Rural Bank of Ramon

Data Privacy Rural Bank of Ramon (Isabela), Inc. respects and values the data privacy rights of all its stakeholders, thus, the Bank is committed to protecting and safeguarding your privacy. We make sure that all data collected from stakeholders are processed in compliance with the Republic Act No. 10173 also known as Data Privacy Act (DPA) of 2012, its Implementing Rules and Regulations (IRR) and other relevant policies including issuances of the National Privacy Commission (NPC). This Privacy Policy outlines how we collect, protect, use, and share information when you apply for and avail of our products and services.

Personal Information We collect the following personal information from you when you apply for and avail our deposit, loan, and remittance services: • Name • Age • Gender • Marital Status • Present and Permanent Address • Contact Details • Date/Place of Birth • Father’s Name and Mother’s Name • Educational Background • Employment History • Financial Background • Specimen Signature • Nature of Business/Work • Source of Funds • Beneficial Owners, if applicable • SEC/DTI Registration No., if applicable • TIN, SSS or GSIS ID Details, if applicable • Permits, Licenses and Registrations If deemed necessary, RBRI may request to verify the Client’s personal information, or seek additional information from regulatory, judicial, tax authorities, or credit bureaus.

What we do with the information we gather We use the information collected to: Process, evaluate, facilitate and administer applications for our products and services, and transactions; Perform due diligence, including background investigation, credit investigation to verify your financial capacity, credit worthiness and the like; • Process, evaluate, facilitate and administer applications for our products and services, and transactions; • Perform due diligence, including background investigation, credit investigation to verify your financial capacity, credit worthiness and the like; • Provide you with information about our products or services, • Manage your account and facilitate your transactions; • Respond to your inquiries, requests, feedback and other concerns, and use this information to further improve our products and services; • Comply with relevant laws such as RA 9160, as amended, or the Anti-Money Laundering Act (AMLA), RA 9510 or the Credit Information System Act (CISA) on the submission of data to the Credit Information Corporation (CIC) and with the Bank’s obligations under the law and as required by government organizations such as, but not limited to, BSP, SEC, NPC, BIR, DOLE, HDMF, PhilHealth, SSS, among others. • Establish, exercise and defend the Bank's legal rights; • Comply with legal and regulatory requirements, such as responding to court orders and other instructions and requests from any local authorities including regulatory, governmental, tax and law enforcement authorities or other similar authorities; • Comply with the requirements of audit and privacy assessments/reviews; • Comply with the required reporting disclosures under applicable laws and regulations; and • Perform other activities allowed by law or with your consent.

Retention and Disposal The Bank will retain your Personal Data for as long as necessary and in accordance with BSP Circular 720 Series 2011 on Guidelines on the retention and disposal of records/documents of rural and cooperative banks.

How we safeguard your personal information In accordance with the Data Privacy Act, RA 1405 (Bank Secrecy Law), RA 8791 (General Banking Law of 2000), RA 6426 (The Foreign Currency Deposit Act), BSP Circular 808 series of 2013 (Guidelines on Information Technology Risk Management for All Banks and other Supervised Institutions), BSP Circular 982 series of 2017 (Enhanced Guidelines on Information Security Management). The bank, its employees, and representatives, shall handle personal information with utmost care and adhere to appropriate organizational, physical, and technical measures to maintain the confidentiality, integrity and security of all personal information in its possession.

The Client’s Rights In accordance with the Data Privacy Act, the Client has the right to: • Be informed whether their personal information shall or have been processed; • Reasonable access to their personal information; • Require the Bank to update their personal information; • Suspend, withdraw, or order the blocking, removal, or destruction of personal information if the bank is not required to retain it by law or for legitimate business purposes and subject to the conditions for the legitimate exercise of the said rights under the Data Privacy Act and its IRR.

Contact Us For inquiries or concerns regarding our data privacy notice, you may directly contact our Data Privacy Officer through the following: DATA PRIVACY OFFICER 121 National Road, Bugallon Proper, Ramon, Isabela Telephone Number: (078) 323-0079 / (078) 323-0437 Mobile Number: (0917)525-8442 / (0967)600-9848 Email Address: compliance.rbri@gmail.com