1. Service Description

Welcome Bank is a banking institution duly organized and existing by the virtue of laws of the Republic of the Philippines. We provide our customers with financial products and services such as, but not limited to deposits, consumer and business loans, safety deposit boxes and other innovative products.

2. What data we collect about you

When you apply for or avail of our products or services, we will collect personal and sensitive information about you in order for us to offer and provide financial products that is beneficial and suited to your needs from the following :

a. Information we received from your accomplished applications and other bank forms with us

• Name, date and place of birth, address and contact detail, email address; gender, race, religion

• Specimen signatures

• Government issued Identification Cards numbers and other details

• Financial information (income, expenses, investments, insurance, bank balances and transaction history, assets and liabilities);

• Employment details/business interests

b. Information we get from submitted documentary requirements of loan products

c. Information we get from audio communications with you; CCTV images and similar recording devices

d. Information about your transaction history with us and other dealings with

e. Information we received from third parties or entities upon conduct of appropriate credit and negative information checks

f. Information we received from your online application with our subsidiaries and affiliates

3. How do we collect from you

We collect your personal information or data primarily through your accomplished application forms and documentary requirements submitted to us, conversations, interviews/interaction with our authorized personnel and consented third-party verifications from government and regulatory agencies, financial institutions, accredited outsourced service providers and vendors that we would use for verification and checking of personal, sensitive and privileged information you provided to us.

4. Purpose and Use of Data

We collect the personal, sensitive and privileged information for purposes such as but not limited to processing of the banking product and service you choose to avail from us; performance of our daily operational, business and technology-driven functions, marketing and advertisement, sales lead generation; account management, client profiling, and regulatory requirements from financial institutions.

5. Sharing of Information and Data

In order for us to conduct our business, Welcome Bank may disclose all of the information we collect, as described above, to other financial institutions with whom we have agreements, to other companies that perform services on our behalf, or to non-affiliated third parties for the purposes of processing and servicing transactions that you request or authorize, so that we can provide you competitive products and services.

We may also disclose non-public personal information about you under circumstances as permitted or required by law. These disclosures typically include information to process your transactions on your behalf, conduct the operations of our Bank, and follow your instructions as you authorize, or protect the security of our financial records. To protect our privacy policy, we only work with companies that agree to maintain strong confidentiality protections and limit the use of information we provide. We do not permit these companies to sell the information we provide to other third parties.

We may disclose non-public personal information about you to the following third parties as mandated by law:

- Government agencies, such as Bangko Sentral ng Pilipinas, Anti-Money Laundering Council, Philippine Deposit Insurance Corp., Securities and Exchange Commission, Bureau of Internal Revenue, National Privacy Commission, Insurance Commission, Credit Information Corp.

- Organization of financial institutions, i.e. BAP, Credit Bureau, Inc., RBAP,

- Affiliates of the Company that run financial businesses.

- Accredited collection agency and/or law firm in case of delinquency.

If you closed or terminate your account with Welcome Bank, we will not share information we have collected from you except as permitted or required by law.

6. Retention and Storage of Data

We maintain physical, digital or electronic copy of your data to store your personal, sensitive and privileged information and adopt the necessary information security measures in the protection of your data as required and in compliance with the Data Privacy Act.

We restrict access to non-public personal information about you to any persons that may not be authorized by you and our Management.

We will store your nonpublic personal information under our custody for five (5) years from the date of termination of your account consistent with Rule 9.B of 2016 Implementing Rules and Regulations of RA 9160, as amended, except when you are subject of a case where your personal information must be retained and safely kept beyond the five-year retention period until it is decided with finality by courts of competent jurisdiction or officially confirmed by the AMLC Secretariat and until such time the fulfilment of the purpose of which the data is collected and other purposes that you may have consented remain in effect and no longer required nor necessary to keep your information for any legal, regulatory and business purposes.

7. What are your Data Protection Rights

Welcome Bank would like to make sure that you are fully aware of your data protection rights and every user is entitled to right to request for a copy of your bank maintained personal information and we may charge processing fee depending on the nature and time spent in servicing your request.

- Right to be informed
We are bound to furnish you this Privacy Notice to inform you about your data privacy rights, how we process your nonpublic personal information, and how we restrict your non-public personal information from unauthorized access.

- Right to object
You have a right to object verbally, whether in person or through a phone call, to the processing of your nonpublic personal information, including for direct marketing, automated processing or profiling. You may also withhold your consent to the processing in case of changes or any amendment to the information you declared with us.

- Right to access
You may request from us a copy of any information about you that we have in our computer database and/or manual filing system.

- Right to rectification
You have a right to dispute the inaccuracy or error in your information on our database and have them corrected immediately and accordingly by accomplishing the Client Data Change Request Form prescribed by our Bank.

- Right to erase or block
You may exercise your right to suspend, withdraw or order the blocking, removal or destruction of your non-public personal information from our database and/or manual filing system upon discovery and substantial proof of any of the following:

- incomplete, outdated, false, or unlawfully obtained;

- used for purpose you did not authorize;

- no longer necessary for the purposes for which they are collected;

- withdraw your consent or object to the processing, and there is no longer legal ground or overriding interest for the processing;

- where personal information concerns private information that is prejudicial to you, unless justified by freedom of speech, of expression, or of the press or otherwise authorized;

- processing is unlawful; or

- Violated your data privacy rights.

- Right to damages
You may be indemnified for any damages you sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of your personal information, taking into account any violation of your rights and freedoms as a data subject.

- Right to file a complaint
You may file a complaint with the National Privacy Commission against us through https://privacy.gov.ph/complaints-main/ if you feel that your non-public personal information has been misused, maliciously disclosed, or improperly disposed, or that any of your data privacy rights has been violated: Provided, that you have given us an opportunity in good faith to comply with any legal obligations involving data protection and privacy.

8. Changes to Privacy Policy

Welcome Bank keeps its privacy policy under regular review and amend this Privacy Statement to align with the changes in relevant laws and regulations applicable. Any relevant updates and changes will be posted on Welcome Bank website.

Your Role as Data Subject
You as the data subject is enjoined to be one with Welcome Bank in ensuring protection of your data privacy. You are equally responsible to employ information security measures in ensuring that your personal account details, passwords, username and PINs are not disclosed or written that is easily accessible to others. To regularly change your passwords and make it difficult as well as keeping yourselves updated.

You are to notify us in writing through email at customer service hotline to be duly acknowledged by us for any clarifications, queries or requests relative to this Privacy Notice and in the exercise of data privacy rights with accompanying relevant documents to support your request.

(02) 8866-7345 or dpo@welcomebank.com.ph write to:
Welcome Bank (Rural Bank), Inc.
(Addressed to Data Protection Officer)
Unit 102-B, The Taipan Place Bldg, F. Ortigas Jr. Road cor. Ortigas Center, Brgy. San Antonio, Pasig City 1605, Philippines.