DATA PRIVACY NOTICE

“Your Privacy Matters to SAFADECO”

Salvacion Farmers Development Cooperative Savings and Credit (SAFADECO), with office address at J.S. Reyes St., Bitan-o, Sorsogon City, Sorsogon, Philippines, is the Personal Information Controller (PIC) responsible for the personal data described in this Privacy Notice. SAFADECO respects your right to privacy and is committed to protecting the personal information entrusted to us.

This Privacy Notice explains how SAFADECO collects, uses, stores, discloses, retains, and protects your personal data when you visit our website, become a member, avail of our products and services, apply for employment, communicate with us, or otherwise interact with the Cooperative.

SAFADECO processes personal data in accordance with Republic Act No. 10173, or the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC).

We observe the principles of transparency, legitimate purpose, and proportionality in the processing of personal data.

PERSONAL DATA WE COLLECT

• • Name, age, date and place of birth, sex, civil status, religion, and nationality
  • Information about family members, beneficiaries, co-makers, and other relevant individuals
  • Residential address, mailing address, telephone/mobile number, and email address
  • Educational background
  • ID type, number, and other information appearing on government-issued identification documents
  • Specimen signatures
  • Employer, position, source of income, business activities, and related information
  • Income, assets, liabilities, savings, loans, payment records, and other financial information necessary for our services
  • Permits, licenses, and registrations, where relevant
  • Details of transactions with third-party merchants, companies, and service providers, where applicable
  • Images or recordings captured through CCTV systems for security, safety, and incident-monitoring purposes
  • Other personal data necessary for specified purposes or required or permitted by law
  • For online or mobile access to SAFADECO facilities and services, we may collect technical information such as IP addresses, operating systems, browser types and versions, and device identifiers. Such information may also constitute personal data.

HOW WE COLLECT PERSONAL INFORMATION

SAFADECO may collect personal data through:

• • Membership applications;
  • Loan applications and supporting documents;
  • Savings and other financial transactions;
  • Branch and office transactions;
  • Website forms;
  • Online inquiries;
  • Emails and other official communications;
  • Employment applications;
  • Events and cooperative activities;
  • Customer/member service interactions;
  • Authorized representatives;
  • CCTV and security systems, where applicable; and
  • Other lawful means.

HOW WE USE PERSONAL INFORMATION

SAFADECO collects and processes personal data only for legitimate and necessary purposes, including:

• • Membership Administration – to process membership applications, maintain membership records, verify member information, and manage member accounts;
  • Provision of Products and Services – to process and provide savings, loans, insurance, and other cooperative products and services;
  • Loan Processing and Management – to evaluate loan applications, conduct credit investigation and verification, process loan releases, monitor accounts, and manage collections and recovery;
  • Financial and Transaction Processing – to process deposits, payments, withdrawals, purchases, and other transactions;
  • Member Communication – to contact members regarding their accounts, transactions, applications, cooperative programs, notices, and other relevant matters;
  • Compliance with Laws and Regulations – to comply with requirements of government agencies, regulators, auditors, courts, and other authorized entities;
  • Risk Management and Security – to prevent fraud, unauthorized transactions, and other risks and to protect the security of members, employees, facilities, and information systems;
  • Reports and Cooperative Operations – to prepare reports, conduct audits, monitor performance, and improve our products, services, and operations; and
  • Other Lawful Purposes – for other purposes that are necessary, legitimate, and communicated to the data subject, or as otherwise authorized or required by law.

BASIS FOR PROCESSING PERSONAL DATA

SAFADECO processes personal data only when at least one of the lawful bases under Sections 12 and 13 of the Data Privacy Act applies:

• • Consent – when you have freely given specific and informed consent for a stated purpose, documented through an appropriate consent mechanism. You may withdraw consent, subject to other lawful bases for processing.
  • Contract – when processing is necessary to enter into or perform a contract with you, such as your membership, savings, and loan agreements.
  • Legal obligation – when processing is necessary to comply with laws and regulations, including requirements of the Cooperative Development Authority and other government agencies.
  • Legitimate interests – when processing is necessary for the legitimate interests of SAFADECO or a third party, such as fraud prevention, security (including CCTV monitoring), and the collection of obligations, except where these interests are overridden by your fundamental rights and freedoms.

Sensitive personal information. Some of the data we collect, such as age, civil status, religion, educational background, and government-issued ID numbers, is classified as sensitive personal information under the Data Privacy Act. SAFADECO processes sensitive personal information only with your consent, or when otherwise allowed by Section 13 of the Data Privacy Act, such as when required by existing laws and regulations or when necessary for the establishment, exercise, or defense of legal claims.

DISCLOSURE AND SHARING OF PERSONAL DATA

SAFADECO may disclose or share personal data only to the extent necessary and permitted by law, to the following recipients:

• • Government and regulatory authorities;
  • Courts and law-enforcement agencies when legally required;
  • Cooperative Development Authority and other authorized regulators;
  • Credit investigation or credit information providers;
  • Banks and payment service providers;
  • Auditors and professional advisers;
  • Insurance providers, when applicable;
  • Legal counsel and collection service providers;
  • Information technology and system service providers;
  • Authorized third-party service providers; and
  • Other persons or organizations where disclosure is authorized or required by law.

