When we disclose your personal data
In some instances, we may be required to disclose your personal data to our agents, subsidiaries, affiliates, trusted business partners, and other agencies and service providers as part of our regular business operations and to provide our products and services.
This means we might share your information with:
- Our service providers, contractors, and professional advisers who help us provide our products and services. Under an obligation of confidentiality, we allow access to your personal data to authorized third-party service providers / vendors / suppliers / contractors / subcontractors / consultants / professional advisers ("Third-Parties") who provide outsourced functions within or outside the Philippines to help us facilitate our products and/or services, to provide the service on our behalf, or to assist us in analyzing how our service is used. These include, among others:
- Cloud storage facilities/systems to meet our storage management requirements;
- Credit investigation;
- Collections;
- Marketing;
- Websites and mobile applications; and
- Other outsourced functions as approved by PLDT.
We provide these Third-Parties access to your personal data for the effective performance of their assigned tasks on our behalf, based on our instructions and in compliance with our Privacy Notice and other appropriate confidentiality obligations and security measures.
PLDT remains responsible for the personal data disclosed to such Third-Parties. Thus, we ensure that such Third-Parties are contractually obligated to comply with the requirements of Privacy Laws and shall process your personal data strictly in accordance with the purposes enumerated above.
- Our subsidiaries and affiliates with whom you also have an account with. If you are, become, or apply to be a customer of our subsidiaries and affiliates, PLDT and the relevant subsidiary or affiliate may, at their discretion, use and share your pertinent personal information for the following purposes:
- To facilitate your account opening or other transaction with the concerned subsidiary/ies or affiliate/s;
- To validate, consolidate, or update your account information;
- For research purposes or to design related products or services for your benefit and use; and
- To comply with a legal obligation to which PLDT or the concerned subsidiary/ies or affiliate/s is subject.
- Other companies to whom you have given us consent to share your information with. For instance, when you register for products and services provided by other companies, they may request information from us to verify your identity.
- Other companies, such as Debt Collection Agencies, to whom we may sell your delinquent account that has already been recognized for accounting purposes as bad debt.
In all of the above cases, we ensure that your personal data is disclosed on a confidential
basis, through secure channels, and only in compliance with applicable privacy laws and
regulations. We do not share, rent, or sell your personal data to third parties outside of
PLDT, except in special circumstances where you may have given your consent and as
described in this Notice. For a list of our partners, please visit www.pldthome.com/privacy-policy-partners
When we disclose your personal data with the Government and other duly authorized entities, as may be required by law or legal process, we ensure that your personal data is protected and shared according to the rules and regulations and Government guidelines, where such is available.
How we store your personal data
We store your personal data using secure systems and processes designed to protect it from unauthorized access, alteration, or loss. Depending on how you interact with us, your data may be stored in physical formats (such as signed forms or printed documents) or electronically (such as in databases, cloud platforms, or secure servers).
How we protect your personal data
The integrity, confidentiality, and security of your personal data are important to us. That's why we strictly enforce this Privacy Notice within PLDT and have implemented technical, organizational, and physical security measures that are designed to protect your information from unauthorized or fraudulent access, alteration, disclosure, misuse, and other unlawful activities. These are also designed to protect your information from other natural and human dangers.
We also put in effect the following safeguards:
- We keep and protect your information using a secured server behind a firewall, encryption, and security controls;
- We keep your information only for as long as necessary for us to (a) provide the products and services that you avail from us, (b) for our legitimate business purposes, (c) to comply with applicable laws, and (d) for special cases that will require the exercise or defense of legal claims, and for a maximum retention period of ten (10) years after the termination of your service;
- We restrict access to your information only to qualified and authorized personnel who are trained to handle your information with strict confidentiality;
- Our third-party partners are contractually bound to implement technical, organizational, and physical measures to protect your information and handle it with strict confidentiality;
- We undergo regular audits and rigorous testing of our infrastructure's security protocols to ensure your information is always protected;
- We promptly notify you and the National Privacy Commission, when sensitive personal data that may, under the circumstances, be used to enable identity fraud are reasonably believed to have been acquired by an unauthorized person;
- We let you update your information securely to keep our records accurate; and
- When your information is no longer needed, we securely dispose of these manually (such as shredding of printed documents, use of locked disposal bins for confidential documents pending destruction, secure handover to accredited document destruction vendors) or electronically (such as, use of data wiping software, secure deletion tools, physical destruction of storage media, and use of secure file deletion protocols for cloud-based storage) as may be applicable.
What your choices are
You are afforded certain rights in relation to your personal data under the Data Privacy Act of 2012 (Republic Act No. 10173). You are entitled (in the circumstances and under the conditions, and subject to the exceptions, set out in applicable law) to:
- Request access to the personal data we process about you: this right entitles you to know whether we hold personal data about you and, if we do, to obtain information on and a copy of that personal data.
- Request a rectification of your personal data: this right entitles you to have your personal data corrected if it is found to be outdated, inaccurate, or incomplete.
- Request the erasure of your personal data: this right entitles you to request the erasure of your personal data, such as in cases where your personal data is no longer necessary to achieve the legitimate business purpose of its use or processing.
- Request the restriction of the processing of your personal data: this right entitles you to request that we only process your personal data in limited circumstances, including with your consent.
- Request portability of your personal data: this right entitles you to receive a copy of personal data that you have provided to us (in a structured, commonly used and machine-readable format). This includes requests for us to transmit a copy of such personal data to another company, on your behalf.
Moreover, you have a right to object to the processing of your personal data, such as in cases when we process your personal data based on our legitimate interests or for purposes requiring your consent.
To the extent that the processing of your personal data is based on your consent, you have the right to withdraw such consent at any time by contacting our Data Privacy Officer through the contact details provided below, or by accessing https://my.pldthome.com/. Please note that this will not affect the lawfulness of the processing that was carried out before you withdrew your consent or PLDT's right to continue parts of the processing based on other legal bases than your consent. If, however, we have not provided you with another legal basis justifying the processing of your personal data in this privacy statement, we will stop the processing and delete your personal data.
To exercise any of these rights, you may get in touch with our Data Privacy Officer through the contact details provided below. In some instances, we may request for supporting documents or proof before we effect any requested changes to your personal data.
If, despite our commitment and efforts to protect your personal data, you believe that your data privacy rights have been violated, we encourage you to come to PLDT first so that we can work together to resolve your complaint. You have the right at all times to register a complaint directly with the National Privacy Commission or to make a claim against us with a competent court (either in the country where you live, the country where you work or the country where you deem that data privacy law has been infringed).
PLDT Inc.
Data Privacy Office
PLDT Makati General Office (MGO) Building
Dela Rosa St. corner Legaspi St., Legaspi Village,
Makati City, Metro Manila, Philippines.
Email: DPO@pldt.com.ph
Changes to our Privacy Notice
From time to time, we may update this Privacy Notice to comply with changes in applicable laws, to comply with government and regulatory requirements, to adapt to new technologies and protocols, to align with industry best practices, and for business purposes.
You will always be provided notice if these changes are significant and, if we are required by law, we will ensure to obtain your updated consent.
This Privacy Notice is effective September 18, 2025.