How we collect information

• ●
  When visiting and/or transacting at any office, building, premises, and/or use the facilities of a member of the Bank;
• ●
  When transacting with our employees, authorized representatives, agents and service provider;
• ●
  When visiting the websites of the Bank or third-party websites and clicking on the advertisements of the Bank;
• ●
  When submitting application forms and or other forms related to our products and services; and
• ●
  When filing complaints, inquiries or requests to the Bank.

What information we collect

• ●
  Identification Data / Know-Your-Customer (KYC). This refers to personal data we collect when you register to our products and services, such as full name, gender, date of birth, civil status, place of birth, citizenship, permanent address, present address
• ●
  Financial Information. This includes but not limited to income, expenses, deposits, investments, credit cards, tax, insurance, financial and transaction history, relationships with other banks and/or financial institutions, business interests and assets;
• ●
  Audiovisual Data. This includes video, image, and sound recordings of when you communicate with representatives of the Bank through official Bank communication channels and surveillance videos at branches and automated teller machines (ATM), subject to li
• ●
  Non-Personal Information. This can be read on your device when you use Metrobank’s websites, apps, and other electronic platforms; and
• ●
  Relevant Individuals. These are information about your family members, beneficiaries, attorneys-in-fact, shareholders, beneficial owners whenever applicable, persons under any trust, trustees, partners, committee members, directors, officers or authorized

Why we collect information

• ●
  Data Storage. We store data in secure and encrypted managed environments, devices, and media. For third-party managed environments such as cloud service providers, we employ BSP-sanctioned security protocols and procure BSP approval prior to deployment. W
• ●
  Data Access. The data we collect can only be accessed by authorized personnel on a role-based access control, need-to-know basis and least-privilege principles.
• ●
  Data Use. Your personal data may be used, stored, processed, shared and disclosed by the Bank to its members, as well as third parties (as may be allowed by law) for the following relevant and necessary purposes:
• ●
  Data Retention. We keep your data as long as necessary for the fulfillment of the declared, specified, and legitimate purposes, or when the processing relevant to the purposes has been terminated, for the establishment, exercise or defense of legal claims
• ●
  Data Disposal. After the expiration of the imposed retention period, we dispose of personal data in a secure manner in order to prevent further processing, unauthorized access, or disclosure to any other. Physical documents are shredded into small unreada

What Metrobank uses your data for:

• 1
  To protect you. We use your data to further secure your accounts from fraud and other illegal activities.
• 2
  To keep your information updated. We use your data to validate, verify, and update your information and documents.
• 3
  To facilitate transactions and offer you relevant products. We share your data within the Metrobank Group and to carefully selected third-party service providers to facilitate transactions and let you know about products and services relevant to you.
• 4
  To perform legal duties. We use your data to further improve our legal duties and due diligence in anti-money laundering and counter-terrorism efforts as well as other activities required by law.
• 5
  To settle claims or disputes. We use your data to settle claims or disputes involving our products and services. Your data can also be used for prosecuting or defending Metrobank or its employees if needed.

Your rights under the Data Privacy Act of 2012

• ●
  The right to know if your data is being processed or has been processed, what data is being processed, and for what purposes.
• ●
  The right to demand reasonable access to your data and obtain a copy of such data in an electronic or structured format.
• ●
  The right to object to the processing of your personal data, including processing for direct marketing, automated processing or profiling, and to dispute and correct inaccuracies and errors in your data.
• ●
  The right to revoke, block, remove, or destroy your data if it’s proven to be incomplete, outdated, unlawfully obtained, or used for unauthorized transactions.
• ●
  The right to damages sustained from inaccurate, incomplete, outdated, false, unlawfully obtained data as well as damages from unauthorized uses of your data.
• ●
  The right to file a complaint.

How long Metrobank can keep your data

Your safety is our priority

• 1
  Protect and update your information. Keep your data safe by making sure your account details, PINs, username, and password are not accessible to others. Use strong passwords and change them regularly.
• 2
  Contact us through secure channels. Take advantage of our secure channels by contacting us through our website, branches, Contact Center, MetrobankDirect Online, and MetrobankDirect Mobile.
• 3
  Report any data issues. If you think your data has been mishandled in terms of confidentiality or integrity, or if you think your data has been tampered with, contact us through any secure channels mentioned above.

Moving Forward