DMCI Project Developers, Inc., including our subsidiaries, specialized projects, and business units, places utmost importance on the privacy of your information. We are dedicated to using your personal, sensitive, and privileged data solely for its intended purpose, adhering to all relevant national and local laws. We will keep your information only as long as necessary and protect it against any data privacy breaches. All data you provide is protected under the Data Privacy Act of 2012, Philippine laws, and our Data Privacy Policy.
How We Use Your Information
The personal details you share with us are used exclusively for transactions related to the sale of our properties and any related matters. We want to make sure the information we have is correct. Unless you, as a client or potential client, ask us to update or change something, we’ll assume the information we have is accurate. It’s your responsibility to make sure the information you give us is correct, and we’re not responsible for any mistakes if it’s not.
To illustrate this, consider a scenario where you’re purchasing a condominium unit. The information you provide, such as your name, address, contact number, and financial details, will be used to process your application, prepare the necessary contracts, and facilitate payment. This ensures a smooth and efficient transaction process. In the event that you apply for financing through our partner banks, your information might be shared with them, but only with your explicit consent, to evaluate your loan application. According to a recent study on data privacy in the real estate sector, transparency in data usage builds stronger client relationships and boosts trust.
Keeping Your Information Up-to-Date
It is very important to keep your information accurate. Keeping your data updated avoids potential issues during transactions. For example, an outdated address can cause delays in receiving important documents, while an incorrect phone number might prevent us from reaching you with critical updates about your property. We encourage our clients to proactively inform us of any changes to their information promptly. You can easily do this by contacting our customer service team or your designated sales agent. If you move to a new residence, promptly updating your mailing address and contact details ensures that you receive property tax notifications, homeowners’ association communications, and other essential information.
Your Rights as a Client
Under the Data Privacy Act of 2012, you have the right to:
Access your data.
Correct any mistakes in your data.
Delete your data.
Object to the processing of your data.
If you want to use any of these rights, please contact our Data Protection Officer, Josephine C. Isidro, using the contact information below:
Address: 1321 Apolinario St., Brgy. Bangkal, Makati City PH 1322
Phone No.: (02) 555-7777 x7863
Email Address: dataprivacyoffice@dmcihomes.com
We will not charge you any fees to process your request, including verifying your request, finding your information, or reviewing any documents you’ve asked for.
Exercising Your Right to Access Your Data
Understanding how to exercise your right to access your data is crucial. You can submit a formal request to our Data Protection Officer, clearly specifying the personal information you wish to access. We will then provide you with a copy of your data in a readable format, explaining how it has been used and with whom it has been shared. This enables you to verify the accuracy of your information and understand how it is being utilized within our systems.
For example, if you’re curious about what details we have on file regarding your property purchase, you can request everything from your initial application form to the records of your payments and any correspondence related to your account. Transparency in data access is essential for fostering trust and ensuring that you maintain control over your personal information.
The Right to Rectification: Correcting Inaccuracies
The right to rectification allows you to correct any inaccuracies or outdated information we hold about you. If you notice an error in your name, address, or any other personal detail, you can request that we update it. To do so, simply provide us with the correct information and any supporting documentation that verifies the changes.
For instance, if you’ve moved to a new address, you can submit a copy of a utility bill or a government-issued ID showing your current residence. Our team will promptly update your records to ensure that all future communications and transactions reflect your accurate information.
The Right to Erasure: Deleting Your Data
The right to erasure, also known as the “right to be forgotten,” empowers you to request the deletion of your personal data under certain circumstances. This right is applicable when the data is no longer necessary for the purpose for which it was collected, when you withdraw your consent for its processing, or when the data has been unlawfully processed. As per Data Privacy Act, it could also be applicable if DMCI’s basis of processing is consent.
Follow us on LinkedIn!
However, it’s important to understand that this right is not absolute and may be subject to limitations. For instance, we may be required to retain certain data for legal or regulatory compliance purposes, such as maintaining financial records for tax audits or complying with anti-money laundering laws. In such cases, we will inform you of the reasons why we cannot fully comply with your request for erasure.
