Privacy Statement

Last Updated : March 28, 2020

Our Privacy Commitment

Philippine Red Cross (PRC) respects our customers’ fundamental right to privacy, and we commit to take great care in safeguarding your personal data. PRC has developed a Privacy Policy that aims to ensure that we adopt and observe appropriate standards for personal data protection in compliance with Republic Act No. 10173 or the Data Privacy Act of 2012 and its implementing rules and regulations.

While our Privacy Policy sets out the general principles that govern the collection, use, and disclosure of our customers’ personal information, we have also developed this Privacy Commitment to inform you more specifically about our privacy practices.

Why we collect your personal information

As users of PRC services, we collect and maintain some basic information about you. We do so only for the following purposes:

To create and nurture a relationship with you, so that we can continuously provide you with our services. For example, when you apply for any of our services, we collect personal information about you that will allow us to validate your identity. Your information may also be used to report and process donations given to PRC.
To improve our products and services. We collect, use, process, and analyze how you use our products and services so that we can understand how to improve them for your benefit.
To understand your needs and preferences so that we can serve you better. Maintaining a record of the products and services that you avail from us allows us to gain a better insight of the kinds of offers that would be relevant to your preferences. From time to time, we may send you product recommendations that we think will interest you.
To continuously improve our business and operations. For example, we analyze user usage of our Services and facilities to help us manage your account, provide customer care activities, monitor the quality and security of the service, train our staff, and plan for future growth.
To assist the Government. We generate statistical insights based on your usage of our network and facilities to assist the Government in planning for healthcare, disaster management, and other similar initiatives. When we can, we aggregate and anonymize this information such that you are never identified as an individual. [Aggregating simply means presenting information in segments or categories like age groups; anonymizing means removing personally identifiable information from the data].
To meet legal and regulatory requirements. We perform such other processing or disclosure that may be required to comply with pertinent laws, rules, or regulations.

Where we get these information

There are several ways we collect information about you.

Information that you personally give us.

Most of the personal information we have are those that you have given us yourself. You provide us personal information when you:

Apply for our services by filling out Application Forms, Subscription Agreements, and other similar or related documents through any of our available channels (online);
Get in touch with us to ask about something, file a complaint or request for service; Take part in our research and surveys;
Become our Partner, Vendor, Contractor or Supplier;
Information we collect during our relationship with you

We also collect information as you use our products and services, like when you:

Use our facilities and services – whether it is Mobile, Fixed, or any of our other products, services, and channels;
Make Donations
Apply as a Volunteer
Use our apps, websites, and self-service channels and portals;

Information we collect from other sources

We also collect personal information about you through other activities such as our research initiatives, when you visit and transact in our centers, when you visit and use our websites and mobile apps such as RC143, and from our subsidiaries, affiliates, and third-party business partners to whom you have given your consent for them to share your information with us.

When we disclose personal information

There are a variety of circumstances where we may need to share some of the information that you have provided to us. In these cases, we ensure that your personal information is disclosed on a confidential basis, through secure channels, and only in compliance with the Data Privacy Act.

We will never share, rent, or sell your personal information to third parties outside of PRC except in special circumstances where you may have given your specific consent for, and as described in this policy.

In some instances, we may be required to disclose your personal information to our agents, subsidiaries, affiliates, business partners and other third-party agencies and service providers as part of our regular business operations and for the provision of our products and services. This means we might share your information with:

Our service providers, contractors, and professional advisers who help us provide our products and services. This includes partner companies, organizations, or agencies, and their subcontractors. For example: our couriers for bill delivery and our customer contact centers for our pre- and post-sales hotline operations;
Our Subsidiaries and Affiliates with whom you have also signed-up with. We do so only for the improvement of each other’s business and operations. For example: we share information to facilitate your service applications with them, resulting in faster approvals;
Other companies to whom you have also given consent for us to share your information with; and
Law enforcement and government agencies, but only when required by laws and regulations and other lawful orders and processes.

For a list of our partners, please visit https://redcross.org.ph

How we protect your personal information

The integrity, confidentiality, and security of your information are important to us. That’s why we strictly enforce our Privacy Policy within PRC and have implemented technical, organizational, and physical security measures that are designed to protect your information from unauthorized or fraudulent access, alteration, disclosure, misuse, and other unlawful activities. These are also designed to protect your information from other natural and human dangers.

We also put in effect the following safeguards:

We keep and protect your information using a secured server behind a firewall, encryption and security controls;
We keep your information only for as long as necessary for us to (a) provide the products and services that you avail from us, (b) for our legitimate business purposes, (c) to comply with pertinent laws, and (d) for special cases that will require the exercise or defense of legal claims;
We restrict access to your information only to qualified and authorized personnel who are trained to handle your information with strict confidentiality.
We undergo regular audits and rigorous testing of our infrastructure’s security protocols to ensure your data is always protected;
We promptly notify you and the National Privacy Commission, when sensitive personal information that may, under the circumstances, be used to enable identity fraud are reasonably believed to have been acquired by an unauthorized person; We let you update your information securely to keep our records accurate.

