Privacy, Quality and Information Security Policies

Privacy Policy

PETNET, Inc. (“PETNET”) values and protects your data privacy rights under the Data Privacy Act of 2012 (“DPA”), its implementing rules and regulations (“IRR”) and other issuances of the National Privacy Commission (“Commission”) (collectively, the “Privacy Laws”).

This Privacy Policy states how PETNET processes your Personal Data as defined below.

PETNET may update or amend this Privacy Policy at any time, and we will notify you of any changes in this Privacy Policy. We will let you know via email and/or a prominent notice on PETNET’s website, portals, official social media pages, and mobile application (“Platforms”), prior to the change becoming effective and update the “effective date” at the top of this Privacy Policy. PETNET shall procure your consent to abide and be bound by the modified Privacy Policy, as well as your consent to the processing and sharing of your Personal Data for the purposes indicated in the said modified Privacy Policy.

What Personal Data we collect

“Personal Data” refers to personal information, sensitive personal information and privileged information, as defined under the DPA, which we collect from you.

When you visit and/or use our Platforms, we may collect and process certain personally identifiable information that can be used to identify you in accordance with this Privacy Policy: 

  1. your full name; 
  2. valid identification number; 
  3. birth date; 
  4. address; 
  5. telephone/mobile number; 
  6. gender; 
  7. occupation; 
  8. civil status; 
  9. email address; 
  10. source of funds or income; 
  11. age; 
  12. social security identification number; 
  13. loan details (when necessary [e.g., loan account number]);
  14. contact list information (names and contact numbers of persons in your phone’s contact list); and 
  15. other information as may be required by law, regulation, and/or necessary for PETNET to process your transactions.

Other information that may also constitute Personal Data, such as your browser type, operating system, IP address, domain name, number of times and dates you visited the website or accessed the mobile application, and the amount of time you spent browsing through the website or mobile application, may be collected via cookies and other tracking technologies, such as transparent GIF files.

You are responsible for ensuring that all Personal Data which you provide PETNET is complete, accurate, and up to date. 

Consent for processing Personal Data

By (1) accessing, registering, signing in to PETNET’s website, portals, official social media pages, mobile application; and/or (2) executing PETNET’s consent forms for products, services, and applications offered by PETNET, you thereby authorize and consent to the processing and sharing of your Personal Data for the purposes indicated below.

When you provide or give access to Personal Data other than your own, such as contact list information, you warrant that you have obtained the lawful and informed consent of such persons whose Personal Data you disclose to PETNET.

Our purpose for collecting and processing Personal Data

PETNET is the Personal Information Controller under the DPA, which means that it determines what purposes Personal Data it holds will be used for. It may also be that your Personal Data is disclosed to third parties pursuant to a data sharing agreement. In which case, such third parties are also the personal information controllers of your Personal Data.

The collected Personal Data from you will be used and processed by PETNET, its affiliates (the “Aboitiz Group of Companies), and third party service providers we partner with for the following purposes:

  • To allow you to avail of the products, services, and applications offered by PETNET and the Aboitiz Group of Companies;
  • To fulfill our contractual obligations to you;
  • To facilitate and send promotions offered by PETNET and the Aboitiz Group of Companies;
  • To provide customer care and customer service, as well as to resolve complaints and disputes; 
  • To assign a unique Customer Reference Number to each customer and sync information within the PETNET Platforms;
  • To inform you about products and services, provided by PETNET and the Aboitiz Group of Companies or by third parties we partner with, which may be relevant to you;
  • To comply with any applicable law, regulation, legal process and/or government and law enforcement request, including but not limited to “Know Your Customer” processes, customer due diligence, anti-money laundering and anti-terrorist financing related purposes;
  • To perform market research and activities to help determine how to improve services and systems to better serve customers of PETNET and the Aboitiz Group of Companies and find out what services and products will respond to the needs of these customers;
  • To provide information to its customers regarding PETNET’s products and services as well as products and services of other companies belonging to the Aboitiz Group of Companies; 
  • To determine credit scoring for loan products (when necessary)offered by PETNET and the Aboitiz Group of Companies, if any;
  • To prevent, detect, and investigate crime, including fraud and analyzing and managing commercial risks;
  • To facilitate merger and acquisition negotiations involving PETNET or its affiliate and subsidiaries;
  • To fulfill any other purposes directly related to the above-stated purposes.

