Privacy Statement
We at RCBC Capital Corporation respect and value your privacy. We believe that you are entitled to know how we use and protect your personal information. We give this notice to inform you of the ways in which we process your personal information and the means by which you can control, to a certain extent, these processes.
While this notice is intended mainly for our individual clients, we stress that we handle and protect the information of our corporate clients in the same manner that we handle and protect the information of individuals.
Who is providing this notice?
As the personal information controller under Republic Act No. 10173 or the Data Privacy Act of 2012, we give this notice to inform you of your rights and our obligations under the law.
What personal information do we collect?
The types of personal data that we collect depend on the product or service that you avail or intend to avail from us, including but not limited to:
- Full name;
- Nationality;
- Place and date of birth;
- Present and permanent address;
- Employment or business information;
- Contact details, including telephone number and email address;
- Source of funds or income;
- TIN, SSS or GSIS number;
- Copy of identification document/card;
- Banking information (where applicable);
- Latest billing proof of address (where applicable); and
- Other information necessary to provide you with the product or service that you avail.
Additional personal data that we collect over the course of our relationship with you
Over the course of our relationship, we may collect data about you including but not limited to your transactions, account history and information.
Personal data that we collect as authorized or required by law
We also collect information about you when required or authorized by law. For example, we require your personal data to verify your identity under Republic Act No. 9160 or the Anti-Money Laundering Act of 2001, as amended and its Implementing Rules and Regulations.
How do we collect your personal data?
There are many ways that we get information from you. We might collect your information when you fill out a form with us, when you give us a call, or when you drop by our office. We may also collect your information via the following:
- In applications, emails and letters to us, in customer surveys, during financial reviews and interviews.
- Information that we receive from our subsidiaries and affiliates, and from or through other entities (i.e. issuers, registrar, paying agent, underwriters, selling agents, brokers dealers) whether in the course of providing products and services to you or otherwise.
How do we collect and manage your sensitive personal information?
The Data Privacy Act considers the following information as sensitive:
- Race, ethnic origin, marital status, age, color, and religious, philosophical or political affiliations;
- Health, education, genetic or sexual life of a person, proceeding for any offense committed or alleged to have been committed by such person; and
- TIN, SSS/GSIS number, health records, licenses, tax returns, etc.
Unless allowed or required by law or regulation, we will only collect your sensitive information with your consent.
When will we notify that we have received your information?
When we receive your personal information, we will take reasonable steps to notify you on how and why we collected your information, who we may disclose it to and how you can access it, seek correction of it or file a complaint. This notice is already included in the form or document (i.e. Application to Purchase, Customer Relationship Form) that you filled out and submitted to us.
When we receive your personal data from third parties, we will take reasonable steps to notify you of the circumstances of that collection upon your request.
How do we take care of your personal data?
We store information in paper and electronic formats. The security of your personal data is important to us and we take reasonable steps to protect it from misuse, interference, loss, unauthorized access, modification, and unauthorized disclosure by establishing and enforcing:
- Confidentiality requirements and data privacy training of our employees;
- Document storage security policies;
- Security measures to control access to our systems and premises;
- Limitations on access to personal data;
- Electronic security systems, such as firewalls and data encryption of our websites and mobile applications; and
- Strict selection of third party data processors and partners (where applicable).
We may store your personal data physically or electronically with third party data storage providers. When we do this, we use contractual arrangements to ensure those providers take appropriate measures to protect that information and restrict the uses to which they can put that information.
What happens when we no longer need your information?
We will only retain your information for as long as necessary for the purpose for which they were collected or as required by law and regulation. We will destroy your personal data when its retention is no longer required by purpose, law or regulation.
How and why do we use your personal data?
We use your personal data for various reasons, mainly:
- To comply with laws and regulations (for Know Your Customer or client identification);
- To carry out our obligations arising from contracts entered between you and us;
- To conduct our business purposes (to process your transactions and maintain your account).
Collecting your personal data allows us to provide you with the products and services you request, this means we can also use your information to:
- Consider your request for products and services, including eligibility; and
- Process your application.
Will we use your personal data for marketing our products and services?
With your consent, we may use your personal data to let you know about products and services that we believe may be of interest to you, including products and services from our related companies.
Such marketing activities may be via mail, telephone, SMS, email, or any other electronic means. We may also market our products to you through third party channels (such as social media sites), or via other companies who assist us to market our products and services.
You can let us know at any time if you no longer wish to receive direct marketing offers.
With whom do we share your personal data?
Sharing with government agencies
To comply with legal and regulatory mandates, we submit required information to government agencies, like the Bangko Sentral ng Pilipinas, Bureau of Internal Revenue, Securities and Exchange Commission and Anti-Money Laundering Council.
Sharing with other persons and entities
To consummate the products or services you availed, we submit the necessary information to the issuer, registrar, paying agent, trustee, clearing agency, exchange, issue manager, underwriters and selling agents.
Only after obtaining your consent, we may also disclose your information to third parties for marketing, cross-selling, records storage and other specified legitimate purposes. In instances where your information is shared with third parties, we will ensure that we only share your data with entities that can demonstrate sufficient organizational, technical and physical security measures that can and will protect your personal data.
Sharing with credit reporting bodies
Pursuant to Republic Act No. 9510 or the Credit Information System Act, we may disclose your personal and other relevant information to the Credit Information Corporation in connection with your application for and availment of a credit facility with us. This information may include data on your creditworthiness. With your permission, we may also share such information with other credit bureaus authorized by the Credit Information Corporation.
How do you access or correct your personal data?
Unless there are practical, contractual and legal reasons why we cannot process your request, you have the right to ask for a copy of any personal information we hold about you, as well as to ask for it to be corrected if you think it is wrong. To do so, please email our Customer Assistance Officer at rcapcustomerassistance@rcbc.com.
Requests, complaints and/or data privacy concerns
For your requests, complaints and/or privacy concerns, you can contact the following officers:
Customer Assistance Officer
Email: rcapcustomerassistance@rcbc.com
21/F Tower, 2, RCBC Plaza, 6819 Ayala Avenue, 0727 Makati City
Data Protection Officer
Email: rcapdataprivacy@rcbc.com
21/F Tower, 2, RCBC Plaza, 6819 Ayala Avenue, 0727 Makati City
You may also contact:
National Privacy Commission
5th Floor Delegation Building, PICC Complex, Roxas Boulevard, Pasay, Metro Manila
Email: info@privacy.gov.ph or
complaints@privacy.gov.ph