STORAGE AND RETENTION OF PERSONAL DATA

SAFADECO may store personal data in:

• • Physical records;
  • Electronic databases;
  • Servers;
  • Authorized cloud-based systems;
  • Information systems; and
  • Other secure storage facilities.

RETENTION OF PERSONAL DATA

SAFADECO keeps personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal, regulatory, accounting, and audit requirements, or to establish, exercise, or defend legal claims. Unless a longer period is required by law or by a pending legal claim or investigation, we retain personal data for the following periods:

When these periods end, personal data is disposed of as described below.

SECURE DISPOSAL OF PERSONAL DATA

When personal data is no longer required to be retained, SAFADECO shall dispose of it securely and appropriately.

• • Shredding or destruction of physical documents;
  • Secure deletion of electronic files;
  • Secure disposal or destruction of storage devices;
  • Anonymization; or
  • Other appropriate methods that prevent unauthorized access, recovery, processing, or disclosure.

WEBSITE AND AUTOMATED ACCESS

When you visit our website, our systems may automatically collect technical information such as your IP address, browser type and version, operating system, device identifiers, pages visited, and the date and time of access. We use this information to operate and secure the website and to understand how it is used.

Cookies: Our website uses cookies or similar technologies for site functionality and analytics. You may disable cookies through your browser settings, although some features may not work properly.

Automated processing: SAFADECO does not use automated decision-making or profiling, including automated credit scoring, to make decisions that significantly affect you.

PRIVACY AND SECURITY MEASURES

SAFADECO implements reasonable and appropriate organizational, physical, and technical measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, alteration, disclosure, or access. These measures may include:

• • Access controls;
  • User authentication;
  • Password management;
  • Restricted access to physical records;
  • Confidentiality obligations;
  • Employee privacy and security awareness;
  • Secure storage;
  • Backup and recovery procedures;
  • System and network security;
  • Monitoring and logging, where appropriate;
  • Security incident management; and
  • Periodic review of privacy and security practices.

RISKS INVOLVED IN PROCESSING

SAFADECO recognizes that processing personal data may involve risks, including:

• • Unauthorized access;
  • Unauthorized disclosure;
  • Loss or destruction of information;
  • Phishing and social engineering;
  • Malware or cyberattacks;
  • Unauthorized alteration;
  • Fraudulent use; and
  • Other privacy or security incidents.

SAFADECO continuously implements reasonable measures intended to prevent, detect, respond to, and mitigate these risks.

DATA SUBJECTS’ PRIVACY RIGHTS

Under the Data Privacy Act, you have rights concerning your personal data, including:

• • Right to Be Informed: You have the right to know whether your personal data is being or has been processed and to receive information about such processing.
  • Right to Access: You may request access to your personal data and relevant information regarding its processing.
  • Right to Correct or Rectify: You may request correction of inaccurate or incomplete personal data.
  • Right to Object: You may object to certain processing of your personal data when allowed by law.
  • Right to Erasure or Blocking: You may request the deletion or blocking of your personal data when the conditions provided by law are met.
  • Right to Data Portability: Where applicable, you may request your personal data in a structured and commonly used format and have it transmitted to another personal information controller, subject to applicable law.
  • Right to File a Complaint: You may file a complaint with the National Privacy Commission if you believe that your privacy rights have been violated.
  • Right to Damages: You may be entitled to compensation for damages sustained due to unlawful or unauthorized processing, subject to applicable law.

HOW TO EXERCISE YOUR DATA PRIVACY RIGHTS

To exercise your rights, request access or correction, or raise a privacy concern, you may contact the SAFADECO Data Protection Officer (DPO).

SAFADECO DATA PROTECTION OFFICER

Name: Jeffrey San Antonio
Position: Data Protection Officer
Email: safadeco.jsanantonio@gmail.com
Mobile Number: 09518407808
Office Address: J.S. Reyes St., Bitan-o, Sorsogon City, Sorsogon, Philippines

To protect the privacy of our members and other data subjects, SAFADECO may require reasonable verification of your identity before processing a request.

PRIVACY COMPLAINTS

• • If you have a concern regarding the manner in which SAFADECO processes your personal data, you may first contact our Data Protection Officer.
  • We will review and address your concern in accordance with our privacy policies and applicable laws.

You may also contact the:

National Privacy Commission
Republic of the Philippines
Website: www.privacy.gov.ph
Email: info@privacy.gov.ph
Telephone: +632 5322 1322

CHANGES TO THIS PRIVACY NOTICE

SAFADECO may update this Privacy Notice from time to time to reflect changes in our services, processing activities, privacy practices, laws, regulations, or NPC issuances.

Any material changes will be communicated through appropriate means, including publication on this website.

This Privacy Notice was last updated on October 8, 2026.

CONTACT SAFADECO

For questions or concerns, contact our Data Protection Officer (DPO):

Email: safadeco.jsanantonio@gmail.com