Privacy notice

We At Mitsubishi Motors Finance, it is one of our fundamental responsibilities as a financial institution to ensure that we protect the information entrusted to us by our clients and our website visitors. This is in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations and other issuances by the National Privacy Commission (NPC), as well as globally accepted data privacy standards and regulations. It is our responsibility to exert all efforts to protect your personal information against privacy and security risk such as, but not limited to, unauthorized collection, use, storage, and retention, excessive collection, and retention, confidentiality breach, availability breach and integrity breach. We ensure the employment of proper organizational, physical and technical security measures for the protection of personal information. Furthermore, we adhere to the general principles of transparency, legitimate purpose and proportionality accorded by law as well as recognize your rights as our data subjects.

In this Privacy Notice, we explain what personal data we process, how we collect, use, share, retain and dispose personal information that we obtain from you in the course of doing business or as a user of this website.

1. MITSUBISHI MOTORS FINANCE is the name of financial services provided by Mitsubishi Motors Finance Philippines Inc. which is jointly owned by Mitsubishi Motors Corporation and Security Bank Corporation.
2. Why and how we collect your personal information. We collect and use personal information that is material and relevant to your financing transaction and in fulfillment of the legal or contractual obligation we have with you in order to provide you with our services and to best adapt our business processes to your needs. This information may also be used by us to offer you our other products and services based on your profile and upon your consent, which you may revoke at any time, subject to applicable laws and regulations.

We may manually or automatically collect your personal data when you:

• Visit our website (eg. Cookies)
• Engage in financing transactions
• Submit application forms
• Make inquiries or requests
• Report a complaint or answer customer survey forms

Scope of this Privacy Notice and consent for processing of personal information. This Privacy Notice applies to the personal data that we collect about you for purposes of providing you with our services and products. We reserve the right to make changes to this Privacy Notice at any time. We encourage you to regularly review this Privacy Notice to make sure you are aware of any changes on how your personal information may be used. Our Privacy Notice is a controlling document to which you should refer if you have questions about Mitsubishi Motors Finance’s data processing practices. We collect and process your personal information only with your express consent, unless it is processing is based on any of the lawful basis for processing personal and/or sensitive personal information under sections 12 and 13 of the Data Privacy Act of 2012. Consent of data subject refers to any freely given, specific, informed indication of will, whereby the data subject agrees to the collection and processing of personal information about and/or relating to him or her. This shall be evidenced by written, electronic or any recorded means.

What personal information do we collect. Personal information is information from which your identity is apparent or can be reasonably and directly ascertained. This includes sensitive personal information which serves to classify or qualify you based on different parameters such as age, status, origin, affiliation, health condition and others. It also covers your government issued and kept data such as social security numbers and tax returns. When you apply for or avail of any of our products or services, we primarily collect the following:

• your complete name;
• your contact details such as, but not limited to, address, mobile number, email address;
• complete date of birth
• educational background
• employment details or business information
• specimen signature
• government ID details
• CCTV footages or images taken during your visit to any of our branches/offices
• Voice recordings of our inbound or outbound calls with you
• financial information (i.e. income, expenses, deposits, investments, account balances, tax, insurance, and other financial and transaction history)

In addition to the personal data explicitly mentioned, we may also collect and process other personal data, including but not limited to, the names and contact details of spouses, co-borrowers, and any other relevant individuals and other relevant personal information so that we can process your transactions throughout the duration of the financing company relationship.

We may also use any information collected from third-party entities such as government regulators, public authority, judicial, supervisory, tax authorities or courts of competent jurisdiction for any legitimate business purpose, pursuant to a lawful mandate or any other lawful basis under the law.

Further, we may collect, use and keep your personal opinions or comments made known to us via feedback or responses to surveys or any other interaction that you had with our employees, authorized representatives, agents and service providers for purposes of providing you with better services throughout your relationship with the financing company.

