Data Privacy

Whistleblower Application Privacy Notice

Equicom Savings Bank.  (“EqB,” “we,” “us”)  values your privacy and is committed to protecting personal data in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission. This Privacy Notice explains how personal data is collected and processed in relation to the use of EqB’s Whistleblower Application.

Purpose

EqB’s Whistleblower Application (the “System”) is used to securely receive and process reports of suspected violations, misconduct, unethical behavior, or other acts detrimental to the Company, its employees, clients, or stakeholders.

Legal Basis for Processing

Personal data collected through the System is processed based on:

Legitimate Interest – for the detection, prevention, investigation, and resolution of violations and misconduct;
Compliance with Legal Obligations; and
Employment Relationship, where applicable.

Voluntary Reporting and Anonymity

Use of the System is voluntary. Reports may be submitted anonymously or with identifying information. Providing contact details may assist in the investigation but is not required.

Personal Data Collected

Depending on the report, the following data may be processed:

Reporting person’s name, contact details, and relationship to EqB’s (if voluntarily provided);
Personal data of persons involved, witnesses, or relevant individuals, limited to what is necessary for the report.

Access, Use, and Disclosure

Personal data is accessed only by authorized EqB’s personnel on a need-to-know basis and treated with strict confidentiality. Data may be disclosed to law enforcement or regulatory authorities only when required by law or lawful order.

The system provider is engaged solely for technical maintenance and has no ownership over the data.

Data Security

EqB implements appropriate organizational, physical, and technical security measures, including encrypted communications and restricted access controls, to protect personal data processed through the System.

Data Retention

Personal data is retained during active investigation and for five (5) years post-resolution to satisfy BSP and statutory record-keeping mandates, after which it is securely destroyed or anonymized.

Data Subject Rights

Data subjects may exercise their rights to be informed, access, correct, object, request erasure or blocking, data portability, and damages, or lodge a complaint with the National Privacy Commission.

Vendor & Processing Roles

The platform provider acts as a Personal Information Processor strictly under EqB’s documented instructions. EqB retains exclusive ownership of all master and transaction data. The provider is bound by confidentiality, cannot engage sub-processors without EqB consent, and is subject to BSP and audit inspection.

Whistleblower Protection
EqB guarantees strict confidentiality of the reporter’s identity and protects good-faith whistleblowers against retaliation, discrimination, or adverse employment actions.

Contact Information

For questions or concerns regarding this Privacy Policy or the processing of personal data, you may contact:

Data Protection Officer
Equicom Savings Bank
Email Address: dpo@equicomsavings.com.ph