PVB Privacy Notice

At Philippine Veterans Bank, we respect your trust and are committed to protecting your personal data. This Privacy Notice explains how we collect, use, disclose, retain, and protect your personal data when you open an account, use our products and services, visit our branches or website, use our digital platforms, or otherwise interact with us.

We handle your personal data in accordance with Republic Act No. 10173 or the Data Privacy Act of 2012, its Implementing Rules and Regulations, applicable issuances of the National Privacy Commission (NPC), and other applicable laws and regulations.

Who We Are

PVB is a private commercial bank owned by Philippine World War II veterans and their families. We provide banking and financial services to retail, corporate, institutional, and government clients.

Under the Data Privacy Act of 2012, PVB is a Personal Information Controller (PIC) when we determine how and why personal data is processed in connection with our products, services, and business activities.

In this Privacy Notice, “PVB”, “we”, “us” and “our” refers to PVB, its directors, shareholders, employees and authorized representatives.

What Personal Data Do We Collect?

The personal data we collect depends on your relationship and transactions with us and the products and services you use.

This may include:

• Basic personal information, such as your name, address, date and place of birth, contact details, citizenship, and nationality;

• Government-issued identification details, such as SSS, GSIS, passport, TIN and other valid IDs;

• Specimen signatures and other information to verify your identity;

• Employment, educational, professional, and business information;

• Financial and credit information, such as income, account balances, investments, tax information, and credit history;

• Transaction and account information, including information about your use of our products and services;

• Images and recordings, such as CCTV footage, photographs, voice recordings, and similar security or service-related recordings;

• Information you provide to us when you contact us, submit an application or request, or file a complaint; and

• Technical and device information collected when you use our website or digital platforms, such as your IP address, device information, browser type, operating system, pages visited, and information about how you interact with our platforms.

We may also collect other information when required by law or when reasonably necessary to provide the products or services you request.

Why Do We Collect and Use Your Personal Data?

We collect and use your personal data to provide you with safe, reliable, and efficient banking services.

Depending on your relationship with us, we may use your personal data to:

• Open, maintain, and manage your accounts;

• Process loan, credit, and other financial applications;

• Provide banking and financial products and services;

• Process deposits, withdrawals, payments, transfers, and other transactions;

• Verify your identity and protect you and the Bank against fraud, scams, and other unauthorized activities;

• Assess and manage financial, credit, operational, and security risks;

• Respond to your questions, requests, and complaints;

• Send account statements, transaction alerts, notices, reminders, and other service-related communications;

• Improve our products, services, systems, and overall customer experience;

• Conduct research, analytics, and service improvement activities;

• Send relevant offers, marketing and promotional communications, where permitted by law and applicable to you;

• Protect the safety, security, rights, and property of PVB, our customers, employees, and other persons;

• Establish, exercise, or defend legal claims;

• Comply with our legal, regulatory, and contractual obligations; and

• Carry out other lawful and necessary activities related to our banking operations

What Allows Us to Process Your Personal Data?

We process your personal data only when we have a lawful basis to do so under applicable laws and regulations. Depending on the circumstances, we may process your personal data because:

• It is necessary to provide a product or service you requested;

• We are required to comply with a legal or regulatory obligation;

• It is necessary to protect your or another person’s vital interests;

• It is necessary to pursue PVB’s legitimate interests, provided these do not override your rights and freedoms; or

• You have given your consent, when consent is required;

• When processing is based on consent, you may withdraw your consent, subject to applicable laws and any legal or contractual requirements that may require us to continue processing or retaining certain information.

If You Have Given Your Consent

Where we rely on your consent, you may withdraw your consent at any time, subject to applicable laws and any legal or contractual requirements that may require us to continue processing or retaining your personal data.

Who May We Share Your Personal Data With?

We do not sell your personal data to marketing companies.

To provide our services, protect our customers and the Bank, and comply with our legal and regulatory obligations, we may share personal data, when necessary and permitted by law, with:

• PVB employees and authorized representatives who need the information to perform their duties;

• Service providers that support our banking, technology, security, and business operations;

• Business partners involved in providing products or services to you;

• Financial institutions, payment networks, credit information providers, and similar organizations, where applicable;

• Government agencies, regulators, courts, and law enforcement authorities; and

• Other persons or organizations when disclosure is required or permitted by law, or when you have authorized us to disclose the information.

