Data Subject Rights
Data subjects may exercise their rights to be informed, access, correct, object, request erasure or blocking, data portability, and damages, or lodge a complaint with the National Privacy Commission.

Vendor & Processing Roles
The platform provider acts as a Personal Information Processor strictly under EqB's documented instructions. EqB retains exclusive ownership of all master and transaction data. The provider is bound by confidentiality, cannot engage sub-processors without EqB consent, and is subject to BSP and audit inspection.

Data Retention
Personal data is retained during active investigation and for five (5) years post-resolution to satisfy BSP and statutory record-keeping mandates, after which it is securely destroyed or anonymized.

Whistleblower Protection
EqB guarantees strict confidentiality of the reporter's identity and protects good-faith whistleblowers against retaliation, discrimination, or adverse employment actions.