MCRBI PRIVACY STATEMENT 

Mount Carmel Rural Bank Inc. (MCBRI) is committed to protect and respect the privacy of your personal information. This Statement provides how we process and protect your information and your rights as our client. We are committed in not only implementing but also complying with Data Privacy Act of 2012, its implementing rules and regulations and other applicable laws of the Republic of the Philippines.

Personal Information to be Collected.

The products or services that you avail from us dictate the types of personal information that we will collect. These types of personal information include but not limited to the following:

• Name and personal details such as address, age, sex, marital status, gender, nationality, and contact details, date/place of birth;
• Employment details
• Banking information and financial details such as assets, income, expenses, deposits, savings, payment history and account activities including dealings and transactions with third parties;
• Specimen signature, images (videos and/or photos) collected via CCTV and similar devices when you visit our bank premises
• Government identification details
• Permits, licenses and registrations
• Status of pending civil or criminal cases (if any)
• Other electronic data or information relating to you such as IP addresses, cookies, activity logs, online identifiers, geographic and location data through your usage of our products and services
• Other personal data authorized and mandated by law to be collected such as but not limited to Anti-Money Laundering Act of 2001 (AMLA), Bangko Sentral ng Pilipinas (BSP), Securities and Exchange Commission (SEC), and Bureau of Internal Revenue (BIR).

We may additionally collect information about you over the course our relationship such as but not limited to your transactions, account history and behavior, information and inquiries about our products and services. We may also verify your personal information with third-party entities including government regulators, supervisory bodies, tax authorities and courts.

Time and Manner of Collection.

MCRBI may collect your personal information when you fill out our forms (manual or electronic) to avail our products or services, when you call us through our hotline, when you communicate with us via our social media accounts or website, when you interact with our employees and visit our premises.

Purpose of collection.

Your personal information will be processed by us, both manually and electronically, in connection with the following purposes:

• Compliance with banking laws and regulations (for Know-Your-Client or client identification);
• Availment of our products or services;
• Facilitate the opening, depositing, updating and maintaining your account;
• Evaluation, analysis, approval of your information for intelligent decision-making to deliver your request
• Provide you with your latest billings, account details and other requests
• Send you reminders, announcements, promotions, offers, invitations and other notifications
• As sample for risk analysis, research and planning to improve our products and services
• Performance of our obligation arising from contract between you and the Bank;
• To comply with the MCRBI’s legal obligation with the law and regulatory mandates of concerned government entities
• Other such activities permitted by law or with your consent

Data Sharing.

As a Banking institution, MCRBI has obligation to various agencies or third-parties to submit personal information of data subjects to which it has contractual agreements with.

Data Sharing with Government Agencies

We are obliged to comply with the legal and regulatory requirements hence we are required to submit information to the government agencies such as but not limited to the Anti-Money Laundering Council (AMLC), Bangko Sentral ng Pilipinas (BSP), Securities and Exchange Commission (SEC), Philippine Deposit Insurance Corporation (PDIC) and Bureau of Internal Revenue (BIR)

Data Sharing with Credit Reporting Bodies

Pursuant to Republic Act No. 9510 or the Credit Information Act, we may disclose your personal and other relevant information to the Credit Information Corporation in relation with your application for or availment of a credit facility with us. As a submitting entity, we are required to submit credit information of borrowers to the Corporation and notify you of such obligation to submit and disclose subject to the provisions of the Credit Information System Act and its implementing rules and regulations.

Data Sharing with Service Providers

In the course of our banking operations, we may share your personal information with third-party service provider to perform tasks and activities on our behalf in relation to the products or services you availed. With your consent, we may transmit your personal information to third-party entities to which the Bank have non-disclosure agreements or data sharing agreements, whichever is applicable. This is to ensure that the third-party will take appropriate security measures to uphold the privacy of your personal information and determine our level of control on how they will use or process your personal information.

Storage, Retention, and Disposal of Personal Information.

We retain your personal information only in accordance with its operational need and in compliance with the legal and regulatory purposes. We keep your personal information in paper and electronic formats. We protect your personal information from misuse, unauthorized access, modification, and unauthorized disclosure by enforcing organizational, physical and technical measures.

We will maintain and retain your personal information for a maximum of ten (10) years. Rest assured that the confidentiality and security of your personal information is safe with us. The period of retention may be extended, with your consent, when you re-avail our products and services. Further, we commit to comply with the applicable laws and regulations relative to retention and disposal of personal information.