RCBC Bankard Services Corporation Data Privacy Notice

We at RCBC Banking Services Corporation (RBSC) value your privacy. We believe that you are entitled to know how we use and protect your personal information. We give this notice to inform you of the ways in which we process your personal information and the means by which you can control, to a certain extent, these processes.


Who is providing this notice?

As the personal information controller under Republic Act No. 10173 or the Data Privacy Act of 2012, RBSC gives this notice to inform you of your rights and our obligations under the law.


What personal information do we collect?

The types of personal data that we collect depend on the product or service that you avail or intend to avail from us, including but not limited to:

Additional personal data that we collect over the course of our relationship with you

Over the course of our relationship, we may collect data about you including but not limited to your transactions, account history and behavior, information, and inquiries about our products and services.

How do we collect your personal data?

There are many ways that we get information from you. We might collect your information when you fill out a form with us, when you give us a call, or use our websites or mobile applications. We may also collect your information via the following:

How do we collect and manage your sensitive personal information?

The Data Privacy Act considers the following information as sensitive:

With your consent, we will collect your sensitive information for legitimate purposes, and in cases permitted or required by law.

Personal data that we collect as authorized or required by law

We may also collect information about you when required or authorized by law. For example, we require your personal data to verify your identity under Republic Act No. 9160 or the Anti-Money Laundering Act of 2001.

Personal data that we collect via your web activities

RBSC uses "Google Analytics" to collect information about use of this site. Google Analytics collects information such as how often users visit this site, what pages they visit when they do so, and what other sites they used prior to coming to this site. We then use the information collected from Google Analytics only for purposes of improving this site. Google Analytics collects only the IP address assigned to you on the date you visit this site, rather than your name or other identifying information. RBSC does not combine information collected through the use of Google Analytics with any of your personally identifiable information.

Please note that some information may be gathered with the use of 'cookies' which are small pieces of information stored on your browser that may be retrieved by the site. Although Google Analytics plants a permanent cookie on your web browser to identify you as a unique user the next time you visit this site, the cookie cannot be used by anyone but Google and will allow Google Analytics to recognize you on any return visit to this site. Should you wish to disable these cookies, you may do so by changing the appropriate settings on your web browser.

RBSC also partners with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, you may visit the Microsoft Privacy Statement.

Personal data that we collect through social media

We know that some of you like to engage with us through social media. So that we can respond to your inquiries, we may ask for your name, contact number and email address. We will only collect your information with your consent. For account and transaction inquiries, you can always call RCBC Credit Cards Customer Service.

When will we notify you that we have received your information?

When we receive your personal information, we will take reasonable steps to notify you on how and why we collected your information, who we may disclose it to and how you can access it, seek correction of it or file a complaint. This notice may already be included in the form or document that you filled out and submitted to us. When we receive your personal data from third parties, we presume that you have permitted these parties to share your data with us. We will notify you of the circumstances of such collection upon your request.


Why do we use your personal data?

We use your personal data for various reasons, mainly:

Collecting your personal data allows us to provide you with the products and services you requested. This means we can also use your information to:

Will we use your personal data for customer profiling and direct marketing?

With your consent, we may use your personal data to let you know about non-bank products and services that we believe may be of interest to you, including products and services from our related companies (cross-selling). To help us determine offers most suitable to you, we may use automated tools for profiling and data analytics.

Such marketing activities may be via mail, telephone, SMS, email, or any other electronic means. We may also market our products through third party channels (such as social media sites) and partners.

You can let us know at any time if you no longer wish to receive direct marketing offers or object to the processing of your data for profiling.


How long do we keep your personal data?

Your personal information shall be retained for as long as the purposes for which it was collected, and such other purposes that you may have consented to from time to time, remain in effect.

We also keep your information for a period required by law and regulations.

How do we take care of your personal data?

We store information in paper and electronic formats. The security of your personal data is important to us and we take reasonable steps to protect it from misuse, interference, loss, unauthorized access, modification, and unauthorized disclosure by establishing and enforcing measures that include, but not limited to, the following:

We may store your personal data physically or electronically with third-party data storage providers. When we do this, we use contractual arrangements to ensure those providers take appropriate measures to protect that information and restrict the uses to which they can put that information.


Sharing with the government

To comply with legal and regulatory mandates, we submit required information to government agencies, like the Bangko Sentral ng Pilipinas (BSP), Bureau of Internal Revenue (BIR), and Securities and Exchange Commission (SEC).

Sharing with Credit Reporting Bodies

Pursuant to Republic Act No. 9510 or the Credit Information System Act, we may disclose your personal and other relevant information to the Credit Information Corporation in connection with your application for and availment of a credit facility with us. This information may include data on your creditworthiness. We may also share such information with other credit bureaus authorized by the Credit Information Corporation.

Sharing with Service Providers

In the normal course of our operations, we may share your data with third-party service providers who passed our due diligence assessment to perform tasks and activities on our behalf. They will be provided only with personal data necessary to perform their services.

Contractual protections and monitoring procedures are in place to ensure they do not process such data for other purposes. These activities may be performed by IT firms to provide us with application systems and IT infrastructure services, including cloud services

Sharing with other persons and entities

After obtaining your consent, we may disclose your information to third parties for further processing such as marketing, cross-selling and other specified legitimate purposes. In instances where your information is shared with third parties, we will ensure that we would only share your data with entities that can demonstrate sufficient organizational, technical and physical security measures.


What happens when we no longer need your information?

We will only retain your information for as long as necessary for the purpose for which they were collected or as required by law and regulation. We will destroy your personal data when its retention is no longer required by purpose, law, or regulation.


How do you access or correct your personal data?

Unless there are practical, contractual, or legal reasons why we cannot process your request, you have the right to ask for a copy of any personal information we hold about you, as well as to ask for it to be corrected if you think it is wrong. To do so, please email dataprivacy@rcbcbankard.com.


Under the Data Privacy Act, you have the right:


We may amend this Notice to comply with changes in relevant laws and regulations, and to keep you informed of changes in the ways we process your personal data.

Updates will be posted on this website.


We care about what you think and we welcome your feedback. You can contact RCBC Credit Cards Customer Service at the following numbers:

For your data privacy concerns and requests, you can email our Data Protection Officer at dataprivacy@rcbcbankard.com.

You may also contact the National Privacy Commission
Email: info@privacy.gov.ph or complaints@privacy.gov.ph
Address: 5th Floor Delegation Building, PICC Complex, Roxas Boulevard
Mobile Nos. 09451534299 / 09399638715