Data Transfers

PETNET may disclose, upload, and/or transfer your Personal Data to third parties for the purposes indicated above. The following are the third parties to whom your Personal Data may be disclosed in accordance with the above-mentioned purposes:

  1. UnionBank, other banks, and other financial institutions
  2. Other Aboitiz Group companies;
  3. Service Providers;
  4. Remittance and payment partners;
  5. Third Party Partners;
  6. Legal Counsel;
  7. Government Agencies;
  8. Stockholders and business partners;
  9. Law enforcement agencies;
  10. Government regulatory agencies and offices;
  11. Potential investors or target companies in context of mergers and acquisitions deal;
  12. Affiliates and subsidiaries.

PETNET takes all reasonable steps to protect your Personal Data against unauthorized disclosure. We will not sell, rent, share, trade, or disclose any of Your Personal Data to any other party without Your prior written consent, with the exception of personnel or entities within Our organization and any third-party service providers which We engaged, whose services necessarily require the processing of your Personal Information. We may disclose Personal Data to the following:

  • Disclosures to payment partners such as payment gateways, payment aggregators, payment system operators, banks, money services businesses and other financial institutions - to fulfill our Services and obligations to you or to fulfill instructions you made;
  • Disclosure to our contractors and service providers to provide operational services and support and to assist Us in the fulfillment and performance of Our Services and obligations to You;
  • Disclosures to Our auditors, bookkeepers, lawyers, and other consultants;
  • Disclosures to government agencies, law enforcement agencies, or relevant regulatory body in compliance with applicable laws;
  • Disclosures to subsidiaries and affiliates of PETNET and other companies belonging to the Aboitiz Group of Companies;
  • Disclosures to other users and Buyers in order to investigate complaints, prevent fraud, and maintain the integrity and safety of the Services;
  • Disclosures to brands, advertisers, retailers, and service providers for the delivery of advertisements to you of products and services which may be of interest to you;
  • Disclosures to stockholders, current and prospective business partners (with regard to current and future products and services for its customers), potential investors, or target companies - to discuss potential merger and acquisition deals; and
  • Disclosures to any other party whom you have provided your consent for such disclosure.

We will not share Personal Data with third parties not covered by this Policy unless a consent form has been furnished to PETNET by you, and they shall conform with the Data Privacy Act of 2012 and confidentiality requirements. To the extent permissible by law, you agree not to take any action and/or waive your right to take any action against PETNET for the disclosure of your Personal Data in the above circumstances.

Your rights as data subject

As a data subject under the DPA and its IRR, you have the following rights: (1) Right to be Informed – the right to know that your Personal Data has been processed, is being processed, will be processed; (2) Right to Object – the right to object to the processing of your Personal Data, including the right not to participate in any commercial or advertising activities of PETNET; (3) Right to Access – the right to be given reasonable access to your Personal Data that has been processed and the manner by which it is processed; (4) Right to Rectification – the right to have Personal Data updated or any errors in your Personal Data corrected; (5) Right to Erasure or Blocking- the right to ask for suspension, withdrawal, blocking, or removal of your Personal Data from our records, unless this is required for your transactions or is mandated by law to be retained for a lawful period of time; (6) Right to Damages – the right to dames if it is proven that your rights under the DPA and its IRR have been violated; and (7) Right to File a Complaint – the right to complain with PETNET’s Data Protection Officer or the National Privacy Commission if your rights under the DPA have been violated.

Security and retention of Personal Data

We have implemented organizational, physical and technical security measures, policies and procedures intended to reduce the risks of accidental destruction or loss, or the unauthorized disclosure or access to Personal Data which we collect and store on our systems. However, no security system is 100% secure. Therefore, we cannot guarantee that such Personal Data will be absolutely secure.

We may retain Personal Data only for as long as necessary to fulfill or complete the foregoing and other legitimate purposes, to comply with laws, regulations, or lawful court order, or to establish or defend a legal action.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

If you have any questions regarding the processing of your Personal Data, or wish to exercise any or your rights as a data subject including opt out, you may send an e-mail to the Data Protection Officer of PETNET through dpo@petnet.com.ph or contact our 24/7 Customer Service Hotline:(+632) 8737-2482.

