Privacy Statement

We, at Penbank, Inc., are committed in providing the highest level of security and confidentiality regarding
the collection and use of your personal information.
As part of this commitment, we have developed this privacy statement as an overview of
how we handle your personal information.

How we collect your personal information:

a. We collect your personal information manually in our branches and business
units.

We collect your information when you transact with us. This includes submission of
application and identification documents upon account opening, loan application,
remittance transactions, and over-the-counter transactions.

b. We collect your personal information through e-mail.

We collect your information when you file a complaint through our complaint
handling e-mail helpdesk@penbank.com.ph.
However, we will never ask for sensitive information such as passwords, credit card
numbers, or confidential account information in an e-mail. If you do receive an
e-mail requesting for this kind of information, don’t reply. If you think the e-mail is
legitimate, contact us by phone, mail or visit our nearest branch to confirm.

c. We collect your information through call/SMS.

We collect your information through call/SMS for marketing purposes.

The personal data that we collect:

In choosing our products and services, the following information shall be collected from
you during the course of our engagement:

a. Complete name and other personal information such as address, gender,
birthdate, birthplace, marital status, citizenship, name and occupation or spouse,
and number of dependents.
b. Contact details such as mobile number, telephone number, and e-mail address
c. Financial details such as source of funds, employment status, and accounts with
other banks
d. Employment details such as name of employer/business, address of employer,
address of employer, position/rank
e. Business details such as name of the business and address of the business
f. Specimen signatures and photos submitted to us
g. Government ID details
h. Images via CCTV which may be observed when visiting our branches and other
business units.

How we use, store, and share your personal data:

Penbank use, process, share, and disclose your personal information to third parties, in
accordance with laws and regulations, and for the following purposes:

a. To effectively deliver our products and services and carry out your transactions with
us;
b. To comply with the reporting requirements of the Government and other regulatory
bodies and reporting requirements prescribed by law; and
c. To inform you of our new products and services and other promotions.

We ensure that we use and process your personal information for legitimate purposes and
not for reasons violative of laws, regulations, public policy, and public morals.

Please also be aware that we do not ask for your personal information through our
Facebook page due to security reasons. Complaints or concerns received through the
channel shall be referred to your maintaining branch or the branch nearest you.

How long we retain your personal data:

In order to maintain integrity and confidentiality, we implement physical and technical
controls in safekeeping documents that contain personal information. Accounts are
retained or stored as long as they are active, closed accounts are retained for five (5) years
from the date of closure or for a period required by law, whichever comes later.

We place physical controls by ensuring that all documents containing your personal
information are kept in a locked and secured storage. Further, our technical controls
include encryption and authentication.

The rights available to you as data subjects:

As data subjects, you are entitled to the following rights:

a. Right to be informed
You have the right to be informed of your rights as data subject, of what personal
information is collected from you, how it is collected, used, stored, and disposed.

b. Right to Access
You have the right to access your own personal information and information about
the following:

i. Contents of personal information and categories that were processed;
ii. Sources where the personal information was obtained and disclosed;
iii. Purpose for processing and disclosure;
iv. Date when your personal information was last accessed and modified.

c. Right to Object
As data subjects, you have the right to object to the processing of your personal
information when you do not conform to the changes or amendments to the terms
and conditions that you previously consented to or when you do not conform to
using your personal information for marketing purposes.

d. Right to Erasure/Blocking
As data subjects, you have the right to request the removal or destruction of your
personal information from our physical filing and computer systems. However, we
can deny such request for erasure/blocking if it is within the instances provided for
by the National Privacy Commission (NPC).

e. Right to Damages
You have the right to be indemnified for damages sustained when your rights as
data subject were violated through inaccurate, incomplete, false personal
information, or unlawfully obtained, or unauthorized use of your personal
information.

f. Right to Rectify
You have the right to dispute any inaccuracy or error in your personal information
and require us to rectify it immediately, provided that such dispute for correction is
not unfounded, vexatious, or unreasonable.

g. Right to Data Portability
As data subjects, you have the right to obtain a copy of your personal information in
an electronic means and in a structured and commonly used format.

h. Right to File a Complaint
As data subjects, you have the right to file a complaint with the National Privacy
Commission (NPC) when your rights have been violated, or you feel that your
personal information have been unlawfully obtained, improperly disposed, or used
without proper authorization.

For more information on your rights as data subjects and how and when it could be
exercised, please visit https://privacy.gov.ph/data-subject-rights/

Data Protection Officer
Should you have any inquiries or clarifications as to our Data Privacy Statement, you may
contact our Data Protection Officer at dpo@penbank.com.ph.

Last updated: March 2024
We may amend our Data Privacy Statement to align our policies and procedures with any
changes in relevant laws and regulations in relation to data privacy. Any amendments shall
be posted to our website.