PRIVACY POLICY OF CREDIT KAAGAPAY
​I. INTRODUCTION
​​Philippines Cashtrout Lending Corporation (“Credit
Kaagapay”, “our”, “us”, or “we”) and its various official partners
(“Partners”) are committed to protect and respect your rights to your personal data, in compliance with Republic
Act No. 10173 or “the Data Privacy Act of 2012”; related rules, regulations, and issuances of the National
Privacy Commission (“NPC”); and with the adoption of constantly changing commercially acceptable standards for
data protection (collectively, the “Law”).
​Please read our Privacy Statement to know the “whys”, “whats”,
“whens”, “hows”,
and “who’s/’re”, among others, of our Statement for our community’s data protection.
​By expressly providing your consent to our Privacy Statement and
our Terms & Conditions, or by accessing, benefitting from, or using, our varied platforms, whether in print
or via our online software systems, directly or indirectly, such as the latest official build of our Credit
Kaagapay Website at www.kaagapaycredit.com (“Website”) and the latest
versions of our official mobile application (“App”) (collectively, “Platforms”) available on Google Play Store,
Apple App Store, and other similar platforms and other services including but not limited to recording
credit/payment, any mobile or internet connected
device or otherwise (collectively the "Credit Kaagapay
Service"), you hereby acknowledge that you have read, understood, and agree to the terms of our Privacy
Statement, Terms & Conditions, and any other documents that are referred
in this Privacy Statement. You agree to having your data collected, corrected, transferred, stored, retrieved,
used, retained, shared, deconstructed, and/or destroyed in the manner disclosed in this Privacy Statement and
our Terms & Conditions. This Privacy Statement applies to all people and entities accessing our
Platforms.
​
This Privacy Statement (together with our Terms &
Conditions and any other documents referred herein) explains our Statement
regarding the collection, use, retention, disclosure and transfer of your information by Credit Kaagapay.
This Statement forms part and parcel of the Terms of Use for the Credit Kaagapay
Services. Capitalized terms which have been used here but are undefined shall have the same meaning as
attributed to them in the Terms of Use. Users (as defined hereinafter) are requested to read this Statement in
conjunction with the Terms of Use.
​We respect the privacy of the users of the Credit Kaagapay
Services (“Users” or “you”) and are committed to reasonably protect it in all respects. The information about
the User as collected by us are: (a) information
supplied by Users; and (b) information automatically tracked while using a mobile device having Credit Kaagapay
Services enabled (collectively referred to as “Personal Information”).
​By accessing the Site, App or otherwise using the Credit Kaagapay
Services, or by clicking on the tick box, you consent to this Statement’s terms on the collection, storage, and
use of the personal information you provide (including any changes thereto as provided by you) for any of the
Credit Kaagapay
Services that we offer.
​If you do not agree to be bound by all the terms of this Privacy
Statement and Terms
& Conditions, please exit and uninstall from your devices our Platforms and do not access, use, and/or
receive benefit from any of our Platforms and our collection of Services.
​We may, at any time and at our sole discretion, amend, and update
this Privacy Statement. You are responsible for, among others, regularly reviewing this Privacy
Statement.
​II. DEFINITIONS
​“SERVICE” means the Platforms operated by Credit Kaagapay.
​“PERSONAL DATA” means any personal information and/or sensitive
personal information as defined under the Law, whether recorded in a material form or not, from which the
identity of an individual is apparent or can be reasonably and directly ascertained, or when put together with
other information would directly and certainly identify an individual from information either in our possession
or likely to come into our possession.
​“USAGE DATA” is data collected automatically either generated
by the use of Service or from Service infrastructure itself (for example, the
duration of a page visit).
​“DATA CONTROLLER” or “PERSONAL INFORMATION CONTROLLER” means a
natural or legal person who (either alone or jointly or in common with other persons) determines the purposes
for which and the manner in which any personal data are, or are to be, processed. For the purpose of this Privacy Statement, we are a Data Controller of your
data.
​“DATA PROCESSOR” or “PERSONAL INFORMATION PROCESSOR” means any
natural or legal person who processes the data on behalf of the Data Controller. We may use the services of
various Service Providers in order to process your data more effectively.
“DATA SUBJECT” is any living individual whose Personal Data is being processed pursuant to this Privacy Statement.
​“USER” is the individual using our Service via our Platforms. The
User corresponds to the Data Subject whose Personal Data is protected by the Law.
