DATA PRIVACY POLICY
I. BACKGROUND. Laguna Water District Aquatech Resources Corporation, in compliance with the Republic Act No. 10173 otherwise known as the Data Privacy Act of 2012, put premium value to the confidentiality of personal data. Personal information is kept accurate, private, and secure as part of our commitment to you. Our privacy policy sets down the rules for how we will collect, use, and disclose personal information as part of this commitment. This policy details how the company processes the personal data and how they obtain consent from the data subjects.
II. IDENTIFYING PURPOSES. We gather and use Personal Information to process the service as requested. Before or at the time we acquire the information, the purposes for which we will use personal information will be made clear. In some cases, the reasons for collecting information may be clear, and consent may be assumed, such as name, address and account number are provided as part of the ordered process.
III. PERSONAL DATA PROCESSING. We store, process and analyze the information that the data subject provides to us for the following purposes, including but not limited to:
1. Provide and continuously improve LARC water services.
2.Verify data subject identity and eligibility to water service connection and claim refunds.
3.Send information related to LARC services such as, but not limited to, water service interruption, updates and alerts.
4.Respond to data subject inquiry, concern and complaint.
5.Enabling LARC to accept bill payments according to data subject enrolled payment mode.
6.Other purposes in connection with LARC water services.
IV. CONSENT. Except as needed or permitted by law, knowledge the consent are necessary for the collection, use, or disclosure of Personal Information. It is always decision of the data subject whether or not to give the personal information. Except when necessary to provide the product or service, we will not demand consent to the collection, use, or sharing of information for this purpose.
V. LIMITING COLLECTION. We will only gather Personal Information that is required for the purposes identified by us. With permission, we may get Personal Information in person, over the phone, or by communication via online or email.
VI. ACCURACY. LARC commits to make reasonable efforts to guarantee that the Personal Information collected by it or on its behalf is accurate and complete.
VII. DISCLOSURE AND RETENTION. Unless given consent for a different use or disclosure, or when it is needed or permitted by law, personal information may only be used or shared for the purposes for which it was acquired. Only the time needed to fulfill the purpose for which it was acquired or as may be required by law will personal information be kept. LARC period of retention of personal data is five (5) years from the date of the termination of the contract after which personal data will be deleted/destroyed properly and securely.
LARC shall not disclose the personal data of the data subject, except when:
1. There is written consent from the Data Subject;
2. Requested by government regulators;
3. Required by law; and
4. Has engaged a third party to assist with its activities and such engagement shall be subjected to a Non-Disclosure or Confidentiality Agreements.
VIII. SECURITY AND PROTECTION OF PERSONAL INFORMATION. We take every precaution within our power to protect against the loss, misuse, access, or disclosure of Personal Information. In keeping with the security requirements of the DPA, we implement, organizational, physical, and technical measures to protect the data shared with us. We store personal data in secure location and only authorized personnel with access codes can process and access personal data. Furthermore, all our employees have duly executed a Non-Disclosure Agreement (NDA) to ensure their commitment to protecting data and safeguarding the rights of data subjects. We likewise restrict entry to our offices where we keep records of personal data by enabling security features 24/7. CCTV are also installed in our offices and they are manned by authorized personnel 24/7.
IX. DATA SUBJECT RIGHTS. As a data subject, rights are guaranteed under the DPA. The following are the rights of a data subject:
- To be informed
- To object
- To access
- To data portability (for data stored electronically)
- To correct
- To block/remove
- To file a complaint
- To be indemnified
X. RIGHT TO PRIVACY. As provided by the Act, the subject may object to the processing of personal data, request to access personal information, and/or have it corrected, erased, or blocked on reasonable grounds. Details of rights as a data subject are discussed in Section IX of DPA.
As part of our compliance with the DPA, we have appointed our own Data Protection Officer and that may be reach at larc.compliance@larc.com.ph. The subject may also exercise his/her rights by sending our DPO an email with the subject “DPO-RIGHTS”.
This privacy notice may be updated from time to time, subject to emerging policies and issuances of the National Privacy Commission.