Website and Social Media Privacy Policy

When logging on to Mitsubishi Motors Finance’s official website and official Mitsubishi Motors Finance social media accounts, which are linked in Mitsubishi Motors Finance’s website footer, we may collect personal information that you voluntarily submit. If you connect to Mitsubishi Motors Finance using Facebook or any other social media site, we will receive your personal information that you have authorized the social media site to share with us. Any information that we collect from your social media account may depend on the privacy settings you have set in the social media site. When you use Mitsubishi Motors Finance’s website, your device and browser automatically provide information to us that may enable us to track and serve relevant content to you. In order to provide better service, we employ the use of “cookies”. A cookie is a small piece of information which a website stores on your web browser and can later retrieve. The cookie cannot be read by a website other than the one that set the cookie:

• Necessary Cookies. These cookies are necessary for you to be able to use our website and its features in order to provide you with a smooth and seamless experience when navigating our site.
• Third-party Cookies. This cookie will be used to track your interests based on the pages you visited on our website. We will use this cookie to generate advertisements that are tailored fit for your interests to offer services to you. Third-party cookies are used to monitor your web activity on our website therefore determining what best interests you but only in relation to the Mitsubishi Motors Finance products and services. We may use the data gathered through cookies to contact you via post, email, or SMS. You can set up your web browser to inform you when cookies are set or to prevent cookies from being set. Your browser software may contain a feature which is intended to notify you of the cookie policies of the various web sites you visit. If you wish to opt out of collecting the cookies from this website, you may adjust your browser’s privacy and security settings according to your preference.

How we use your information. Manual or automated processing of your personal information within or outside the Philippines is done with utmost confidentiality and strictly in accordance with relevant data privacy laws and the following:

1. Your Consent – For the execution of your financing company transaction and fulfillment of our legal and contractual obligations with you, the Financing company obtains your explicit and recorded consent for the following purposes, such as, but not limited to:
   • provision of basic financing company services done through over-the-counter transactions, web transactions or mobile financing company transactions;
   • sharing of information to SBC Group and other affiliates for cross-selling of products and services;
   • profiling, research, data analytics and credit evaluation/reference checks;
   • audit and account balance confirmation
2. Legal – Mitsubishi Motors Finance, in compliance with regulatory authorities, may process your personal data pursuant to regulatory reporting requirements consistent with the financing company services offered as deemed fit by the Financing company. This may include providing information to governmental authorities and regulatory agencies.
3. Contracts- The Financing company regularly goes into contracts with private entities that may include the transfer or sharing of your information for purposes of sub-processing and/or data sharing. While data sharing shall be done only with your explicit consent, other personal information may also be processed to fulfill any contractual obligations or any legitimate interest in connection with the services we offer.
4. Third-Party – The company may have a legitimate interest in collecting, disclosing or transferring your personal information from/to a third party in the event of any business relationship or transfer such as partnership, reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings)
5. Other legitimate interest- Processing of your personal data may be done by virtue of a legitimate business interest in connection with the financing company service or any other contractual obligation, with utmost respect to your rights as our data subject.

How we share your information. In the course of doing business, Mitsubishi Motors Finance may make your personal information available, with your consent or pursuant to any legitimate lawful purpose under the law, within or outside the Philippines to:

• Our group of companies. The Group is composed of Security Bank and its affiliates and subsidiaries reported as part of the conglomerate map/group structure as defined under BSP Circular no. 749. Access to personal information within the Group is restricted to those individuals who have a need to access the information for legitimate business purposes based on adequate internal policies on information security and data privacy. We may also provide access or share your personal information with your consent to the SBC Group for purposes of cross-selling and marketing products.
• Our business partners and service providers. We have duly accredited processors in our business partners who act as advisers, consultants, service providers, contractors, or vendors, and their authorized agents and representatives who may perform different activities on behalf of the financing company. These business partners underwent a rigorous vetting process and covered by contractual agreements before engagement and abide by the financing company’s standards on data privacy and information security.
• Governmental authorities and industry associations. We may disclose your information to any Authority (governmental or regulatory authority, self-regulatory body or industry association in various jurisdictions) in connection or adherence (whether voluntary or otherwise) with legal or regulatory requirements.
• Cross border information sharing. Due to the global nature of the financing business, we may transfer your personal information to any of the abovementioned parties who may be located outside the Philippines. In doing so, we ensure that the cross-border transfer is secure and that we are transmitting your personal information to a country which has adequate data privacy standards before agreeing to such cross-border transfer.

