This Privacy Policy describes how your personal information is collected, used, and shared when you visit  (the “Site”).

ECPAY PRIVACY POLICY

Data privacy is important to Electronic Commerce Payments Inc. (“ECPay” or “we” or “us”). This Privacy Policy and Privacy Notice describes the Personal Data that we collect about you as a visitor to ECPay’s website, or other ECPay websites that links to this Privacy Policy & Privacy Notice, how we use it, with whom we share it, and describes your rights with regard to the Personal Data we have about you.


Your Rights As Our Customer

ECPay recognizes that you should be the ultimate decision-maker on matters that involve your Personal Information. To this end, ECPay is mindful of the fundamental right to privacy of every ECPay customer under the Data Privacy Act of 2012.

Right to Be Informed

You have the right to be informed of how and why we collect and process your personal data, including where we collected it, with whom we share it and why, how we protect it, how long we keep it, and how we dispose of it, and any changes to our data processing activities before they are implemented.

Right to Object

You have the right to object to the processing of your personal data when the sole criteria for processing is our legitimate interest. However, this may result in the termination of your ECPay product or service when the processing of personal data objected to is necessary for its delivery.

You also have the right to withdraw any consent previously given for the processing and/or sharing of your personal data.

Right to Access

You have the right to request reasonable access to your personal data subject to ECPay’s internal procedures. We, however, reserve the right to seek reasonable fees when providing such data presents certain challenges due to its volume as well as to restrict access to linked data that may be confidential, proprietary, or belong to other individuals.

Right to Data Portability

You have the right to obtain a copy of your personal data or have it transmitted to other entities in a format that is portable and commonly accessible subject to ECPay’s internal procedures.

Right to Rectify

We keep our records as accurate as possible. Where there are any errors or inaccuracies to your personal data, we give you ways to dispute and rectify or update it, subject to ECPay’s internal procedures.

Right to Erasure or Blocking

You have the right to suspend, withdraw, or order the blocking, removal, or destruction of inaccurate, incomplete, outdated, false, or unlawfully obtained personal data, or personal data not necessary for the purpose for which it was collected, and for such other cases provided in the Data Privacy Act of 2012.

Right to Damages

You have the right to be indemnified for damages sustained, if any, due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.


Privacy Notice (A pop-up notice would show everytime someone visits our website)

ECPay collects, processes, and retains information about you when you visit our website or access our mobile applications, which may include internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exist pages, the files viewed on our site (e.g. HTML pages, graphics, etc.), operating system, date/time stamp, and/or clickstream data to analyze trends in the aggregate and administer the site.

You may choose to provide us with additional information, such as your name, email address, company information, street address, telephone number, or other information, to access protected information on our websites or so we can follow up with you after your visit. We may combine other publicly available information related to the organization from which you work for with the information that you provide to us. ECPay or ECPay service providers may observe your activities, interactions, preferences, transactional information, and other computer and connection information (such as IP address) relating to your use of our websites and our services.

If you are a licensed or other authorized user of any of our online platforms, we process your name, email address, username, password, IP address, job title, phone number, information about the company where you work, actions you have taken in the applications on the platform, such as record creation, changes, input, responses, analysis, and approvals, and tickets filed on your behalf related to our platform.

We may also use log files, cookies and similar technologies. For more information about our use of these technologies and how to control them, see our Cookies and Similar Technologies section below. We may collect and store this information and combine this information with other Personal Data you may have provided.

If you register online on one of ECPay’s websites or Mobile Applications, we may also collect and store certain information in the aggregate about your visit automatically including: 1) internet domain and IP address from which you accessed our website 2) the date and time you access our website; and 3) the pages the you visited. We may also collect general demographic and profile data from our website from time to time.

We may also obtain data from third parties, such as authorized distributors with which we offer services or engage in joint marketing activities. We protect data obtained from third parties according to the practices described in this Policy/Notice, plus any additional restrictions imposed by the source of the data.