​III. WHAT DATA WE COLLECT
​
Depending on your User type, we collect several different types of
Personal Data for various purposes to provide and improve our Service to you.
​You provide us with personally identifiable information such as
your name, email address, and physical address through various media and/or forms, such as original, notarized,
and/or stamped documents in print or copies in accessible, legible, and electronic format, as may be necessary.
Other Personal Data that we do not expressly require of you but which you willingly provide to us are collected
as well. The information we collect depends on the features, functionalities, products, and Services that you
request through our Platforms. Such information, which may or may not include personally identifiable information, includes but are not
limited to the following:​
​The Personal Information provided by the Users is essential for the
provision and enhancement of the Credit Kaagapay
Services, with the aim of providing an optimal user experience. As part of our ongoing efforts to improve the
Services, we may occasionally request additional Personal Information from Users, beyond what has been
previously mentioned, through the Application and/or Site, subject to the User’s explicit consent. Rest assured
that we do not disclose this data to any third party, except as outlined within the provisions of this
Statement. We reserve the right to verify the information and documents provided by Users using reliable
sources. Users authorize Credit Kaagapay
and any financial partners and/or third-party service provider to process Know Your Customer (KYC) Documents and
determine their eligibility, subject to Credit
Kaagapay’s
Privacy Statement and Terms. The permission granted by Users for financial partners and/or third-party service
providers to access KYC Documents is governed by the providers' privacy policies. The personal information
collected during the KYC process is used solely for legal and regulatory compliance purposes, such as anti-money
laundering (AML) and counter-terrorism financing
(CTF). Credit Kaagapay
maintains the confidentiality and privacy of Users' information and only shares it with authorized parties such
as its financial partners with the User's explicit consent or as required by law. Credit Kaagapay
is dedicated to safeguarding Users' personal data in accordance with relevant data protection laws and
regulations.
We reserve the
right to utilize your Personal Data for the purpose of communicating with you through newsletters, marketing
materials, promotional content, and other information that may be deemed relevant and of interest to you.
However, you maintain the option to unsubscribe from receiving any or all of
these communications by following the provided unsubscribe link.
Any Personal
Information that you provide shall not be deemed as personal information if such information does not meet the
definition of personal information under Republic Act No. 10173 or the Data Privacy Act of 2012. Moreover, it is
important to emphasize that any reviews, comments, messages, blogs or similar content posted, uploaded,
conveyed, or communicated by Users on the public sections of the Site or
an application store (such as the App Store or Play Store) shall be deemed as published content. As published
content, it is possible that such information will no
longer be regulated as personal information in light
of data privacy laws.
Upon registering with the Services, it is probable that we may
periodically contact you to request updates or revisions to your Information. This is intended to ensure the
accuracy and currency of your provided details.
​
IV. INFORMATION AUTOMATICALLY TRACKED WHILE USING THE APP OR
SITE
​
​Usage Data
​We may also collect information that your browser sends whenever
you visit our Service or when you access our Service by or through a mobile device (“Usage Data”). This Usage
Data may include information such as your computer's Internet Protocol address (e.g. IP address), the pages of
our Service that you visit and other diagnostic data.
When you access
our Service with a mobile device, this Usage Data may include information such as the type of mobile device you
use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, unique
device identifiers and other diagnostic data.
​
Customer Information
​We maintain the contact information of your customers in our
records. Additionally, we retain a comprehensive log of all credit and payment-related communications with the
customers. These measures are implemented to ensure accurate record-keeping and facilitate effective
communication regarding credit and payment matters.
​To monitor and analyze user behavior on the App/Site, as well as to
continually improve our services, we employ various tools such as Google Analytics, Firebase and other similar
platforms. These tools provide valuable insights into user interactions and enable us to optimize our
offerings.
​
Valuable Feedback
​Your feedback improves our community and our Services. You consent
to the collection of Personal Data whenever you transact with our customer service and support personnel. Such
information collected includes but is not limited to your full name, email address, mobile number, orders made,
and account numbers. Please tell us what we can do to improve our Services.
​​​​
​V. WHAT WE DO NOT COLLECT
​We do not collect more than what is necessary.
​The only Personal Data, if any, that we collect comes from you. We
collect only the minimum amount and kind of information necessary for our Services and our Partners’
products.
