Orico Auto Finance Philippines Inc.

Privacy Policy Statement

As of April 30, 2024

 

The Orico Auto Finance Philippines Inc. (“OAFP”, the “Company”, or “We”) is committed to protecting and respecting your personal data privacy in compliance with the R.A. No. 10173, or the Data Privacy Act of 2012.

We ensure the free flow of information to promote innovation and growth of OAFP’s business. We adopt the generally accepted international principles and standards for personal data protection as we recognize the vital role of information and communications technology in the operation of the Company’s business and its inherent obligations to ensure that your personal data are secured and protected.

Your Rights

You are entitled to the following rights:

1. Right to be informed whether your personal data shall be, are being, or have been processed, including the existence of automated decision-making and profiling.

 

2. Right to object to the processing of your personal data, including processing for direct marketing, automated processing, or profiling, unless the processing of information is required by a legal obligation.

 

3. Right to reasonable access to, upon demand, the content of your personal data that were collected, processed, and shared, including the details of personal data modifications.

 

4. Right to dispute the inaccuracy or error in your personal data and to request the Company to correct it immediately and accordingly.

 

5. Right to suspend, withdraw, or order the blocking, removal, or destruction of your personal data from the Company’s filing system.

 

6. Right to claim indemnification for any damages sustained due to such inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data, taking into account any violation of your rights and freedom.

 

7. Transmissibility of rights, that means your lawful heirs and/or assigns may invoke your rights, at any time when you are already incapacitated or incapable of exercising your rights.

 

8. Right to data portability, where your personal data is processed by electronic means and in a structured and commonly used format, you shall have the right to obtain from OAFP a copy of such data in an electronic or structured format that is commonly used and allows for your further use.

 

Collection of Your Personal Data

We may collect your personal data that may include your personal information and sensitive personal information for a declared, specified, and legitimate purpose. We shall secure first your consent before collecting any personal data, provided that the determination of purpose has been declared before your consent and that the same has been confirmed after the data collection. You shall also be informed about processing your personal data, whether automated processing for data profiling or processing for direct marketing and data sharing.

“Personal information” shall refer to any information, whether recorded in a material form or not, from which your identity is apparent or can be reasonably and directly ascertained by the Company, or when put together with other information would directly and certainly identify your identity.

 

“Sensitive personal information” shall refer to your personal information that may include, but is not limited to the following:

 

1. Information about your race, ethnic origin, marital status, age, color, and religious, philosophical or political affiliations;
2. Information about your health, education, the genetic or sexual life of a person, or any proceeding for any offense committed or alleged to have been committed by such individual, the disposal of such proceedings, or the sentence of any court in such proceedings, if any;
3. Data or information issued by the government agencies peculiar to you as an individual citizen which includes, but is not limited to, social security numbers, previous or current health records, licenses or their denials, suspension or revocation, and tax returns; and
4. Information, specifically established by an executive order or an act of Congress to be kept classified, if any.

 

Processing of Your Personal Data

We shall allow the processing of your personal data only if it adheres to general data privacy principles such as transparency, legitimate purpose, and proportionality.

1. Your personal data shall be processed fairly and lawfully.

We shall process your personal data in accordance with the Data Privacy Act to ensure your data privacy and security of safeguards. Processing of your personal data includes upholding your rights to know the nature or intended purpose and the extent of the processing with sufficient information. Given this process’ transparency, you still have the right to refuse, withdraw the consent, or collect personal data.

2. Use of Personal Information

We shall ensure that the processing of your personal data must be kept proportioned and aligned with the intended purposes of the data collection. This information enables OAFP to properly address the applications, inquiries, and requests, to forward them to appropriate internal units for action and response, and to provide clients with appropriate updates and advisories in a legitimate format and in an orderly and timely manner.