You may also lodge a complaint before the National Privacy Commission (NPC). For further details, please refer to NPC’s website: https://privacy.gov.ph/mechanics -for-complaints/

Links to Other Sites

Our Platforms may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or Platforms.

Provision of Insurance and Microinsurance

Through our services, you may apply for an insurance policy with our partner institutions. In cases like these, PETNET acts as a personal information processor of the partner institution.

When you avail of our services to apply for insurance with our partner institutions, or claim your benefits from your insurance policies, we, on behalf of our partner institutions, collect and process your, or your beneficiary’s, personal information to provide you with the services above-stated, particularly:

User

  • Name
  • Birthdate
  • Gender
  • Address
  • Mobile Number
  • Email Address
  • Beneficiaries Names
  • Relationship with Beneficiaries
  • Occupation
  • Documents and information contained therein:
  • Incident, fire or police investigation report (as applicable), date and place of incident, cause, photos of the fire incident or affected body part (as applicable)
  • Death certificate
  • Birth certificate
  • Marriage contract (if married)
  • Postmortem Certificate
  • Clinical record
  • Vital signs chart
  • Medical certificate
  • Medical records /physician’s statement, including operation record of amputation (where applicable)
  • Insured’s valid ID with signature
  • Barangay certificate that the insured is a fire victim (if applicable)
  • Original hospital bills, original official receipts, statements of account of confinement (where applicable)
  • Certificate of Cover
  • Proof or Policy certification that the insured was wearing a helmet at the time of the incident (where applicable)

Benefits Claimant

  • Name
  • Birthdate
  • Gender
  • Address
  • Mobile Number
  • Email Address
  • Relationship with Claimant
  • Contact person’s name and contact number

Your personal data shall be used in relation to your application for an insurance policy with the partner institutions, to assess your application, and for processing of claims on such policy. We transfer your information to the partner institution in order for them to provide you with their services which you avail of.

Validity of Consent

This consent and authorization remain valid and subsisting for a limited period consistent with the purposes above or until otherwise revoked or canceled in writing. You may inform PETNET of the specific Personal Data you do not want to be processed beyond the requested purpose. PETNET will respect your request insofar as it is feasible to fulfill the purpose for which the personal information was collected.

You may address any queries, concerns or requests by furnishing an email to:

Data Protection Officer

For inquiries and concerns, you may address them to Petnet’s Data Protection Officer at East Offices Bldg., 114 Aguirre St., Legaspi Village, Makati City or through email at dpo@petnet.com.ph

Quality & Information Security Policy

We, at PETNET, Inc., are committed to provide financial solutions through fast, secure, convenient, and friendly service to our customers, whether be it through our retail branch network, sales associates, online platforms, or mobile application. Our commitment is rooted in our core values of integrity, teamwork, innovation, responsibility, and friendliness, which guide us in conducting our business. 

To fulfill our commitment to our customers and other stakeholders, our Company has adopted Quality Management System (QMS) and Information Security Management System (ISMS) to promote excellence in the way we do things, within the purview of laws, rules and regulations and other requirements to which we subscribe. 

To ensure integration of our QMS and ISMS into our business processes, we have established this Quality Policy and set measurable quality and information security objectives which are aligned to our strategic directions and to the requirements of our stakeholders. We regularly monitor the effectiveness of the QMS and ISMS, pursue continual improvement, and as necessary, address any gap using collaborative and systematic problem solving. 

To promote and protect the interest of our stakeholders, we take advantage of emerging opportunities and embrace risk-based thinking as part of our shared practices across the organization. 

Our Management Team demonstrate leadership and commitment to quality and information security by communicating to our stakeholders this Policy and the importance of achieving effectiveness of our QMS and ISMS. Our Leaders take accountability of meeting the objectives of the QMS and ISMS by providing necessary resources, by advocating the application of Quality Management principles, risk-based thinking, information security, and continual improvement, and by developing an environment that stimulates learning and fosters engagement of our people. 

At PETNET, Quality and Information Security are everyone’s responsibility.