Collection of Personal and Sensitive Personal Information
W Express collects personal and sensitive personal information to enable it to comply with the company’s corporate policies in relation to the data subjects, who are its customers, as well as with the requirements and/or regulations imposed under the Data Privacy Act or any relevant privacy laws. As such, W Express may collect, use, store and/or retain any personal and sensitive personal information only as it is reasonable and necessary for a declared and specific purpose as stated in pertinent consent forms, whether in electronic or written form.
In general, W Express may use personal and sensitive personal information under the following purposes:
To provide information about the services which may be of interest to the data subject;
To perform functions necessary to deliver the services and/or other products offered by W Express;
To conduct research and analysis, through surveys and/or polls to improve the company’s service;
To respond to complaints, inquiries, requests from data subjects;
For statistical purposes;
To notify and update the data subject, through call, text or email, about W Express’ commercial and/or promotional advertisements, and other direct marketing that the company deems it relevant and beneficial to the data subject based on the latter’s preference and/or interest initially provided to the company or made aware of, with which the data subject may opt-out should the latter prefers not to receive these notifications;
For promotional activities and/or advertisements in social media pages and/or website owned and/or operated by W Express;
To customize W Express’ website and/or social media sites;
To comply with legal and/or regulatory requirements or obligations; and,
To perform such other processing or disclosure that may be required under law or regulations.
Auxiliary Use of Personal and Sensitive Personal Information Collected
Whenever applicable, W Express may also use personal and sensitive personal information collected upon participation to any of W Express’ events and other marketing activities:
Stores personal and sensitive personal information in the company’s database to inform and/or apprise about new promotion and/or future events;
Evaluates personal and sensitive personal information to determine what promotional activities, prizes and/or freebies would best suit to the data subject;
Identifies validation when availing of discounts and/or rewards.
Type of Personal and Sensitive Personal Information Collected
Any personal and sensitive personal information W Express may have collected may include the following:
Personal information such as full name, nickname, home addresses/billing address/shipping address, e-mail address, employment information, telephone, other personal contact numbers, username and password;
Sensitive personal information such as birth date, age, nationality, marital status, gender, health education and government issued identification document which includes, but not limited to identity (ID) cards, licenses, social security number.
Financial details such as bank account, credit cards, and debit card information the data subject has provided as a result of the transaction.
W Express shall presume that any such information the data subject has submitted to it are accurate, complete and up-to-date.
Manner of Collection, Acquisition or Generation of Personal and Sensitive Personal Information
Fill-up forms and other forms used in the course of the company’s business;
Phone calls, emails, SMS or verbal communication with the company’s authorized representatives;
Through the company’s official website: wexpress.com.ph
Through accredited third parties.
The following are the only non-identifiable web traffic data which are collected and/or analyzed when visiting W Express’ website, which includes:
Internet protocol (IP) address;
Search terms previously used;
The pages and internal links accessed on W Express’ website;
The date and time the data subject has visited the site, including frequency of visits;
Operating system used; and
Web browser type.
Links to third-party websites
Sharing of Personal and Sensitive Personal Information
W Express generally does not allow the sharing of personal and sensitive personal information to third party/ies, except under the following circumstances below.
By giving consent, the data subject authorizes W Express to disclose personal and sensitive personal information to accredited/affiliated third parties or independent/non-affiliated third parties, whether local or foreign on any of the following circumstances:
As necessary for the proper execution of processes in relation to the purposes declared in this Policy; and/or;
The use or disclosure is reasonably necessary, required or as authorized by or under law, i.e. civil, criminal or administrative court action, subpoena and/or order issued by judicial or quasi-judicial body, etc.
Whenever the above scenario/s is/are present, W Express may provide personal and sensitive personal information to the following:
W Express’ affiliates, subsidiaries, partner companies, organizations, or agencies including their sub-contractors or prospective business partners that act as the company’s service providers and contractors;
Law enforcement and government agencies;
All third parties, a list of which is available upon request with the Data Protection Officer at the contact details below, with which the company shares the personal and sensitive personal information that are required to use the same in a manner that is consistent with this Policy.
However, these companies may only use such personal data for the purposes disclosed in this Policy and may not use it for any other purpose.
How W Express Protects Personal and Sensitive Personal Information
W Express undertakes to ensure that any personal and sensitive personal information it has collected, used and/or disclosed are accurate, complete, and up-to-date. As such, the company has implemented the required technological, organizational and physical security measures to protect any personal and sensitive personal information it has come across from loss, misuse, modification, unauthorized or accidental access or disclosure, alteration or destruction. In addition, the following are the safeguards that are being implemented:
The company keeps and protects personal and sensitive personal information by using a secured server behind a firewall, deploying encryption on devices and physical security controls;
The company restricts and/or limits access to personal and sensitive personal information only to qualified and/or authorized personnel under strict confidentiality.
Any personal and sensitive personal information that are passed on in W Express’ website is initially processed and stored in such website. Only authorized personnel can access and download such personal and sensitive personal information from its system.
If the manner of payment to avail of the services of W Express is through a credit or any other access device issued by an authorized credit and/or debit card issuer, W Express will not reveal the entire access device number except if needed by the appropriate issuing card company during order processing or as required under regulations imposed by the Bangko Sentral ng Pilipinas or by law.
Where and How Long Personal and Sensitive Personal Information are Being Kept?
Personal and sensitive personal information that are collected by W Express are stored in its facilities located in the Philippines and are retained in accordance with ISO9001:2015 Records Management Manual, industry standards, laws and regulation, unless such are requested to be deleted from its systems, databases and hardcopies within reasonable time, and subject to limitations stated in relevant laws and rules. Once deleted, such personal and sensitive personal information will no longer be searchable or included in anonymous searches and shall be completely removed from all storage locations.
W Express may revise this Policy as the need arises or as required under regulations imposed by the National Privacy Commission or any amendment to the Data Privacy Act.
Data Subject’s Rights
The following are the rights accorded to the data subjects:
Right to be informed of the collection and processing of personal and sensitive personal information;
Right to object to the processing of personal and sensitive personal information;
Right to have reasonable access to personal and sensitive personal information;
Right to rectify or correct any inaccuracy or error to personal and sensitive personal information;
Right to suspend, withdraw or order the blocking, removal or destruction of personal and sensitive personal information;
Right to obtain a copy of personal and sensitive personal information in an electronic or structured format if the same is processed by electronic means and in a structured and commonly used format; and
Right to be indemnified for damages.
Inquiries, clarifications, or requests in relation to this Policy may be emailed to W Express’ Data Protection Officer at firstname.lastname@example.org.