PRC will not collect, use, or disclose your personal information for any purpose other than those identified in this Commitment, your Service Agreement or our Terms of Service, and any other purpose that you may have given your consent for.

For greater clarity, unless you provide specific consent, we will not:

Share your personal information with or sell it to our business partners and third-party service providers; or
Use your personal information to enable third-party targeted advertisements.

What your choices are

You are afforded certain rights in relation to your personal data under the Data Privacy Act. We would like to ensure that we have your consent to continue to collect, use, and disclose your personal information for the purposes that we have identified. At the same time, we want you to know that you do have choices and can object or withdraw your consent and/or edit your consent preferences at any time.

If you wish to have access to your personal information in our records; or you think that such personal information we have of you is incomplete, not up-to-date, or otherwise inaccurate, you may get in touch with our Data Privacy Officer through the contact details provided below. In some instances, we may request for supporting documents or proof before we effect any requested changes to your personal information.

Name : Alistaire R. Remetir
E-Mail : dataprivacyoffice@redcross.org.ph
Business Address: 37 EDSA corner Boni Avenue, Mandaluyong City 1550

What happens when there are changes in our Policy

From time to time, we may update our privacy policy and practices to comply with changes in applicable laws, to comply with government and regulatory requirements, to adapt to new technologies and protocols, to align with industry best practices, and for business purposes.

You will always be provided notice if these changes are significant and, if we are required by law, we will ensure to obtain your updated consent.

GENERAL CONSENT PROVISIONS

Throughout your use of our services, you agree and allow PRC to use your personal information for the following purposes:

1. To create and nurture a relationship with you.

We collect personal information about you when you apply for our products and services so that we can validate your identity. We use your personal information for products and services and other ancillary purposes that you avail from us.

2. Getting to know you better.

We also collect personal information about you through other activities such as our market research initiatives, when you visit and transact in our stores, when you visit and use our websites and mobile apps such as RC143, and from our subsidiaries, affiliates, and third-party business partners to whom you have given your consent for them to share your information with us. For a list of these partners, please visit redcross.org.ph

3. The improvement of our organization and operations.

We analyze data about how you use our products and services to help us manage your account better, to provide you with customer care activities, to ensure your fair use of our products and services, to monitor the quality and security of our technology, to train our staff, and to plan for our future growth. We do this so that we can continue to provide you with the best experience for the products and services that you avail from us.

4. The improvement of our products and services.

We analyze how you use our products and services so that we can understand how to improve them for your benefit. Our analysis may include some sensitive information about your usage, such as your general location. In all cases, we ensure to aggregate and anonymize this information so that you are never identified as an individual.

5. Sending you announcements and alerts

From time to time, we will send you announcements and alerts that we think is relevant to you. We keep a record of the services that you avail from us so that we can gain a better insight of the kinds of services and information that would be relevant to you. We also analyze the places where you may have used our products and services and use this information to send you exclusive offers available in locations that you may frequent. We communicate these through channels such as SMS, voice calls, and e-mail. You can choose to unsubscribe from these messages anytime. Just let us know.

6. To interact with you on Social Media.

We place advertisements about our events and services on some of the most popular Websites, Social Media, and Search platforms. From time to time, we may share information such as your mobile number, e-mail address, and cookies (from when you visit our websites) with the likes of Facebook and Google, to ensure that advertisements about our services and events are seen by you, as you browse their websites and apps.

7. Compliance with other legal and regulatory requirements.

We perform other activities and disclose data in cases where we are required to do so for us to comply with government laws, rules, or regulations and with other legal processes and orders. There are some instances where we may need to share your information to our subsidiaries and affiliates, agents, business partners and other third-party agencies and service providers. We only share your information to enable us to continue providing you with the products and services that you have availed from us, and as part of our regular business operations that allow us to serve you better.

When you accept this Privacy Policy, you also acknowledge that we may share your information with:

PRC Command Center for our hotline operations;
Our Subsidiaries and Affiliates with whom you have also signed-up with. We do so only for the improvement of each other’s business and operations. For example: we share information about your credit standing to facilitate your service applications with them, resulting in faster approvals;
Other companies to whom you have also given consent for us to share your information with; and
Law enforcement and government agencies, but only when required by laws and regulations and other lawful orders and processes.

For a list of these partners, please visit redcross.org.ph

We would like you to know that your personal data will be kept in our records for as long as you continue to use our products and services, and for a maximum of 5 years after.

The Data Privacy Act of 2012 (Republic Act No. 10173), including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) or the European Union’s “GDPR” and other applicable jurisdictions by their respective competent authorities, provide you rights in relation to the personal data that we have collected about you, including the right to object to certain ways in which we may use your data, the right to access your data at your request, the right to correct any inaccurate or outdated data about you, and the right to erase or remove your data from our records.

PRC respects your right to privacy, and we commit to take great care in safeguarding your personal data. For more information on your rights and how you may exercise them, please contact our Data Privacy Officer through the contact details provided below:

Name : Alistaire R. Remetir
E-Mail : dataprivacyoffice@redcross.org.ph
Business Address: 37 EDSA corner Boni Avenue, Mandaluyong City 1550