Objecting to Data Processing
The right to object gives you the power to oppose certain types of data processing, particularly when it’s based on our legitimate interests or for direct marketing purposes. If you believe that our processing of your data is causing you unwarranted harm or distress, you can object and request that we cease the processing.
For example, if you no longer wish to receive promotional emails or marketing materials from us, you can exercise your right to object by unsubscribing from our mailing list or contacting our Data Protection Officer directly. We will then ensure that your data is no longer used for marketing purposes.
When We Can’t Process Your Request
Sometimes, we might not be able to fulfill your requests to access or change your data because of laws and regulations. We will always explain why if this happens.
How We Keep Your Data Safe
We use many security measures to protect your information from being lost, misused, changed, accessed without permission, accidentally disclosed, or destroyed. These include:
Using secure servers with strong firewalls and encrypting data on our computers.
Restricting access to your information to only qualified and authorized personnel who must keep it confidential, including third-party companies that may need to process your information.
Elaborating on Technical Security Measures
To ensure the confidentiality and availability of your personal data, we employ a variety of technical security measures. Our servers are housed in secure data centers with advanced physical and environmental safeguards, including round-the-clock surveillance, access controls, and backup power systems.
We use encryption, a process of encoding data to make it unreadable to unauthorized parties. Encryption protects your information both when it is stored on our servers and when it is transmitted over the internet. We use industry-standard encryption protocols, such as Transport Layer Security (TLS), to secure communications between your browser and our servers.
Furthermore, we regularly monitor our systems for potential vulnerabilities and threats, and we conduct penetration testing to identify and address any weaknesses in our security defenses. Our IT security team stays up-to-date on the latest security trends and best practices, and we continuously update our security measures to maintain strong protection.
Organizational Measures for Data Protection
In addition to technical security measures, we have implemented a range of organizational measures to safeguard your personal data. We have established clear data privacy policies and procedures that are communicated to all employees, and we provide regular training to ensure that they understand their responsibilities for protecting personal information.
Access to your data is strictly controlled and limited to authorized personnel who need it to perform their jobs. We use access control mechanisms, such as user IDs and passwords, to verify the identity of individuals accessing our systems. We also implement the principle of least privilege, which means that employees are granted only the minimum level of access necessary to perform their duties.
We have established procedures for responding to data breaches and other security incidents. If a data breach occurs, we will promptly take steps to contain the breach, mitigate the damage, and notify affected individuals and regulatory authorities as required by law.
Physical Security Controls
Physical security controls are essential for preventing unauthorized access to our premises and data centers. Our facilities are protected by a range of physical security measures, including surveillance cameras, alarm systems, and access control systems.
Access to our data centers is strictly controlled and limited to authorized personnel. We use biometric authentication methods, such as fingerprint scanners, to verify the identity of individuals entering our data centers. We also maintain logs of all physical access to our facilities.
Follow us on LinkedIn!
How Long We Keep Your Data
We will keep your information for no more than ten years after our last interaction with you (like when we release the title to your property or finalize a cancellation), unless the law requires us to keep it longer. If you ask us to delete your data sooner, we will do so, as long as it doesn’t violate any laws. Once your information is deleted, it cannot be recovered and will not appear in any anonymous searches.
Consider a scenario where you purchased a condominium unit from us, and the title to the property was transferred to your name in 2024. Under our data retention policy, we would typically retain your personal information until 2034, unless you request its deletion earlier or unless applicable laws or regulations require us to keep it for a longer period. For example, we may be required to retain certain financial records related to your property purchase for tax audit purposes.
Suppose you request the deletion of your data in 2028. In that case, we would assess your request in accordance with the Data Privacy Act of 2012 and other relevant laws. If there are no legal or regulatory obligations that require us to retain your data, we would proceed with deleting it from our systems, databases, and physical records.
Once your data is deleted, it will be permanently removed from our active systems and will no longer be accessible or retrievable. Your data will also be removed from any backup systems, ensuring that it cannot be recovered even in the event of a system failure or disaster.
