Statement of Policy
We are committed to protecting and respecting your privacy rights under Republic Act No. 10173 (the “Data Privacy Act”) and applicable rules and regulations. This Privacy Policy sets out how Farmbank, Inc. (A Rural Bank) (“Farmabank”, “we”, “us”, “our”) along with its respective shareholders, directors, officers, employees, agents, representatives, consultants, and advisors (collectively, “Related Parties”) work with you to ensure that your data is protected throughout all your transactions with us.
Who does this policy apply to?
This Privacy Policy applies to (i) all persons accessing our website, (ii) communicating with us through our website, platform, or electronic mail, (iii) users and owners of Farmbank accounts, products and services, (iv) persons inquiring about banking products and services with us whether through our website or through electronic mail, (v) persons
What data do we collect?
We use a variety of personal data types and sources reasonably necessary to provide you with our products and services. The types of personal information we may collect will depend on the nature of your interaction with us and where and how we collect the information, but may include (but are not limited to):
1. Your name
2. Your government-issued personal identification numbers;
3. Your contact information (e.g.email, mobile phone number, landline number, residential and office address);
4. Any information that, if linked to other information about you, may personally identify you (e.g., your civil status, geographical location, photos, social media handles, professional qualifications or affiliations, etc.);
5. Your transaction documents and business history with your business partners; and
6. Other information as we may need from time to time.
Why do we collect data?
We will collect your data based on any of the following:
1. Consent you have given to us (whether verbal, written, or clicking a tick-box expressing your consent)
2. Necessary to perform our contractual obligations with you
3. To allow us to comply with legal requirements, such as but not limited to laws, rules, or regulations, especially those mandated by the Bangko Sentral ng Pilipinas and other relevant regulations
4. Legitimate interest as defined under the Data Privacy Act
How do we collect data?
We collect your data whenever you provide them to us, such as when you:
1. Open an account with us through our website by filling out the account opening form
2. Voluntarily send your data to us via email, in writing, through the telephone, or in person
3. Request us for information on our products and services
4. Provide feedback
We may also receive your data indirectly from the following sources:
1. Your duly authorized representative, if any
2. Other publicly available sources of information
If you are giving us personal information as a representative of other persons, you represent and warrant that you secured the consent of other persons before sharing their personal information to us. You also agree that you will indemnify us from any liabilities, damage, claims, costs, charges, and demands of whatever kind or nature in connection with or arising from sharing such personal information to us.
How do we use your data?
The data we collect shall be determined according to the nature of your relationship with us. It shall include data to validate your identity, fulfill our contractual obligations, perform transactions, provide services, customer care and support. The purposes for which we use personal information include (but are not limited to):
1. Complying with know-your-customer (“KYC”) and customer due diligence requirements under applicable laws, rules, and regulations;
2. Complying with applicable laws and regulations;
3. Improving customer service and engagement or provide ongoing support;
4. Complying with our contractual obligations with third parties;
5. Protecting your account/s with us; and
6. Developing and marketing new products and services that may be of interest to you.
If we collect your personal information to be used for any other purpose, we will let you know that purpose at the time we collect the information.
Who has access to data we collect?
Your data shall only be accessed by authorized personnel of Farmbank who are required to know your data based on their role.
What are your rights?
We would like to make sure that you are fully aware of all your data protection rights. You are entitled to the following:
1. Right to be informed - You have the right to be informed whether your personal data shall be, are being, or have been processed, including the existence of automated decision-making and profiling.
2. Right to access - You have the right to obtain confirmation on whether or not data relating to you are being processed.
3. Right to object - You shall have the right to object to the processing of your personal data where such processing is based on consent or legitimate interest.
4. Right to erasure or blocking - You have the right to request for the suspension, withdrawal, blocking, removal, or destruction of your personal data from our system.
5. Right to damages - You have the right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data, taking into account any violation of your right and freedoms as a data subject.
6. Right to file a complaint - You have a right to file a complaint with the National Privacy Commission if you feel that your personal information has been misused, maliciously disclosed, or improperly disposed, or that any of your data privacy rights have been violated.
7. Right to rectify - You have the right to dispute the inaccuracy or error in your personal data and have us correct the same within a reasonable period of time.
8. Right to data portability - You have the right to obtain from us a copy of your personal data and/or have the same transmitted from us to another person, in an electronic or structured format that is commonly used.
Data Retention
We are required by law to keep some types of data for a certain period of time. If there is no longer any need to retain your data, we will destroy or de-identify or anonymize the data. We will only retain your data for as long as necessary to fulfill the purposes for which they have been collected or for as long as may be required or allowed by applicable laws and regulations.
How do we protect your data?
We implement reasonable and appropriate organizational, technical, and physical measures to protect your data. Any disclosure we make shall be done so on a strictly need-to-know basis only. We can provide you confirmation on what data about you we process, upon your written request. Please note that data review and reproduction may have associated costs that will be for your sole account.
Other Websites
To the extent that our websites may contain links to sites operated by third parties or organizations, those linked websites are not controlled by us and we are not responsible for the data privacy practices or activities of the site operators. Before disclosing your personal information on any linked website or mobile app, we recommend that you examine the data privacy policies, notices, and terms and conditions of use of the website or mobile app.
Changes to this Privacy Policy
We reserve the right to update this Privacy Policy from time to time. Please carefully read the updates to know how the changes in this Privacy Policy may affect you.
Contact Us
In accordance with applicable laws and regulations, you may request access to, or correct your personal information held by us, or inquire about our data protection policies and practices. For queries or concerns on data privacy, please contact our Data Protection Officer at dataprotection@farmbankph.com