​​
VI. LINK TO FINANCIAL PARTNERS AND THIRD-PARTY
SITES/AD-SERVERS
​The Site may contain links to other websites such as advertisers,
blogs, content sponsorships, vendor services, social networks, and more. While we strive to select reputable and
reliable partners, it is important to exercise caution that these websites operate under their own distinct
privacy statements, which are beyond our control. To further protect yourself, we recommend reviewing the
privacy policies of these websites before providing any personal information. When you navigate away from our
Site (which can be determined by checking the URL in your browser’s address bar), any information you provide is
subject to the Privacy Statement of the respective website operator. We cannot provide any representation or
warranty regarding how your information is stored or used on financial partners and third-party
servers.
​​​
VII. WHOM WE SHARE THE DATA WITH
​The Information (including Personal Information) collected may be
shared with our affiliates, financial partners, and group companies to the extent required for our internal
business and/or administrative purposes and/or general corporate operations and to any third-party service
providers, including marketing partners, and the User hereby consents to the same. We will take reasonable steps
to ensure that these third-party service providers are obligated to protect your personal information and are
also subject to appropriate confidentiality/non-disclosure obligations and they comply with the applicable
provisions of the data protection laws. These entities, with whom we share the Information, may market to you
as a result of such sharing unless you explicitly opt-out.
The User consents
that we may have access to your location and device information and we may request you to provide your PAN,
Know-Your-Customer (KYC) details, and biometric data to check your eligibility for certain products/ services
including but not limited to credit and payment products, etc., to enhance your experience and provide you
access to the services being offered by us, our affiliates, financial partners, or other third-party service
providers (including lenders). Biometric data is
collected and processed, with the explicit consent of the User and in compliance with Section 12 of the Data Privacy Act of 2012, only
for User verification using facial recognition and liveliness detection mechanism.
Further, the User
also consents to share Personal Information, including Sensitive Personal information, when it is requested or
required by law or by any court or governmental agency or authority to disclose, for the purpose of verification
of identity, or for the prevention, detection, investigation including cyber incidents, or for prosecution and
punishment of offenses. These disclosures are made in good faith and belief that such disclosure is reasonably
necessary for enforcing the Terms of Use or for complying with the applicable laws and regulations. No Personal
Information of an individual User such as name, contact number, email address, card details, etc. would be
shared with any other User and/or third party unless explicitly approved by the concerned individual User
himself/herself.
By using the
Credit Kaagapay
Services and providing Personal Information to us, Users agree and consent to the disclosure, transfer, storage,
and processing of the Personal Information, including the Sensitive Personal Information, by us in the
Philippines and/or in other countries to its affiliates, financial partners, group companies, and third parties.
While our primary motive is to protect the disclosure of Personal Information (except in accordance with the provisions of this Statement) of Users,
Users may note that countries where their Personal Information may be stored, may not have data protection laws
similar to the countries where they are located.
​
In our data sharing activities, the following shall be
observed:
​
We may disclose Personal Data that we collect, or you provide for
any of the following activities:
Disclosure for Law Enforcement. Under certain circumstances, we may
be required to disclose your Personal Data if required to do so by law or in response to valid requests by
public authorities.
Business Transaction. If we or
our subsidiaries are involved in a merger, acquisition, or asset sale, your Personal Data may be
transferred.
Other cases. We
may disclose your information also:
We may also share your Personal Information in the event of a business transfer, such as a merger, acquisition, or sale of our assets. In such cases, we will notify you before your Personal Information becomes subject to a different privacy policy.
​​​
VIII.
INFORMATION STORAGE AND BACKUP
​Periodically, we perform data backups of User information on our
cloud-based database. This practice serves the purpose of ensuring that Users can recover their data in the
event of data loss or unavailability on their mobile devices, such as device malfunction, loss, or when
transitioning to a new device.
We shall retain
User's Personal Information in our records for a period of [5] years
after the termination of services or last interaction with the User, whichever is later, unless a longer
retention period is required by law or for legitimate business purposes. For unsuccessful loan applications, we
shall retain the data for a period of [12] months from the date of rejection. However,
once the provision of company Services is no longer applicable or pertinent to a specific User, we shall expunge
all Personal Information associated with that
particular User from our records.
​​​
IX.
INFORMATION SECURITY
​We implement appropriate security measures to safeguard against
unauthorized access, alteration, disclosure, or destruction of data, including accidental or intentional
manipulation, and loss from unauthorized parties. These measures encompass internal assessments of our data
collection, storage, processing practices, and security protocols. We employ suitable encryption and physical
security measures to protect against unauthorized access to systems where personal data is stored. All Personal
Information collected on the Credit Kaagapay
platform is securely stored within controlled databases. Access to these servers is password-protected and
strictly limited.