When you download mobile applications, we automatically collect technical data and related information about the devices being used for the Services, including information on the type of device you use, operating system version, application software, peripherals and the device identifier; push ID (“UDID”).

You have choices about the data we collect. When you are asked to provide Personal Data, you may decline. But if you choose not to provide data that is necessary to provide a product or feature, you may not be able to use that product or feature.


How We Use Personal Data

ECPay uses the data we collect to operate our business and provide you the products and services we offer, which includes using data to improve our products and personalize your experiences. We also may use the data to communicate with you, for example, informing you about your account and product information, to send email communications or make phone calls for the purpose of sending you information about upcoming events, product announcements, newsletters and educational content. We will use the aggregate data that we collect internally in order to better understand and assist our customers and to help improve our website and services.

If you have a contract or other agreement in place with us, we process personal data about you in order to fulfill the following obligations to you under that contract or agreement to:

  1. Provision your account on our platform
  2. Authenticate you to enable you to access your account on our platform, including additional users of the solution
  3. Provide customer service and support, and investigate issues that you raise
  4. Communicate with you, including via email, about your use of our solutions

We process Personal Data for certain Legitimate Interests, which include some or all of the following:

  1. where the processing enables us to enhance, modify, personalize or otherwise improve our services/ communications for the benefit of our customers
  2. to provide maintenance and support services
  3. to identify and prevent fraud
  4. to enhance the security of our network and information systems
  5. to better understand how people interact with our websites
  6. to provide postal communications which we think will be of interest to you
  7. to determine the effectiveness of promotional campaigns and advertising.

Whenever we process data for these purposes, we will ensure that we always keep your Personal Data rights in high regard and take account of these rights. You may object to this processing if you wish. Please bear in mind that if you object this may affect our ability to carry out tasks above for your benefit or to provide our products or features.

“Legitimate Interests” means ECPay’s interests in conducting and managing our business to enable us to give you the best service/products and the best and most secure experience.

For example, we have an interest in making sure our marketing is relevant for you, so we may process your information to send you marketing that is tailored to you and your company’s interests. It can also apply to processing that is in your interests as well. For example, we may process your information to protect you against fraud when transacting on our website, and to ensure our websites and systems are secure.

When we process your Personal Data for our Legitimate Interests, we make sure to consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws. Our legitimate business interests do not automatically override your interests – we will not use your Personal Data for activities where our interests are overridden by the impact on you (unless we have your consent).


Reasons We Share Personal Data

We share your Personal Data with your consent or as necessary to complete any transaction or provide any product you have requested or authorized. In addition, we share Personal Data among ECPay affiliates, merchants, and partners. We also share Personal Data with vendors or agents working on our behalf for the purposes described in this Notice, such as IT service providers which host, develop or offer support. Companies we’ve hired to assist in protecting and securing our systems and services may need access to Personal Data to provide those functions and they are not allowed to use Personal Data they receive from us for any other purpose. In such cases, these companies must abide by our data privacy and security requirements and agree to any data protection agreements as we may require.

ECPay does not sell your Personal Data to third parties. However, we may share your business contact information with our authorized distributors in order to assist you in purchasing our products or to contact you via phone or email for the purpose of marketing our products and services.


Disclosure Required by Law

ECPay may cooperate with law enforcement agencies in identifying users who use the website or ECPay’s products or services for illegal activities. Therefore, ECPay will respond to subpoenas, warrants, or other court orders regarding information concerning any user. ECPay will, at ECPay’s discretion, disclose information, including Personal Data, if ECPay reasonably believes that ECPay is required to do so by law, that such disclosure is necessary to protect ECPay from legal liability, or that ECPay should do so to protect the integrity of the website or the products or services.


How to Access & Control Your Personal Data

Upon request, ECPay will provide you with information about whether we hold any of your Personal Data. We will retain your information for as long as your account is active or as needed to provide you our products and services. Additionally, we will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.


