Data Privacy Policy

IslaBank Digital is committed to protecting your personal data in line with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. This Data Privacy Policy explains the principles we follow when handling your personal information.

1. Personal data we process

This includes identity information collected during onboarding and identity verification, contact details, account and transaction records, and technical information such as device and login data.

2. Purpose of processing

We process personal data to open and maintain your account, execute transactions you authorize, verify your identity, detect and prevent fraud, comply with legal and regulatory obligations, and respond to your requests.

3. Data privacy principles

We aim to process personal data fairly and lawfully (transparency), only for declared and legitimate purposes (legitimate purpose), and only to the extent necessary for those purposes (proportionality).

4. Your rights as a data subject

Subject to applicable law, you have the right to be informed, to access your personal data, to object to certain processing, to request correction or erasure, and to lodge a complaint. Contact support to exercise any of these rights.

5. Data sharing

We share personal data only with service providers who support our operations under confidentiality obligations, and with regulators, law enforcement, or other parties where required by law.

6. Data retention and security

Personal data is retained only as long as necessary for the purposes described above or as required by law, and is protected using encryption, access controls, and immutable audit logging. See our security page for more detail.

7. Related policies

This Data Privacy Policy works alongside our Privacy Statement and Cookie Policy.

8. Contact

Questions about this Data Privacy Policy, or requests relating to your personal data, can be directed to our support team through the help center.