PRIVACY NOTICE
Rainbow Fintech (hereafter the “Company”) values your privacy and is fully committed to respecting your privacy and protecting your information in compliance with the requirements of Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012.
The Online Privacy Notice (“Privacy Notice”) applies to Rainbow Fintech’s websites and mobile applications and explains how we collect, use, and disclose the information we collect on our Websites and Apps.
CONSENT
By using our Websites and Mobile Applications, or providing us with your Personal Data, youhave given your permission for our collection, use, and processing of your Personal Data, and you have accepted the policies and practices described in this Privacy Notice. You agree to hold the Company and third-party insurance providers free and harmless from any liability that may arise as a result of the authorization given above.
You agree that all personal and sensitive information you provide is true and correct to the best of your knowledge, and that you give this information freely and voluntarily to the Company and third-party insurance providers. You consent to the collection and recording of these information for purposes that are relevant and necessary in securing an insurance contract or transacting business, or any activity with the Company and third-party insurance providers. You authorize the Company and third-party insurance providers to keep, store, enter into the processing system, update, use, access, process the information given, and to share, transfer, or disclose data to the Company and third-party insurance providers, their affiliates, subsidiaries, contractors, partners, agents and representatives, intermediaries, industry associations, and third parties such as, but not limited to, outsourced service providers, external auditors, and local and foreign regulatory authorities for purposes including marketing, provision of products, services, or offers via mail/email/SMS/telephone, profiling, research, customer satisfaction surveys, statistical and risk analysis, tax monitoring, review and reporting, compliance with court and other lawful orders and requirements, the Anti-Money Laundering Act, the Credit Information System Act, and all other regulatory laws, and other activities consistent with the Data Privacy Act and subject to appropriate security safeguards.
If you do not allow the collection, use, and processing of your Personal Data, kindly refrain from using our Websites and Mobile Applications and/or contact us for any privacy-related concerns.
INFORMATION WE COLLECT
The types of Personal Data we collect vary depending on your transaction with us. These generally consist of the following information, and images or documents containing:
- Personal information, such as full name, postal address, e-mail address, mobile number, and other personal contact numbers;
- Sensitive personal information, such as birth date, age, nationality, marital status, gender, health /medical details, education, government-issued identification documents, police reports, and other government-issued reports;
- Financial details, such as proof of bank account, credit card, debit card, and e-wallet information.
- Vehicle details, such as Official Receipt (OR), Certificate of Registration (CR), vehicle make / model; and
- Other images/documents related to or necessary to process your insurance application and insurance claims.
PURPOSES OF COLLECTED PERSONAL DATA
We collect your Personal Data, without limiting the generality of the purpose, to facilitate your insurance transaction and to:
- Confirm your identity;
- Create your account;
- Conduct financial analysis needs;
- Determine your eligibility and suitability for our products and services;
- Communicate relevant advisories;
- Process your insurance application and insurance claims;
- Release of insurance benefits;
- Abide by any safety, security, public service, or legal requirements and processes, as may be necessary; and
- Process information for statistical, analytical, research purposes, and underwriting purposes.
We collect your Personal Data to the extent necessary to comply with the requirements of the law and legal processes, such as but not limited to legal and regulatory obligations to the Insurance Commission (IC) and the Anti Money Laundering Council (AMLC).
When required by our Privacy Notice and the law, and before we use or process your Personal Data for any other purpose, we will ask for your consent.
SAFEGUARDS
We will your protect personal data with security safeguards that are appropriate to the sensitivity of the information, to protect it from unauthorized access, release, modification, or use.
We are responsible for personal data in our possession, including information transferred to service providers who perform duties on our behalf. When we share personal data with our service providers, they must protect it in ways that are consistent with our privacy policies and practices through the execution of Non-Disclosure Agreements (NDA) and secured format of data processing. Your personal data may be disclosed in the following circumstances:
- When the disclosure is required to meet the obligations associated with providing the goods or services you have availed;
- To third-party insurance providers, agents, and other organizations we have enlisted to carry out any of the requested services; and
- When legally mandated through a valid order by any court or tribunal.
YOUR DATA PRIVACY RIGHTS
Your data privacy rights are protected by the Philippine Data Privacy Act of 2012. This law states that you have the right to:
- Stay informed. You should be notified about the processing of your personal data, including automated decision-making and profiling in specific transactions.
- Access your information. Upon written request, you have the right to reasonably access details about the processing of your personal data, including sources, recipients, reasons for disclosure, modification dates, and information on automated decision-making affecting you.
- Correct inaccuracies. Rectify any errors in your personal data and request prompt correction if necessary.
- Right to Object. You shall have the right to object to the data processing of your personal data based on reasonable grounds. In cases of any significant change or amendment to this privacy notice, you shall be notified and given the opportunity to object and/or withdraw your consent, which was previously given for data processing.
- Delete or block. You can, on reasonable grounds, request the suspension, withdrawal, or blocking of your personal data from Rainbow Fintech’s system, while allowing continued processing for commercial, operational, legal, and regulatory purposes.
- Ensure data portability. If your personal data is processed electronically and in a standard format, you have the right to obtain a copy from Rainbow Fintech for your use.
- Receive compensation for damages. You are entitled to compensation for any harm caused by inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data, considering violations of your rights and freedoms.
- Institute a complaint. To file a complaint or exercise your rights, contact our Data Protection Officer using the provided contact details.
PERSONAL DATA RETENTION
Your personal data will be retained by Rainbow Fintech throughout your plan, investment, or account and/or until the expiration of the retention limit of not more than five (5) years set by Rainbow Fintech standards, industry standards, laws and regulations. This period will be counted from account closure and will be set until destruction, disposal, or anonymization of records, unless withdrawn in writing or withheld due to changes in the information supplied by the Company and third-party insurance providers.
PRIVACY NOTICE TERMS
Rainbow Fintech reserves the right to update or change sections of this Privacy Notice at any time and without prior notice. We will exert reasonable efforts to reach out to our clients in case there are significant changes, but we highly encourage you to review this Notice every now and then.
If you have questions about this Privacy Notice, our data processing activities, or transactions, you may contact Rainbow Fintech’s Data Protection Officer at info@surely.digital.