CLIENT PRIVACY NOTICE

VILLARICA puts utmost value in the decades of trust that our clients have placed in us. It is our mission to preserve this trust by protecting the privacy and security of your personal data. In order to provide you with quality services, it is necessary for VILLARICA to collect and process your personal data for the purposes stated in this notice.

By affixing your signature on the relevant customer information form for your chosen transaction, you signify that you have read and consent to the terms of this privacy notice.

1. PERSONAL DATA COLLECTED AND PROCESSED.

   VILLARICA collects and processes different categories of personal data from the documents you submit to us depending on your chosen transaction.

   1. For processing, renewal and redemption of loans: Name, Address, Birthdate, Birthplace, Contact Details, Civil Status, Height, Weight, Nature of Work, Name of Employer, Loan Details, Details of Pawned Article, Signature/Thumbmark, Name of Authorized Representative, Signature of Authorized Representative, Copy of Government ID.
   2. For purchase of auctioned items: Name, Address, Birthdate, Birthplace, Contact Details, Civil Status, Height, Weight, Nature of Work, Name of Employer, Signature, Copy of Government ID.
   3. For the cash remittances: (For both Sender and Receiver) Name, Address, Birthdate, Birthplace, Nationality, Contact Details, Civil Status, Height, Weight, Occupation/Position Level, Name of Employer/Business Name, School Name, Source of Funds, Signature, Copy of Government ID, Date of Transaction, Relationship between Sender and Receiver, Purpose of Transaction, Originating Country, Destination Country, Remittance Details. (For Receiver) Bank Account Number of Receiver and/or check number issued to Receiver.
      *Except for Villarica Cash Padala, all information is collected and processed on behalf of your chosen remittance provider.
   4. For GCash Transactions: GCash mobile number, Name, Address, Birthdate, Birthplace, Gender, Marital Status, Contact Details, TIN, Scanned Copy of Government ID, Nationality, Source of Funds, Nature of Work, Name of Company/Business/School, Signature.
      *Information is collected and processed on behalf of GCash.
   5. For foreign exchange transactions: Name, Address, Date and Time of Transaction, Birthdate, Birthplace, Nationality, E-mail Address, Government ID, Mobile Number, Amount of Transaction, Purpose of Transaction, Source of Foreign Currency, Signature, Serial Number of Notes
   6. For Bayad Center transactions: (For bills payment) Name, Address, Biller, Date of Transaction, Amount Due, Due Date, Statement of Account/Invoice Number, Statement Date, Account Number. (For government contributions) Government ID number, Payment Type, Payor Type, Loan Account Number, Loan Type, Applicable Months, Contribution per Month. (For bills payment and government) Payment method, Check Number, Bank, Branch, Credit Card Number, Expiry Date of Credit Card, Signature, Reference Number
      *Information is collected and processed on behalf of Bayad Center
   7. For load transactions: Name, Amount, Service Provider, Cellphone, Signature, Trace Number

   The legal basis of the data processing depends on the specific context. We are required to process your personal data pursuant to the relevant contract entered into between VILLARICA and the client, and where we have a legal obligation, e.g. KYC procedures pursuant to BSP requirements. The processing may be also necessary to safeguard our legitimate interests for the purposes of creating financial reports, investigating fraud, improving our operational processes, and other related purposes. Furthermore, we process your data if you have expressly consented to the processing in question

   Your personal data may be processed on paper or through computer media. You may inform us of the specific personal data you do not want to be processed. We will respect your request in so far as it is feasible to fulfill the purposes for which the personal data was collected. Where you have provided us with the persona; data of individuals other than yourself, you warrant that you have obtained their consent for the disclosure, in accordance with applicable privacy laws. VILLARICA is the personal information controller except when otherwise indicated in this notice.

