regulations) responding to court orders and other instructions and requests from any local or foreign authorities including regulatory, governmental, tax and law enforcement authorities or other similar authorities;
• perform other such activities permitted by law or with your consent.

How We May Share Your Information

• We may share personal information with various units within RBI in order to better understand the way you use our products and services. This will allow us to improve our services and offer you opportunities to obtain such other useful products and services that may deliver greater value to you.
• We may share your personal information with our affiliates and third parties, under an obligation of confidentiality. We may share with third parties that we engaged to support us in delivering our services to you. These may involve anonymous or aggregated information to help improve our products, services, and content. We may also engage third parties to help us operate our business. These include support in:
  • complying with legal requirements such as court orders;
  • enforcing our terms of use including, among others, our rights as creditor to customers availing of our loan products, or such other applicable policies with respect to the services that we provide;
  • addressing fraud, security or technical issues, to respond to an emergency or otherwise to protect the rights, property or security of our customers or third parties;
  • to carry out all other purposes set out above.
• We may transfer, store, and/or process your personal data outside the Philippines. In doing so, we will comply with the Data Privacy Act and its Implementing Rules and Regulations.
• We wish to assure you that we do not, and will not, sell personal data to any third parties. All our engagements with third parties shall be fully compliant with our obligation of confidentiality imposed on us under the applicable agreements and/or terms and conditions or any applicable laws that govern our relationship with you.

How We Protect Your Information

We fully recognize the value of your personal information particularly as it may include sensitive personal information such as your gender, government-issued IDs, etc. Appropriately, we strive to maintain the confidentiality, integrity and availability of your personal information by employing physical, technological and procedural safeguards. We train our employees to properly handle your information. Whenever we engage other companies to provide services for us, we require them to protect personal information aligned with our own security standards.

How Long Do We Keep Your Information

Subject to applicable requirements of the DPA and other relevant laws and regulations (BSP, AMLA, PDIC), Personal Data shall not be retained by the Company for a period longer than necessary and/or proportionate to the purposes for which such data was collected.

You Have Rights

Under RA10173, people whose personal information is collected, stored, and processed are called data subjects. Every Data Subject has Data Privacy Rights under RA 10173 (see Annex 5 for complete details):

1. The Right to Be Informed
2. The Right to Access
3. The Right to Object
4. The Right to Erasure or Blocking
5. The Right to Damages
6. The Right to File a Complaint
7. The Right to Rectify
8. The Right to Data Portability

In respecting your rights to privacy, you may opt to tell us:

1. not to send you marketing materials via email;
2. not to share your information with our subsidiaries and affiliates or with other companies that we have business with provided that such information is not critical nor required by applicable laws and regulations in maintaining the services that you have availed with us;
3. to provide you with information that we currently have about you subject to restrictions applied to us as a bank and a company operating in the Philippines by certain laws and regulations;
4. to update your information; The client should ensure that personal data submitted to the bank is complete, accurate, true and correct. The client agrees to inform RBI immediately of any change of facts or circumstances which may render any information or Personal Data previously inaccurate, untrue or incorrect and provide any information or documentation as RBI may reasonably require for the purposes of verifying the accuracy of the updated information or personal data.
5. about your other concerns relating to how we collect, use, share, protect or dispose your information.

We may charge a fee for processing your request/s for access and/or update. Such a fee depends on the nature and complexity of your request. Information on the processing fee will be made available to you prior to making the request.

How To Contact Us

For any queries, clarifications or requests on any aspect of this Statement, the exercise of your rights pertaining to your personal information or to provide any feedback that you may have about our processing of personal information, please visit any of our branches. You may also email us at dataprivacy@rbitogon.com which is manned during business hours. You may also write our Data Privacy Officer at:

DATA PRIVACY OFFICER

Rural Bank of Itogon(Benguet), Inc. 1993 Public Market Building, Km. 5, Pico La Trinidad, Benguet 2601 Philippines

Note: Personal appearance of the client in any of the bank’s branches and extension offices is required for client’s information to be updated, corrected or erased. (See Annex 6 - Personal Data Correction Form)

Changes to Our Privacy Statement

We may modify or amend this Privacy Statement from time to time to keep up with any changes in relevant laws and regulations applicable to us or how we collect, use, protect, store, share or dispose of your personal information. Any relevant updates will be posted on the RBI website.