Contact Us

1. Kinds of Data We Process

Borrower: linkable information to your Personal Data such as (1) Personal identification information, such as your name, permanent address, present address, date of birth, gender, citizenship, work-related photograph, signature specimen, mobile number, home phone number, email address, and other contact details; (2) Government-issued identification numbers relevant for purpose of payroll and compliance with statutory requirements, such as Tax Identification Number, Social Security System number, PAG-IBIG number, Unified Multi-Purpose ID; (3) Family and emergency contact details; (4) Job-related, compensation, and benefits-related information; (5) Educational and training information; (6) Information needed for compliance and risk management, such as background investigations in credit data and security checks; and (7) Information as may be required by Government Regulators, such as, but not limited to, Bangko Sentral ng Pilipinas, Securities and Exchange Commission.
Guarantor: linkable information to your Personal Data such as (1) name, contact number, email, relationship with the borrower, and other relevant information as to your personal circumstances will be used in assessing your eligibility as Guarantor for the loan of the Borrower;

2. Data Processing

Personal data provided by you or by others will be used by us, for the following processes:

Data Storage
- We store Personal Data in secure and encrypted Invested-managed environments, devices, and media.
Data Access
- Personal Data can only be accessed by authorized personnel on a role-based manner following the proportionality principle that authorized personnel can only access Personal Data they need for their role and purpose in the organization.
Data Use
- For Borrowers
- For Guarantors
Data Retention
- Invested has the prerogative to retain all personal and employee data obtained. Disposal thereof rests on its discretion. However, any data that will be disposed shall not be subject to recovery.
Data Disposal
- After the expiration of the imposed retention period, we dispose personal data in a secure manner in order to prevent further processing, unauthorized access, or disclosure to any other party.
Data Sharing and Purpose
- We may disclose your Personal Data for legitimate purposes in the following circumstances to:
- In case of necessary and lawful disclosure of Personal Data not mentioned above, Invested shall issue Privacy Notice describing the nature of the disclosure and the reason thereto.

3. Rights of Data Subjects

Under the Data Privacy Act of 2012, you have the following rights:

Right to be informed – you may demand the details as to how your Personal Data is being processed or have been processed by the Invested, including the existence of automated decision-making and profiling systems.
Right to access – upon written request, you may demand reasonable access to your Personal Information, which may include the contents of your processed personal information, the manner of processing, sources where they were obtained, recipients and reason of disclosure.
Right to dispute – you may dispute inaccuracy or error in your Personal Information in the Invested systems through our contact center representatives.
Right to object – you may suspend, withdraw, and remove your Personal Information in certain further processing, upon demand, which include your right to opt-out to any commercial communication or advertising purposes from the Invested.
Right to data erasure – based on reasonable grounds, you have the right to suspend, withdraw or order blocking, removal or destruction of your personal data from the Invested’s filing system, without prejudice to the Invested continuous processing for commercial, operational, legal, and regulatory purposes.
Right to data portability – you have the right to obtain from the Invested your Personal Information in an electronic or structured format that is commonly used and allows for further use.
Right to be indemnified for damages – as data subject, you have every right to be indemnified for any damages sustained due to such violation of your right to privacy through inaccurate, false, unlawfully obtained or unauthorized use of your information.
Right to file a complaint – you may file your complaint or any concerns with our Data Protection Officer and/or with the National Privacy Commission through www.privacy.gov.ph

4. Security

We implement appropriate technical and organizational safeguards (policies and procedures, IT security, and so on) to ensure the confidentiality, integrity, and availability of your Personal Data and the manner in which they are processed. We have an internal policy framework that is kept up to date with regulations and market developments on a regular basis.

You are also responsible for helping to protect the security of your Personal Information. For instance, never give out your password, and safeguard your username, password, and personal credentials when you are using the Services, so that other people will not have access to your Personal Information. Furthermore, you are responsible for maintaining the security of any personal computing device on which you utilize the Services.

5. Personal Data Breach Management

If Invested suspects or becomes aware of any security breach involving your Personal Data within our network, operating systems, software applications, data storage systems, media channels or other office procedures, we shall notify you and the National Privacy Commission within seventy-two (72) hours from knowledge thereof, as mandated under NPC Circular No. 16-03, and shall fully cooperate with the regulators and government agencies to prevent or stop the Personal Data Breach.

6. Indemnification

You agree to defend, indemnify, and hold Invested, its affiliates, and our respective officers, directors, stockholders, employees, and agents harmless from and against any and all claims, suits, causes of action, liability, costs, and damages, including attorney’s fees and costs of litigation, in connection with or as a result of any claim arising from your direct acts or omissions amounting to violation of the DPA and/or other pertinent data protection laws. In case of material and substantial violation of these laws and such will cause the Invested irreparable injury for which it would have no adequate remedy at law and for which is an urgent and permanent necessity to prevent serious damage, the Invested shall be entitled to immediately seek an injunctive relief prohibiting any violation of this Policy and your employment agreement with the Invested in addition to any other rights and remedies available to the Invested.

7. Revisions to Privacy Notice

This Privacy Notice may be revised from time to time. Notice of any such revision will be given on Invested's website and/or by such other means of communication deemed suitable by Invested.

8. Contact our Data Protection Officer

If you'd like to exercise any of your data subject rights under applicable privacy laws, or if you have questions about your personal information, please send us an email with a detailed description of your data privacy-related query or request, and we'll do our best to help you.

We may decline certain deletion or removal requests if we believe doing so would prevent us from fulfilling our legitimate purpose for retention and processing of your data, for instance, in order to fulfill a contractual agreement, or to comply to valid requests by a court or a law enforcement agency.

Email: dpo@invested.ph

We would love to hear from you.