Data Privacy Statement – Under Construction
1. Introduction
ExpressPay Inc. (“we,” “us,” or “our”) is committed to protecting your personal data and upholding your privacy rights in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations. This Data Privacy Statement explains how we collect, use, store, share, and safeguard your personal information when you engage with our services, including PaLoad, Pabayad, Padala, and Atbp. transactions.
2. Scope of the Data Privacy Statement
This statement applies to all personal data collected by us from individuals (“data subjects”) through our branch-facing systems, online platforms, and mobile applications.
3. Personal Data We Collect
We may collect the following types of personal data:
- Full Name
- Contact Information (e.g., mobile number, email address)
- Government-issued Identification (ID Type, ID Number)
- Address and Proof of Address
- Financial Information (Transaction Amounts, Source of Funds)
- Transaction Details (Bill Type, Reference Number, Service Type)
- Additional data as required by regulatory authorities
4. Purpose of Data Collection
We collect your personal data for the following purposes:
- Transaction Processing: To facilitate PaLoad, Pabayad, Padala, and Atbp. transactions.
- Compliance with Laws: To adhere to Anti-Money Laundering Act (AMLA) requirements and other regulatory obligations.
- Fraud Prevention: To verify customer identity and prevent unauthorized transactions.
- Wallet Creation: To establish customer accounts and provide seamless services.
- Service Improvement: To enhance customer experience and operational efficiency.
5. How We Use Your Personal Data
We use your personal data only for legitimate business purposes, including but not limited to:
- Verifying your identity for KYC (Know-Your-Customer) compliance.
- Processing transactions securely and efficiently.
- Ensuring compliance with AML/CFT (Combating the Financing of Terrorism) regulations.
- Monitoring transaction limits to avoid exceeding AMLA thresholds.
- Providing customer support and responding to inquiries.
6. Data Sharing and Disclosure
We do not share your personal data with third parties except as required by law or with your consent. Situations where data sharing may occur include:
- With regulatory bodies such as BSP, AMLC, and other government agencies for compliance and reporting.
- With authorized service providers who assist in transaction processing and wallet creation.
- When required by law, court order, or legal process.
7. Data Retention and Disposal
- We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected or as required by law.
- Data collected for KYC compliance is stored securely for a minimum of five (5) years as mandated by AMLC guidelines.
- Upon expiration of the retention period, data will be disposed of through secure and irreversible means to prevent unauthorized access.
8. Security Measures
We implement industry-standard security measures to protect your personal data, including:
- Data Encryption: Protecting data in transit and at rest.
- Access Control: Ensuring only authorized personnel can access your data.
- Regular Audits: Monitoring data access and processing activities.
- Data Anonymization: Where applicable, to reduce privacy risks.
9. Your Rights as a Data Subject
As a data subject, you have the right to:
- Access: Request access to your personal data and obtain a copy.
- Correction: Rectify inaccurate or incomplete personal data.
- Erasure: Request deletion of personal data if no longer necessary.
- Portability: Obtain a copy of your data in a portable format.
- Object: Decline processing of your data for certain purposes.
- Complain: File a complaint with the National Privacy Commission (NPC) if your data privacy rights are violated.
10. How to Contact Us
For questions, concerns, or requests related to your personal data, please contact us at:
- Email: dataprivacy@expresspayinc.ph
- Phone: +63 917-802-0370
- Address: 7th Floor, Jafer Place # 19 Eisenhower Street Greenhills, San Juan 1504
11. Changes to This Data Privacy Statement
We may update this Data Privacy Statement from time to time. Any changes will be posted on our official website and, where appropriate, notified to you via email or system notification.
By using our services, you acknowledge that you have read, understood, and agreed to the practices described in this Data Privacy Statement.
ExpressPay Inc. March 5, 2025