Privacy Policy

In order to make use of Everypay, we will need to collect, with your consent, certain information from you. Rest assured, any and all information we receive will be adequately protected against misuse and will only be utilized for the purposes specifically stated prior to registration. Everypay will only collect information that is adequate for the purposes for which they are collected.

I. Definition of terms

Pursuant to R.A. No. 10173 or the Data Privacy Act of 2012, we will be adopting the following definitions for the purposes of this privacy policy: Consent of the data subject refers to any freely given, specific, informed indication of will, whereby the data subject agrees to the collection and processing of personal information about and/or relating to him or her. (Section 3(b), R.A. No. 10173) Consent given to Everypay shall be evidenced electronic means. Data subject refers to an individual whose personal information is processed. (Section 3(c), R.A. No. 10173) Personal information refers to any information whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual. (Section 3(g), R.A. No. 10173) Section 3(h), R.A. No. 10173) Personal information controller refers to a person or organization who controls the collection, holding, processing or use of personal information, including a person or organization who instructs another person or organization to collect, hold, process, use, transfer or disclose personal information on his or her behalf. (Section 3(h), R.A. No. 10173) Processing refers to any operation or any set of operations performed upon personal information including, but not limited to, the collection, recording, organization, storage, updating or modification, retrieval, consultation, use, consolidation, blocking, erasure or destruction of data. (Section 3(j), R.A. No. 10173) Sensitive personal information refers to personal information:

  1. About an individual’s race, ethnic origin, marital status, age, color, and religious, philosophical or political affiliations;
  2. About an individual’s health, education, genetic or sexual life of a person, or to any proceeding for any offense committed or alleged to have been committed by such person, the disposal of such proceedings, or the sentence of any court in such proceedings;
  3. Issued by government agencies peculiar to an individual which includes, but not limited to, social security numbers, previous or current health records, licenses or its denials, suspension or revocation, and tax returns; and
  4. Specifically established by an executive order or an act of Congress to be kept classified. (Section 3(l), R.A. No. 10173)

Everypay shall hereinafter be referred to “personal information controller” and, you as, Everypay user, as “data Subject”.

II. Information we collect

When a data subject signs up for an Everypay account, the following personal information will be collected:

Name
Gender
Date of birth
Age
Mobile number
Bank Account Information
Email address
Employer Details
Salary information

For the purpose of this Policy, the term "Non-Personal Information” shall mean information that does not specifically identify an individual but includes information from you such as the type of internet browser you use, mobile device or computer you use, your mobile device's unique device ID, your, your Internet Service Provider (ISP) and your Internet Protocol (IP) address.

III. Processing of your personal information

All personal information collected from the data subject will be processed only for the legitimate purposes stated below:
1. To facilitate account creation
2. Direct marketing to be conducted exclusively by the personal information controller
3. To perform verification procedures
4. To request feedback
5. To enforce our terms, conditions and policies for business purposes, to comply with legal and regulatory requirements or in connection with our contract
6. To manage user accounts

Any processing of personal or sensitive personal information not herein provided for shall require prior notification to and consent from the data subject specific to the purpose prior to its processing.

IV. Protection of your personal information

To ensure that your personal information is adequately protected, the personal information controller undertakes to do the following: Collect only personal information that is adequate and not excessive in relation to the purpose for which they are collected (Section 11(d)), R.A. No. 10173).

Process personal information only for the purposes stated herein or any processing that shall hereinafter be consented to by the data subject.

Retention of your personal information only for a limited period in case of account closure. Upon account closure, the personal information controller shall immediately cause the deletion from its records any personal information pertaining to the data subject, Provided: any government laws and regulations that the personal information controller is and will be subject to, requiring longer retention periods in case of account closure, shall prevail.

Access to your personal information shall be limited to the personal information controllers and its authorized agents.

The personal information controller shall not subcontract the processing of your personal information. Any and all processing shall be done exclusively by the personal information controller and its authorized agents.

The personal information controller shall employ sufficient security measures to ensure that any personal information shall not be subject to any unauthorized access or processing.

Your rights as a data subject

You, as a data subject, shall be entitled to:

Be informed, prior to processing of your personal information, of the purpose/s for which the information is to be processed.

Withhold consent in case of any amendment to the purposes for which personal information is collected and/or processed.

Correction of your personal information in case of inaccuracies or errors.

The right to have access to a copy of your data in a structured format.

The right to request from the personal information controller deletion or erasure of any personal information provided, subject to the provision in IV(3) of this Privacy Policy. The personal information controller shall employ sufficient security measures to ensure that any personal information shall not be subject to any unauthorized access or processing. If you have any questions or concerns regarding this Privacy Policy and/or the collection or processing of your personal information, please contact us at info@everypay.ph