​
Our security measures undergo regular reviews and updates to align with technological advancements. While we take all reasonable steps to ensure the security of Personal Information, it is important to understand that no transmission of data over the internet or any other public network can be guaranteed to be 100% secure.
We strive to
comply with applicable data protection laws to safeguard User privacy and Personal Information. We have
implemented physical, electronic, and procedural
safeguards that align with the laws of specific jurisdictions to protect User Personal Information. By accepting
the terms of this Statement, you acknowledge that the standards and practices we have in place are reasonable
and adequate for the protection of your personal information.
In the event of a
breach of security, confidentiality, or integrity resulting in the unauthorized access or disclosure of your
unencrypted electronically stored Personal Information, we will promptly notify you via email or any other
feasible means without undue delay, to the extent consistent with the legitimate needs of law enforcement. We
will take all necessary measures to investigate and remediate the breach, and restore the reasonable integrity of the data
system.
​​
X.
PURPOSE OF DATA PROCESSING
​We will only collect and process Personal Information about you
when we have a lawful basis to do so. The primary purpose of collecting your information, including Personal
Information, is to provide you with personalized access to Credit Kaagapay
and its various features, as well as for other lawful purposes as deemed necessary. It is important to note that
if you choose not to provide consent for the collection of your Personal Information, it is possible that we may
be unable to fulfill our contractual obligations to
you. By "perform the contract," we are referring to the Terms of Use that govern your use of the Credit Kaagapay
Service. Consequently, your access to certain features of the Credit Kaagapay
Service may be restricted or we may be unable to provide you with the Credit Kaagapay
Service in its entirety.
For example, we
use your information where we need the Personal Information to perform the contract with you (for example, to
provide the Platform or our services to you) so as
to:
​
We will use your Personal Information with your explicit consent as
follows:​
​
XI. YOUR
DATA PRIVACY RIGHTS​
Under the Law, you are entitled to the following data privacy
rights:​
​
In respecting your data privacy rights, you may opt to tell
us:​
​
XII. ACCESSING AND UPDATING PERSONAL INFORMATION​
To exercise your
rights regarding access, correction, or deletion of the Personal Information you have provided, you may contact
us via email:​
Data Protection Officer
Dizon, Camille N. - Data Protection Officer - Philippine Cashtrout Lending Corp.
5th Floor Rockwell Business Center Tower 1, Meralco Avenue, Ortigas. Ugong, City of Pasig, Metro Manila
email address: compliance@mocasa.com
Please include
relevant details and specific instructions regarding your request to facilitate the efficient handling of your
inquiry or request. We may request certain Personal Information from you, including government-issued
identification documents, for the limited purpose of validating your identity and good faith standing as a Data
Subject to make the query or request. Once your identity is validated, we will delete the information so
collected, unless we hold a lawful basis to further process this information.
When Users utilize
the Site (including any sub-sites) or the App, we diligently strive to fulfill Users' requests for access to
their Personal Information, provided such requests are made in good faith. Furthermore, we are committed to
rectifying any identified inaccuracies or deficiencies in Personal Information or Sensitive Personal Information
to the extent feasible, unless retention of such information is required by law or for legitimate business
purposes.
To facilitate the
processing of access, correction, or removal requests, we kindly ask individual Users to authenticate themselves
and specify the particular Personal Information they wish to access, correct, or remove. We reserve
the right to decline requests that are unreasonably repetitive or systematic, entail disproportionate technical
effort, compromise the privacy of others, or prove to be impractical in nature, or if access to such information
is otherwise unnecessary.
Regarding the
provision of Personal Information access and correction, we undertake this service free of charge, except in
cases where doing so would require a disproportionate effort.​
Please note that
due to the nature of certain services, deleted Personal Information may persist in residual copies for a certain
period of time before being completely eradicated from our active servers. It is
possible that remnants of such information may also endure in our backup systems.​​
​
XIII.
YOUR PART IN PROTECTING YOUR DATA​
The security of
your data is important to us but remember that no method of transmission over the Internet or method of
electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal
Data, we cannot guarantee its absolute security.​
You agree that you
too play a part in ensuring your personal data and the data of others are protected. By accessing our Platforms
and/or using our Services, you declare, represent, and warrant that:​
​​​
XIV.
