BDO GROUP DATA PRIVACY STATEMENT

As your trusted partner, the confidentiality of your information remains a top priority. We shall exert all reasonable efforts to protect it against unauthorized use or disclosure.

How we collect information

We may manually or automatically collect personal data when you:

1. Visit the website of the relevant member of the BDO Group - We may use web analytic tools, including those of third parties, that use cookies to collect anonymous information and data generated from your activities when you visit the website (e.g. perform searches, access internal links).
2. Visit a 3^rd party website and click on advertisements of a member of the BDO Group
3. Enter into a transaction with us
4. Submit your application forms
5. File complaints, inquiries, or requests

Types of personal data  that we may collect:

1. Your name and other particulars such as, but not limited to, contact details, address, birthdate, and educational background
2. Details and photocopies of your government or other IDs, and other digital photos and biometrics captured or submitted in the course of your transactions with us
3. Financial information such as income, expenses, deposits, investments, and credit cards
4. Employment details
5. Images captured via CCTV and other similar recording devices when visiting our offices, and/or using our facilities 
6. Voice recordings of our conversations with you 
7. Information about your transactions with third parties, including merchants and utility companies
8. Non-personal information provided by the electronic device you are using such as the IP address, operating system, browser type and version, and other machine-related identifiers
9. Specimen signatures

How your personal data may be used, stored and shared

Your personal data may be used, stored, processed, shared and disclosed by the BDO Group to its members, as well as third parties (as may be necessary and allowed by law):

1. Legal. For legitimate purposes
2. Transactions. To provide services to you or implement transactions which you request, allow, or authorize
3. Policies and obligations. To comply with the BDO Group’s internal policies and its reporting obligations to governmental authorities under applicable laws
4. Research. When we conduct studies and researches such as automatic and manual profile analysis, behavioral modeling, for the purpose of reviewing, developing and improving our products and services
5. Promotion. When we reach out to you regarding services information, including offers, promotions, discounts, rewards; and for personalizing your experience with our various touchpoints such as branches, call center, telemarketing, email, messaging and other channels
6. As necessitated by third parties or members of the BDO Group:

f.1. To support us in delivering our services and products to you

f.2. To comply with existing laws, rules, and legal processes

f.3. To implement our policies and terms of use including, among others, our rights as lender to client availing of our loan and other credit products, or such other applicable policies with respect to the products and services that we provide

f.4. To address fraud, security or technical issues

f.5. To protect our rights, interests, property or security, and that of our clients and third parties

Emails will not be used to collect personal data

Emails are not entirely safe. We will not use this platform to obtain confidential information from you such as your account numbers, passwords, and credit card numbers.

An authorized representative will get in touch with you should we require confidential or other types of information. We will never ask you to confirm any such information by clicking on a link in an email.

Phishing emails

1. Do not attempt to click on a suggested link to any of the BDO Group’s website – you may access the relevant website directly by typing the URL www.bdo.com.ph in your browser
2. Do not provide confidential information via emails
3. Do not provide confidential information to access the link to any BDO Group member’s website

How long your data is stored with BDO Group

We have put in place appropriate physical, organizational, and technical controls to maintain the confidentiality, integrity, and availability of your personal data.

Your personal data will be stored in a database for no longer than ten (10) years either from your last transaction with any member of the BDO Group or until the expiration of the retention limits set by applicable law, whichever comes later.  After this duration, both physical records and digital files will be disposed.

Your rights under applicable laws

Subject to the requirements, conditions and exemptions under the applicable law and Data Privacy Laws, and payment of reasonable fees, you are entitled to the following rights:

1. To access your personal data, including:

1. The sources from which they were obtained
2. The manner by which such data were processed
3. The reasons for the disclosure of your personal data to recipients, including the names and addresses of recipients thereof
4. The information on automated processes where the data will or likely to be made as the sole basis for any decision significantly affecting or will affect you
5. The date when your personal data was last accessed and modified

2. To dispute any inaccuracy or error in your personal data and require the BDO Group to correct or update the same.
3. To obtain a copy of your personal data in an electronic or structured format for your further use.
4. To suspend, withdraw, or order the blocking, removal, or destruction of your personal data from BDO Group's system, provided such action is not critical nor required by applicable laws and regulation to maintain the products and services that you availed with us
5. To file a complaint with the National Privacy Commission

For a complete reference of your rights under the Data Privacy Act, you may access the National Privacy Commission website at www.privacy.gov.ph.
 

Changes to our Data Privacy Statement

We may modify this Data Privacy Statement from time to time to align with relevant laws and regulations and the BDO Group’s policies and procedures as applicable.  All updates will be posted in our website.

Contact the Data Protection Officer

Inquiries, clarifications, or requests in relation to this Data Privacy Statement may be addressed to the relevant member of the BDO Group’s Data Protection Officer at https://www.bdo.com.ph/data-protection-officer.

This Data Privacy Statement has been updated as of May 2022.