Data Privacy Notice

1. What Information We Collect

We collect personal and sensitive information that is necessary to provide our services, which may include:

• Personal Identification: Name, date of birth, gender, nationality, civil status, beneficiaries (including date of birth and relationship), referrals
• Contact Details: Home address, mobile number, email address
• Government-issued IDs: TIN, SSS/GSIS, PhilHealth, UMID, National ID
• Financial Information: Income source, credit history, employment details, bank accounts (if required)
• Medical Records (for healthcare services): Health history, diagnoses, confinements
• Biometric Information: Signatures, fingerprints, or photos (if required)
• Business Information (for partners): Authorized representatives, SAMULCO ID

2. Why We Collect Your Information

Your personal data is collected for the following purposes:

• Savings & Credit Services: Member enrollment, account management, loan evaluation and approval, collection, and remittance, surveys and research
• Healthcare Services: Membership verification, service availments, claims processing, and coordination with healthcare providers
• Business Transactions: Due diligence, contract processing, and partner engagement
• Regulatory Compliance: Reporting to government agencies such as CDA, BIR, AMLC, PhilHealth, etc.
• Member Support and Communication: Updates, advisories, service notifications
• Risk Management and Internal Controls: Audit, fraud prevention, dispute resolution

3. How We Collect Your Information

We may collect your information through:

• Membership or loan application forms (physical or digital)
• Online platforms and mobile applications
• Interviews and membership interactions
• Business transactions and partnerships
• Referrals and authorized third parties
• Cookies and web analytics (for online users)

4. Who We Share Your Data With

We may share your information with:

• Government regulators (CDA, BIR, AMLC, DOH, etc.)
• Insurance and healthcare providers
• Credit bureaus and collection agencies
• Legal representatives and auditors
• Business partners with data sharing agreements
• Technology service providers (e.g., core banking system, IT security)

5. How We Protect Your Data

SAMULCO applies reasonable and appropriate organizational, physical, and technical security measures, including:

• Access control and authentication systems
• Secure filing and archiving systems
• Encrypted storage and transmission
• Regular privacy audits and training
• Policies on data access, retention, and disposal

6. Your Rights as a Data Subject

Under the Data Privacy Act, you have the right to:

• Be informed about the processing of your data
• Object to or withdraw consent at any time
• Access, correct, or update your personal information
• Data portability (obtain a copy in a structured format)
• Erasure or blocking of data no longer necessary
• File a complaint with the National Privacy Commission (NPC)

7. Data Retention

Your personal data will be retained only as long as necessary for the fulfillment of its declared purpose, or as required by law, after which it shall be securely disposed of or anonymized.