Marketing Consent

Cashalo Marketing Consent Form

A. The Personal Information Controller (“PIC”)

The PIC is Paloo Financing, Inc. (“Cashalo”) with registered address at 5/F Gateway Tower, Gen. Roxas Avenue cor., Gen. Aguinaldo, Cubao, Quezon City. Cashalo’s Data Protection Officer can be reached via the email address dpo@cashalo.com.

B. Personal Data collected

The following personal data shall be processed (the “Personal Data”):

• e-mail address
• mobile number

C. Purpose of collection of Personal Data and the applicable legal basis

On the basis of your consent, your Personal Data may be used to send you newsletters, emails, SMS, and other electronic notifications (“Marketing”). The Marketing contain promotional information about Cashalo’s products, services, offers, promotions and other relevant updates. To stop receiving the newsletter, you can withdraw your consent or opt-out of receiving the Marketing at any time by clicking on the unsubscribe link included in the Marketing or by reaching out to the Data Protection Officer via the email address dpo@cashalo.com.

D. Period of storage of your Personal Data and Deletion

Subject to exceptions under the DPA, your Personal Data will generally be stored for ten (10) years after the end of our business relationship according to Cashalo’s data retention policy. If you withdraw your consent to receiving Marketing, your Personal Data will be unsubscribed from and deleted immediately from Marketing lists. Cashalo shall delete and destroy your Personal Data completely according to industry-accepted standards at the end of the retention period.

E. Technical, Organizational, Physical (“TOP”) Security Measures

Cashalo implements reasonable and appropriate TOP security measures for the protection of your Personal Data. Access to your Personal Data is limited only to authorized persons with a need-to-know and who are bound under strict confidentiality.

F. Your data subject rights

You have the following data subject rights under the DPA:

• Right to be informed (Section 16(a) & 16(b), DPA)
• Right of access (Section 16(c), DPA)
• Right to rectification (Section 16(d), DPA)
• Right to erasure or blocking (Section 16(e), DPA)
• Right to damages (Section 16(f), DPA)
• Right to data portability (Section 18, DPA)
• Right to object (Section 34(b), IRR)

If you feel that the Cashalo has not responded in an appropriate manner to your requests or complaints regarding your Personal Data, you have the right to complain to the NPC through their website (https://privacy.gov.ph).