MEAPECA ENTERPRISES, INC. (“COMPANY”) recognizes its responsibilities under Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (“DPA,” for brevity), with respect to the data it collects, records, organizes, updates, uses, consolidates or destroys from its customers. The personal data obtained from its customers is entered and stored within the COMPANY’s database system and will only be accessed by the authorized personnel of the COMPANY, which has instituted appropriate organizational, technical and physical security measures to ensure the protection of its customers’ personal data.
 

Furthermore, the information collected and stored in the COMPANY’s database system shall only be used for the following purposes:

1. Verifying the identity and performing customer due diligence;
2. Processing and reporting of documents related to the transactions under certain conditions as required by law;
3. Meeting the COMPANY’s legal and compliance obligations arising from regulation on money laundering, terrorist financing, fraud, exchange of information and other application laws;
4. Enforcing or defending the remedies or rights of the COMPANY in respect of the customer’s account;
5. Announcements/promotions of events, programs, courses, and other activities offered/organized by the COMPANY and/or its partners; and
6. Activities pertaining to establishing relations with the COMPANY’s customers.
 

COMPANY endeavors not to disclose the personal information of customers without their consent and shall retain this information over a period of five (5) years for the effective implementation and management of its database system.