3. Criteria for Lawful Processing of Personal Information

We shall process your personal information only if the following conditions are met:

1. You have given your consent prior to the collection, or as soon as practicable and reasonable;
2. The processing involves your personal information as a party to a contractual agreement, in order to fulfill obligations under the contract or to take steps at your request prior to entering the said agreement;
3. The processing is necessary for compliance with a legal obligation to which OAFP is the subject;
4. The processing is necessary to protect your vitally important interests, including your life and health;
5. The processing of your personal information is necessary to respond to national emergency or to comply with the requirements of public order and safety, as prescribed by law;
6. The processing of your personal information is necessary for the fulfillment of the constitutional or statutory mandate of a public authority; or
7. The processing is necessary to pursue the legitimate interests of OAFP, or its third party or parties to whom your data is disclosed, except where such interests are overridden by your fundamental rights and freedom, which require protection under the Philippine Constitution.

 

4. Processing of Sensitive Personal Information and Privileged Information

We prohibit the processing of your sensitive personal and privileged information, except in any of the following cases:

1. You have given your consent prior to the processing of your sensitive personal information or privileged information, which shall be undertaken pursuant to a declared, specified, and legitimate purpose;
2. The processing of your sensitive personal information or privileged information is provided for by existing laws and regulations: Provided, that said laws and regulations do not require your consent for the processing, and guarantee the protection of your personal data;
3. The processing is necessary to protect your life and health or that of another person, and you are not legally or physically able to express your consent prior to the processing;
4. The processing is necessary for medical treatment: Provided, that it is carried out by a medical practitioner or a medical treatment institution, and an adequate level of protection of personal data is ensured; or
5. The processing concerns sensitive personal information or privileged information necessary for the protection of lawful rights and interests of natural or legal persons in court proceedings, or the establishment, exercise, or defense of legal claims, or when provided to government or public authority pursuant to a constitutional or statutory mandate.

 

Retention of Your Personal Data

We shall ensure that your personal information is securely and properly disposed of after it has served its purpose to prevent further processing, unauthorized access, or disclosure to any other party or the public, or prejudice your interests as the data subject. We shall also keep your personal data as long as necessary, such as in the following cases:

1. for the fulfillment of the declared, specified, and legitimate purpose, or until when the processing relevant to the purpose has been terminated;
2. for legitimate business purposes, consistent with the standards and regulations followed in the auto financing industry; or
3. retention of your personal data shall be allowed in cases provided by law.

 

Disclosure and Sharing of Your Personal Data

 

1. Disclosure

We shall maintain the confidentiality and secrecy of all personal data that come to our knowledge and possession, even after the resignation of our employees, termination of contract, or other contractual relations. Personal data under the custody of the Company shall be disclosed only pursuant to a lawful purpose and authorized recipients of such data.

2. Sharing

The disclosure or the transfer of your personal data to a third party for further processing must comply with the following conditions:

1. Your consent on data sharing must be obtained even when the data is to be shared with the OAFP’s parent company and/or affiliates; and
2. Any data sharing must be covered by a data sharing agreement which shall provide, among others, the data privacy and security standards to be observed.

Security and Protection Measures

We implement reasonable and appropriate physical, technical, and organizational measures for the protection of your personal data. These security measures aim to maintain the availability, integrity, and confidentiality of all the personal data under the custody of the Company and protect them against natural dangers such as accidental loss or destruction, and human dangers such as unlawful access, fraudulent misuse, unlawful destruction, alteration, and contamination. We have our designated Data Protection Officer who ensures that the Company’s security measures are being implemented in accordance with the DPA and other relevant existing laws and regulations.

Data Privacy Concerns

If you think your data has been mishandled in terms of confidentiality or integrity, or if you think your data has been tampered with, contact us through any of our secure channels as follows:

Data Protection Officer

Orico Auto Finance Philippines Inc.
Unit 2104, The Podium West Tower, ADB Ave. corner Julia Vargas St., Ortigas, Mandaluyong City
Telephone Number: (02)8424-0920 Loc.800

 

Regulatory Updates

This Privacy Policy Statement shall be updated to stay aligned with the latest laws and regulations. All changes will be posted on this site.

 

For any questions, clarifications, requests, or feedback on this Statement or how we process your information, you can reach us through our secured channels mentioned above.