Opt-out preferences

If you would like to opt-out of receiving sales and marketing communications from us, you may update your communication preferences here.


Links to Third Party Sites

Our website may include links to other websites whose privacy practices may differ from those of ECPay. If you submit Personal Data to any of those websites, your information is governed by their privacy policies. We encourage you to carefully read the privacy policy of any website you visit.


Cookies and Similar Technologies

Technologies such as: cookies, beacons, tags and scripts are used by ECPay and our affiliates. These technologies are used in analyzing trends, administering the site, tracking users’ movements around the website and to gather demographic information about our user base as a whole. We may receive reports based on the use of these technologies on an individual as well as aggregated basis. You can control the use of cookies at the individual browser level, but if you choose to disable cookies, it may limit your use of certain features or functions on our site(s) or service(s). Our websites follow browser do-not-track signals.


What are cookies

Cookies are small pieces of text sent by your web browser by a website you visit. A cookie file is stored in your web browser and allows the Service or a third-party to recognize you and make your next visit easier and the Service more useful to you.

Cookies can be “persistent” or “session” cookies. Persistent cookies save a file on your computer permanently. It can then be used to customize the web page as the choices and user interests. Session cookies are sent between your computer and the server to access information while you are browsing. Session cookies to not identify you personally and disappear when you turn off your browser. All of our websites use “session cookies”.


Notice to End Users

Our ECPay products maybe intended for use by other companies or organizations and are administered to you by your company or organization. Your use of ECPay products may be subject to your company’s/organization’s policies, if any. If your company/organization is administering your use of ECPay’s products, please direct your privacy inquiries to your administrator. ECPay is not responsible for the privacy or security practices of our customers, which may differ from those set forth in this Privacy Notice.


Data Security

Wherever Personal Data is within ECPay or on its behalf, ECPay will take reasonable steps to protect the Personal Data from loss, misuse and unauthorized access, disclosure, alteration and destruction. ECPay trains employees on its Information Security Policies and guidelines and makes them available to its business partners as necessary. In addition, ECPay and its business partners enter into confidentiality agreements that require that: (i) care and precautions be taken to prevent loss, misuse, or disclosure of Personal Data and (ii) any service providers only use Personal Data to perform services on behalf of ECPay.


International Transfers

Our computer systems are currently based in the Philippines, we may transfer, access, or store personal data about you outside of the Philippines, or in another country that requires legal protections for international data transfer.

Whenever we do, we ensure an adequate level of protection is provided for the information using one or more of the following approaches:

  1. We may transfer personal information to countries that have privacy laws that have been recognized by the country from which the data are transferred as providing similar protections for the data (“adequacy”).
  2. We may enter into written agreements, such as standard contractual clauses and other data transfer agreements, with recipients that require them to provide the same level of protection for the data.
  3. We may seek your consent for transfers of your personal information for specific purposes.
  4. We may rely on other transfer mechanisms approved by authorities in the country from which the data are transferred. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the Philippines.


Policy Changes

This Privacy Policy and Privacy Notice may be updated from time to time as ECPay’s services change and expand. We suggest that you review the Privacy Policy & Privacy Notice periodically. In the event of a material change, we will post a change notice on our website and we may notify individuals of such changes through contact information that we have for such individuals prior to the change becoming effective. If we amend the Privacy Notice, the new Notice will apply to Personal Data previously collected by ECPay only insofar as the rights of the individual affected are not reduced.


Inquiries and Complaints

If you believe ECPay maintains your personal data in one of the services discussed in this Privacy Policy and Privacy Notice, you may direct inquiries or complaints to [email protected] or [email protected] ECPay will respond as soon as possible (Our turn-around time is 3-5 business days). If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact us.


Data Protection Officer

For any questions or concerns, you may contact our Data Protection Officer as follows:

Data Protection Officer
Electronic Commerce Payments, Inc. (ECPay)
11th Floor IBM Plaza
Eastwood Cyberpark Bagumbayan, Quezon City, Philippines
Email: [email protected]