Your Consent
By agreeing to this policy, you are giving DMCI Project Developers, Inc. your permission to collect, use, and store your personal data as described in this notice.
Withdrawing Your Consent
You have the right to withdraw your consent at any time, although you should consider that it may affect the transactions that you would like to proceed. If you wish to withdraw your consent, please contact our Data Protection Officer using the contact information provided above. We will respect your decision and cease processing your data accordingly.
Trust and Confidentiality
At DMCI Project Developers, Inc., we are fully dedicated to protecting the privacy of your information. We use technological, organizational, and procedural measures to ensure your data is handled securely and in compliance with the law. We value your trust and strive to protect your information at all times.
We are committed to maintaining transparency in our data protection practices. We regularly review and update our policies and procedures to ensure that they are aligned with the latest legal and regulatory requirements and industry best practices. We also provide ongoing training to our employees to ensure that they are aware of their data protection responsibilities and that they handle personal information with care and respect.
We invite you to review our Data Privacy Policy, which provides additional details about our data protection practices and your rights as a data subject. If you have any questions or concerns about our data protection practices, please do not hesitate to contact our Data Protection Officer.
We understand that your personal information is valuable, and we are committed to protecting it. By entrusting us with your data, you can be confident that it will be handled securely and in accordance with the highest standards of privacy and confidentiality.
Frequently Asked Questions (FAQs)
Q1: What types of information does DMCI collect?
A1: We collect personal, sensitive, and privileged information that you provide to us, which is necessary for the transactions related to our properties and services. This includes your name, contact information, address, financial details, and other information required to process your application, prepare contracts, and facilitate payments.
Q2: Can I request to delete my information?
A2: Yes, you can submit a request for deletion of your information, and we will comply in accordance with the applicable laws and regulations. We have the right to only process the personal information necessary for a particular transaction.
Q3: Is there a fee for accessing my personal information?
A3: No, we do not impose any fees for accessing your information or for processing requests related to your data, unless otherwise permitted by law.
Q4: Who can I contact for questions regarding privacy?
A4: You can contact our Data Protection Officer, Josephine C. Isidro, using the information provided above. She is readily available to address your queries and ensure your concerns are addressed efficiently.
Q5: How long will DMCI keep my data?
A5: We retain your personal data for a period not exceeding ten years from the date of our last engagement, or as long as required by existing laws and regulations. After this period, your data will be securely deleted or anonymized.
Q6: What security measures are in place to protect my data?
A6: We have implemented extensive technological, organizational, and physical security measures to protect your information from loss, misuse, alteration, unauthorized access, accidental disclosure, or destruction. These include secured servers, firewalls, encryption, access controls, and regular security audits.
Q7: Can I withdraw my consent for data processing?
A7: Yes, you have the right to withdraw your consent for data processing at any time. However, this may affect our ability to provide you with certain products or services.
Q8: Will DMCI share my information with third parties?
A8: We may share your information with third parties, such as partner banks or service providers, only when necessary for the purposes outlined in this Data Privacy Notice and with your explicit consent. We ensure that these third parties are also bound by strict data protection obligations.
Q9: How do I know if your Data Privacy Notice is updated?
A9: We regularly review and update our Data Privacy Notice to ensure that it is aligned with the latest legal and regulatory requirements and industry best practices. Any changes to our Data Privacy Notice will be posted on our website, and we will notify you of any material changes.
Q10: What should I do if I suspect a data breach?
A10: If you suspect that your personal data has been compromised or that there has been a data breach, please contact our Data Protection Officer immediately. We will investigate the incident and take appropriate steps to contain the breach and mitigate any potential harm.
References
Data Privacy Act of 2012
Applicable laws and regulations of the Philippines
DMCI Data Privacy Policy
Your privacy matters to us! DMCI Project Developers, Inc. is committed to protecting your personal information. By understanding your rights and our data protection practices, you can trust us to handle your data with care and transparency! Contact us today to learn more about how we safeguard your information.
