PRIVACY NOTICE
Republic of the Philippines — Data Privacy Act notice · Template v0.2.0
Bayanihan Digital Services, Inc. ("we", "us", or "our") respects your privacy and processes your personal data under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. This notice explains what we collect, why, who receives it, how long we keep it, and what rights you have.
This notice applies to customers and website visitors. It takes effect on October 1, 2026 (Version 1.0).
1. Who we are and how to reach us
Bayanihan Digital Services, Inc. is the personal information controller. Our address is 18/F One Ayala Tower, Ayala Avenue, Makati City 1226.
Our Data Protection Officer is Andrea M. Reyes, who can be reached at dpo@bayanihan.example or +63 2 8555 0100.
2. The personal data we collect
We collect identity details, contact details, financial and payment information, purchase and transaction history, messages and support communications and device, cookie, and online identifiers. We get it directly from you and our website forms and cookies.
Examples: Name, email address, mobile number, billing address, payment reference, support messages, and browser and device identifiers.
3. Why we use your data and our legal basis
We use your personal data to provide our products or services, process payments, give customer support, comply with the law, protect security and prevent fraud, send marketing and analyze and improve our service. We rely on different lawful bases depending on the purpose, as explained below.
We use your details to provide and bill for the service because it is necessary for our contract with you. We keep tax records because the law requires it. We use security and fraud checks under our legitimate interest in protecting the service. We send marketing only if you have agreed.
We send you marketing only if you have agreed, and you can withdraw that agreement at any time.
We use your data only for these purposes, only as far as they need it, and we do not use it in ways that are incompatible with them.
4. Who receives your data
We share your data with service providers acting for us, payment processors and government authorities where the law requires. Cloud hosting and email providers, our payment processor, and government agencies when the law requires.
Some data is stored or processed outside the Philippines. Our email and hosting providers store some data in data centers in Singapore. We require them to protect it with safeguards comparable to those of the Data Privacy Act. We remain accountable for the data we transfer.
5. Automated processing and cookies
We do not make decisions about you using only automated processing or profiling.
Our website uses cookies and similar tools. Essential cookies keep you signed in. Analytics cookies measure how the site is used and are set only if you agree.
6. How long we keep your data and how we protect it
Account details are kept while your account is open and for five years after it closes for tax and legal purposes. Support messages are kept for two years. Marketing preferences are kept until you withdraw consent.
We protect your data with access controls, encryption, staff training and incident response procedures, and we limit access to those who need it. If a personal data breach affects you, we will notify you and the National Privacy Commission as the law requires.
7. Children
We do not knowingly collect personal data about children. If you believe we have, please contact our Data Protection Officer.
8. Your rights
Under the Data Privacy Act you have the right to be informed; to object to processing, including for marketing; to access your personal data; to correct it; to have it erased or blocked in the cases the law provides; to obtain a copy of your data in a commonly used electronic format where we process it electronically and in a structured format on the basis of your consent or a contract with you; to claim compensation for damages from inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your data; and to withdraw consent where we rely on it. Your lawful heirs and assigns may exercise these rights after your death or if you are incapacitated (Data Privacy Act, Section 17).
To exercise a right, contact our Data Protection Officer using the details above. We will respond within 15 days. If you are not satisfied, you may file a complaint with the National Privacy Commission.