How we protect your information. We safeguard the confidentiality, integrity and availability of your personal information physically or electronically by maintaining a combination of organizational, physical and technical security measures based on generally accepted data privacy and information security standards. These include the following:

1. Organizational. We have policies in place to protect your personal information:
   • Data Protection Policy and Privacy Manual
   • Security Incident Management Policy
   • User Access Control
   • Acceptable Use Policy
   • Data Protection Training for financing company personnel before onboarding and annually thereafter to promote privacy awareness and equip skills on proper handling of your personal data
   • Third-party outsourcing contracts or data sharing agreements laying out obligations and liabilities as well as operational details surrounding the transfer and/or processing of personal data.
2. Technical. We employ up-to-date technical security measures including:
   • End-to-end encryption;
   • Data classification;
   • Regular testing of policies through an annual breach drill;
   • Conducting regular Vulnerability Assessment and Penetration Testing (VA/PT) of our internal systems;
   • Password-protection of documents in transit.
3. Physical. We equip our employees and other authorized service providers with proper training and capacity in safekeeping any physical document that may contain personal data. This includes:
   • Use of secured lockers and bags for documents at rest or in transit;
   • Only authorized persons has access to physical files and documents;
   • Provision of security badges;
   • CCTV monitoring.

Whenever we engage with a third-party to provide services for us, outsourcing contracts are executed following the prescribed elements set by the NPC. We require them to protect personal information aligned with our own security standards to secure data from destruction, unauthorized access, alteration, disclosure, fraudulent misuse and/or any other unlawful processing, as well as other natural and human dangers. We may also store your personal information with third-party data storage providers who adopt proper measures to protect your information in accordance with the financing company’s standards.

How long we retain your information. We will retain your personal information for up to five (5) years following the closure of the account, termination of the business relationship or after the date of the occasional transaction in accordance with retention limits set by law. We may, however, retain your personal information for more than five (5) years, should there be any legal or regulatory requirement or any case pending which includes your information on any court of competent jurisdiction, in accordance with law.

After which, these shall be disposed following the financing company’s guidelines on disposal of confidential data, either physical or electronic, in accordance with any existing law or regulation.

If you have issues with regards to how we process. As our valued customer, you are afforded the following rights in relation to your personal information under the Data Privacy Act which can be viewed in this link https://www.privacy.gov.ph/know-your-rights/

1. To be informed that your personal information will be collected and how it will be processed,
2. To have reasonable access to your personal information held by the financing company,
3. To dispute any error in your personal information and have it corrected,
4. To have your personal information erased or blocked from our system if said information is incomplete, outdated, false, unlawfully obtained, used for unauthorized purposes or no longer necessary for the purposes for which they were collected,
5. To object to the processing of your personal information
6. To obtain your personal information from the financing company in a portable and usable format,
7. To lodge a complaint before the National Privacy Commission, and
8. To be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal information.

Who to contact for issues. If you have any questions or requests in relation to the processing of your personal information, please do not hesitate to contact our Data Protection Officer through the following:

• Email: dpo@mmfp.ph
• Address: Data Protection Officer • 6797 Ayala Avenue, Makati City 1226, Metro Manila, Philippines
• Or call our Customer Service hotline at +632 8887-918

This Data Privacy Notice has been updated as of March 10, 2025