2. PURPOSES
   

   Your personal data shall be processed for the following purposes:

   1. To process your requested transaction;

   2. To communicate with you regarding your requested transaction;

   3. To conduct KYC procedures pursuant to Philippine anti-money laundering and foreign exchange laws and regulations;

   4. To comply with statutory and regulatory requirements, including directives, issuances by, or obligations of VILLARICA to any competent authority, regulator, supervisory body, enforcement agency, exchange, court, quasi-judicial body or tribunal;

   5. To conduct company audits or investigate a complaint or security threat;

   6. To enable VILLARICA to exercise sound corporate governance over its businesses, ensure that risks arising therefrom are duly identified, measured, managed and mitigated, and enhance risk assessment and prevent fraud;

   7. To conduct direct marketing activities;

   8. To establish, exercise, or defend legal claims; and

   9. To perform other such activities permitted by law or with your consent.

   VILLARICA will not process your personal data in ways incompatible with the above-stated purposes without prior notice.

3. TRANSFERS AND DISCLOSURES
   

   Depending on your own transaction, your personal data may be disclosed to VILLARICA’s partners, affiliates, subsidiaries. Service providers, and authorized third parties such as government agencies for the following purposes:

   1. To process your requested transaction, your personal data will be disclosed to the relevant partner service provider, who may also use your personal data for direct marketing activities;

   2. To comply with statutory and regulatory requirements, your personal data will be disclosed to the relevant government agency;

   3. To respond  to law enforcement authority or other government regulatory bodies’ request;

   4. To conduct audits, including operational, risk, compliance, financial, and anti-fraud and corruption audits, and/or investigate a Complaint or Security Threat, your personal data may be disclosed to third party service providers;

   5. To comply with VILLARICA’s business and management responsibilities and policies, which are necessary for the organizational functioning of VILLARICA, your personal data may be disclosed to our partners, subsidiaries, affiliates, and/or third-party service providers;

   6. To prevent physical harm or financial loss, your personal data may be disclosed to our partners, subsidiaries, affiliates and/or third-party service providers;

   7. To establish, exercise, or defend legal claims, your personal data may be disclosed to our partners, subsidiaries, affiliates, and/or third-party service providers; and

   8. To perform other such activities permitted by law or with your consent.

   Where your personal data is collected and processed by VILLARICA on behalf of another identity, your data shall also be subject to their separate privacy policies. These may be accessed online or through the forms provided by the entity relevant to your transaction.

4. DATA RETENTION AND STORAGE
   Your personal data shall be retained by VILLARICA for five (5) years or for as long as the purposes for which they are being processed have not been satisfied. Tax related documents shall be retained for ten (10) years. VILLARICA will retain and use your personal data as necessary to comply with its legal obligations, resolve disputes, and enforce its agreements. Hardcopy documents shall be stored in vaults inside the pawnshop premises. Digital documents shall be stored in secure cloud storage and in VILLARICA’s encrypted services.
   
   
5. DATA SUBJECT RIGHTS
   Please submit all data subject rights-related requests through the VILLARICA Data Subject Request Form. 

   As a data subject, you have the following rights in relation to your personal data: (a) The right to access personal information; (b) The right to make corrections to personal information (c) The right to object to the processing of personal information (d) The right to erasure or blocking of personal information (e) The right to be informed of the existence of processing of personal information (f) The right to damages (g) The right to lodge a complaint before the National Privacy Commission (h) The right to data portability.

   When VILLARICA is acting as a personal information controller, you can exercise your rights of access and request corrections, objection, erasure or blocking, information, and data portability by submitting your request directly with VILLARICA through the VILLARICA Data Subject Request Form. We will respond to your request within 30 days. If we are unable to honor your request or need more time, we will provide you with an explanation.

   When VILLARICA is acting as a personal information processor, and you wish to exercise your rights of access and request corrections, objection, erasure or blocking, information, or data portability, VILLARICA will direct you to the relevant personal information controller.

6. CHANGES TO POLICY
   This Privacy Notice may be amended from time to time. Any such changes will be posted on this page.
7. CONCERNS AND QUESTIONS
   In case of complaints, concerns, or questions regarding the processing of your personal information, or if you wish to exercise your data subject rights, you may address them to:

Data Protection Officer
VILLARICA Pawnshop
H&L Bldg.
Gen. Romulo Ave. corner Gen. Malvar Ave.,
Araneta City, Cubao
Quezon City, Philippines 1109
villarica.dataprivacy@villaricapawnshop.com