When third parties process personal data on our behalf, we require them to implement appropriate privacy and security safeguards.

Do We Transfer Personal Data Outside the Philippines?

We do not currently routinely transfer personal data outside the Philippines. However, some technology, cloud, or other service providers may, now or in the future, process, store, or access personal data outside the Philippines.

When this happens, PVB will implement appropriate safeguards and ensure that any cross-border transfer is carried out in accordance with applicable data protection laws and regulations.

Our Website, Cookies, and Digital Services

When you visit our website or use our digital platforms, we may automatically collect technical information, such as your IP address, device information, browser type, operating system, pages visited, and other technical information about your interaction with our platforms.

We may use cookies, analytics, tools, and similar technologies to help us:

• Keep our website and digital services operating properly;

• Protect our platforms against unauthorized activity;

• Monitor performance and security;

• Understand how our digital services are used; and

• Improve our website and customer experience.

You may also voluntarily provide information through our website, social media pages, or other digital platforms, such as when you send us a question, comment, feedback, or request. We may use this information to respond to you and improve our services.

Third-party websites and social media platforms may have their own privacy policies. We encourage you to review those policies when using their services.

How Do We Protect Your Personal Data?

We take reasonable and appropriate organizational, physical, and technical safeguards to protect your personal data against unauthorized access, use, alteration, disclosure, loss or destruction.

Our safeguards may include:

• PVB and data protection training for our employees;

• Access controls and confidentiality requirements;

• Privacy Impact Assessments where appropriate;

• Physical security and restricted access to facilities and records;

• Firewalls, encryption, access controls, malware protection, and security monitoring;

• Data backup and recovery measures;

• Vulnerability assessments and penetration testing; and

• Privacy and security requirements for our third-party service providers.

How Long Do We Keep Your Personal Data?

We keep personal data only for as long as necessary for the purpose for which it was collected, or as required or permitted by law.

The applicable retention periods may depend on the type of information, the product or service involved, legal and regulatory requirements, and other legitimate business needs.

For applicable customer records, PVB may retain personal data for up to ten (10) years from the closure of account, unless a longer period is required or permitted by law or is necessary for legitimate purposes.

Once the applicable retention period ends, we will securely dispose of or anonymize your personal data in accordance with our policies and applicable requirements.

What Are Your Data Privacy Rights?

Under applicable laws and regulations, you have the right to:

• Be informed on how your personal data is being processed;

• Access your personal data;

• Request correction of inaccurate or incomplete personal data;

• Object to certain types of processing activities;

• Withdraw your consent when processing is based on consent;

• Request deletion, blocking, or removal of personal data, where applicable;

• Request data portability, where applicable; and

• File a complaint before the National Privacy Commission if you believe your privacy rights have been violated.

These rights are subject to certain limitations. For example, PVB may be required to continue processing or retaining certain information to comply with legal or regulatory requirements.

How Can You Exercise Your Rights or Raise a Privacy Concern?

If you have a question, request, or concern about your personal data, you may contact our Data Protection Officer (DPO):

Atty. Maria Zaida Ariza L. Huelgas

Data Protection Officer
Philippine Veterans Bank
Email: dpo@veteransbank.com.ph

To protect your account and personal information, we may need to verify your identity before processing your request. Depending on the nature and extent of your request, a reasonable fee may apply where permitted by law. We will inform you of any applicable fee before processing your request.

We will respond to your request within the period provided under applicable regulations. If additional time is needed because of the complexity or volume of the request, we will inform you accordingly.

If you are not satisfied with how your concern is handled, you may also raise your concern through PVB’s Contact Center.

Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our services, business practices, applicable laws, or privacy and security measures.

The updated Privacy Notice will be posted on this website together with its effective or last updated date.

We encourage you to review this Privacy Notice periodically so you remain informed about how we protect your personal data.

Contact Us

If you have questions or concerns about this Privacy Notice or how PVB processes your personal data, please contact our Data Protection Officer using the contact information provided above.

We appreciate the trust you place in PVB. Protecting your personal data is an important part of providing you with safe, secure, and dependable banking services.