Privacy Policy

Effective as of July 2025

Rural Bank of Lumban (Laguna) Inc. (the “Bank”) values the privacy of its clients and is committed to protecting all personal data in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations. This Privacy Policy outlines the manner in which the Bank collects, uses, stores, and safeguards personal information obtained in the regular course of its operations.

1. Scope and Application

This Policy applies to all individuals whose personal data is collected or processed by the Bank in connection with its banking services. It encompasses data gathered through in-branch transactions, official correspondence, and other legitimate engagements.

2. Collection of Personal Data

The Bank may collect personal data directly from clients or authorized representatives when:

• Opening an account or applying for a loan
• Submitting documentation or inquiries
• Participating in marketing initiatives or surveys

Such data may include, but is not limited to: full legal name; residential or mailing address; contact details; government-issued identification; income and employment information; transaction history; and CCTV or other security recordings.

3. Purpose of Processing

Personal data is collected and processed for legitimate purposes, including the facilitation of banking transactions, credit evaluation, compliance with regulatory obligations, customer service operations, and—where applicable—marketing communications subject to prior consent.

4. Lawful Basis for Processing

The Bank processes personal data based on one or more of the following legal grounds: consent of the data subject; performance of a contract; compliance with a legal or regulatory obligation; protection of vital interests; or pursuit of the Bank’s legitimate interests, including fraud prevention and operational efficiency.

5. Data Sharing and Disclosure

The Bank may disclose personal data to government regulators (e.g., BSP, AMLC, BIR), credit bureaus, accredited service providers, or legal and auditing professionals. Any such disclosure shall be made in accordance with applicable confidentiality obligations and only as permitted by law. The Bank does not sell or trade personal data to third parties.

6. Data Retention

The Bank retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable regulations. When retention is no longer required, records are securely disposed of in a manner that ensures confidentiality.

7. Data Protection Measures

As a brick-and-mortar institution, the Bank implements strict physical and administrative safeguards to protect client data. These include controlled access to record storage areas, confidentiality protocols for personnel, secure filing systems, and routine compliance training for all staff involved in data handling.

8. Rights of Data Subjects

Data subjects are entitled to exercise their rights under the Data Privacy Act, which include:

• •The right to be informed of data processing activities
• •The right to access or request correction of personal data
• •The right to object or withdraw consent
• •The right to request blocking or deletion, subject to legal conditions
• •The right to lodge a complaint with the National Privacy Commission

9. Use of Website Cookies and Analytics

The Bank’s website may use cookies or analytics tools to improve user experience. These do not capture personal data unless voluntarily provided. Users may disable cookies through their browser, subject to functionality limitations.

10. Policy Amendments

This Policy may be amended from time to time, and any revisions shall be published on the Bank’s official website. Continued use of the Bank’s services following such publication constitutes acceptance of the updated terms.

11. Contact Information

For inquiries, complaints, or requests relating to data privacy, clients may reach the Bank’s Data Protection Officer through the following channels:

Phone: 09228360467
Email: rblumban@rbap.org