At Gubat St. Anthony Cooperative (GSAC), we are dedicated to safeguarding your privacy and ensuring the security of your personal information. This Data Privacy and Protection Policy outlines our practices regarding the collection, use, sharing, protection, and retention of your information.

Scope
This policy applies to all services offered by GSAC, including but not limited to savings and credit services, allied services (hotels, mart, pharmacy, diagnostic), as well as products and services offered by its subsidiary corporations.

Compliance with Data Privacy Laws
We adhere to all relevant data protection laws and regulations applicable in our operating regions. This includes compliance with the Data Privacy Act of 2012 (R.A. 10173) and other legislative requirements.


Data Collection and Processing
When you apply for or avail of any products or services from GSAC, its subsidiary corporations, or when you interact with our employees, we collect your personal information. This may include, among others:

• • Personal information (such as but not limited to names, contact numbers, demographic information, marital status, gender, financial details)
  • Identification photos
  • Electronic signatures
  • Transaction history
  • Images from CCTV and other similar recording devices and processes that may be observed when visiting our offices and/or using our other facilities
  • Voice recordings of our conversations with you
  • Other relevant data necessary for processing your membership application and transaction with GSAC or its subsidiary corporations

Use of Your Information
We collect and use your information for the following purposes:

• • Processing and Administration: Approve, facilitate, administer, and process applications and transactions related to your membership.
  • Customer Interaction: Respond to queries, requests, and complaints to improve our interactions with you.
  • Communication and Notices: Send statements, billings, and other necessary documents for the continued use of our products and services.
  • Research and Development: Conduct studies and research to review, develop, and enhance our products and services.
  • Analysis and Personalization: Perform profile analysis, behavioral modeling, and analytics to understand needs, preferences, and market trends, recommending suitable products and services. This also includes reaching out to you with information, offers, promotions, discounts, and rewards, personalizing your experience across various touchpoints.
  • Marketing and Effectiveness: Determine the effectiveness of our marketing efforts and initiatives.
  • Location-Based Services: Provide location-based services, such as locating the nearest ATM or branch.
  • Protective Measures: Implement protective safeguards, including fraud prevention, against improper use or abuse of our products and services.
  • Compliance: Comply with operational, audit, administrative, credit, and risk management processes, as well as the terms and conditions governing our services, regulatory requirements, and laws such as the Anti-Money Laundering Act, FATCA, know your customer and sanction screening checks, submission of data to credit bureaus, credit information companies, the Credit Information Corporation (CIC), and responding to instructions and requests from authorities.
  • Legal and Regulatory Obligations: Fulfill other activities permitted by law or with your consent, ensuring compliance with legal and regulatory requirements in the Philippines and other relevant jurisdictions.

Data Sharing and Transfer
We may share data or information with the following entities to enhance the quality of services provided by GSAC. This may include, among others:

• • Within GSAC
  • GSAC Subsidiary corporations or affiliates
  • Regulatory agencies
  • Third-party partners
  • Transaction-related parties

When engaging with third parties, strict confidentiality agreements are in place to ensure data protection standards are met. Rest assured that we employ security measures to protect your information when shared with these entities.

Data Security Measures
We take your data privacy seriously and have implemented security measures to protect your information from unauthorized access, disclosure, alteration, or destruction. Your information is stored securely, and we regularly update our security systems to ensure its safety.

Data Access and Control
We maintain procedures for managing and controlling access to personal data, including processes for rectification, updating, and deletion upon individual requests or legal requirements.

Data Retention
We retain your personal information as long as necessary to fulfill the purposes for which it was collected and to comply with legal, regulatory, or business requirements. This includes the duration of your membership with the cooperative.

Your information will be securely disposed of once the purposes for which it was collected have been fulfilled unless required for legal or regulatory purposes.