REVOCATION OF CONSENT​
A User can revoke
his consent to the processing of his Personal Information at any time with effect for the future. Please note
that withdrawing consent does not affect our right to
continue to collect, use and disclose Personal Information where such collection, use, and disclosure without
consent is permitted or required under applicable laws (e.g., other lawful criteria exist for the processing of
personal information).
​​​
XV. DISCLAIMER​
In case any
Personal Information is shared by you with us, which is not requested by us during registration, (whether
mandatorily or optionally), we will not be liable for any information security breach or disclosure in relation
to such information. If you have any questions regarding this Statement or the protection of your personal
information, please contact our data protection officer.
​​​
XVI. REASONABLE TIME FOR OUR RESPONSE AND LAWFUL INTERRUPTION
THEREOF BY FORCE MAJEURE.​
You agree with our
terms for a response within a reasonable time; lawful interruption thereof; and force majeure in relation to the
exercise of your data privacy rights. We aim to respond to your concerns within 15 working days, in line
with the recommendations of the National Privacy Commission.
We shall exert our
best efforts to address your concerns, complaints, or grievances, and these shall be examined with care, and
professionalism, and within reasonable time from our receipt of your complete correspondence with us.
Such reasonable
time depends on the circumstances of said concern, complaint, or grievance, and shall be deemed lawfully
interrupted by certain events beyond the control of any party herein such as but not limited to: acts of God
such as natural calamities, typhoons, tornado, volcanic eruption; acts of political instability such as
revolution, civil war, insurrection, civil disobedience, riot, terrorism, economic sabotage; the threat of
spread of mandatorily reportable communicable and infectious diseases such as but not limited to COVID-19,
government declaration of public health emergency measures such as national and/or local quarantines and/or
other management/employee restrictions; acts of authorities whether lawful or unlawful; prolonged suspension or
unavailability of public transportation, telecommunication, and electric utilities; and other force majeure
events (“Force Majeure Event”).
​​​
XVII. SERVICE PROVIDERS​
We may employ third-party companies and individuals (“Service
Providers”) to facilitate our Service, provide Service
on our behalf, perform Service-related services or assist us in analyzing how our Service is used. These third
parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to
disclose or use it for any other purpose.​​
​
XVIII.
ANALYTICS​
We may use third-party Service Providers to monitor and analyze the
use of our Service.
​​​
XIX.
CI/CD TOOLS​
We may use third-party Service Providers to automate the
development process of our Service.​​
​
XX.
BEHAVIORAL MARKETING​​
We may use remarketing services to advertise on third party
websites to you after you visited our Service. We and our third-party vendors use cookies to inform, optimize
and serve ads based on your past visits to our Service.
​
XXI.
LINKS TO OTHER SITES​
Our Service may contain links to other sites that are not operated
by us. If you click a third-party link, you will be
directed to that third party's site. We strongly advise you to review the Privacy Statement of every site you
visit.​ We have
no control over and assume no responsibility for the content, privacy policies, or practices of any third-party
sites or services.​​
​
XXII. QUESTIONS/GRIEVANCE REDRESSAL​
In the event you have any inquiries or grievances relating to the
processing of Personal Information provided by you, you may contact:​
Data Protection Officer
Dizon, Camille N. - Data Protection Officer - Philippine Cashtrout Lending Corp.
5th Floor Rockwell Business Center Tower 1, Meralco Avenue, Ortigas. Ugong, City of Pasig, Metro Manila
email address: compliance@mocasa.com
​​
​XXIII.
UPDATES/CHANGES​
This Privacy Statement is effective as of the date of its last
modification and will remain in effect unless its provisions are changed in the future. Such a modified version
will be in effect immediately after posting on this page dedicated to the Privacy Statement.
​Credit Kaagapay
reserves the right at any time to amend, change, add, or modify this Privacy Statement by posting the new/updated version,
without prior notice to the users of the Credit
Kaagapay App, and to add new or additional terms or conditions on use of
the Services. You will also be requested to indicate your consent to the updated Statement before you access the
Credit Kaagapay
App and its Services. You are strongly recommended to regularly review and read this Statement, as well as any
updated Statement before you indicate your consent.
Your continued access
or use of the Credit Kaagapay App after the updated Statement is posted, confirms your
acceptance and consent to be bound by the updated Statement.
​​​
XXIV.
MISCELLANEOUS​
Date Updated: [April, 2025]