Privacy Policy

Latest update on April 2024

I. Introduction

This Policy sets out the commitment of Toyota Financial Services Philippines Corporation (“TFSPH”, “We”) to collect and process personal information and sensitive personal information. In accordance with applicable laws and regulations on data privacy, including the Philippine Data Privacy Act of 2012 (“DPA”) and its implementing rules and regulations (“DPA IRR”) and issuances of the National Privacy Commission and to ensure that your right to privacy is protected in the course of our dealings and when we process your Personal Data. We recommend that you read this Privacy Policy to understand how we collect, use, and process your Personal Data.

II. Seal of Registration

Toyota Financial Services Philippines Corporation (TFSPH) has complied with the registration requirements provided in the Data Privacy Act (DPA) of 2012 and its Implementing Rules and Regulations (IRR) thru the NPC Registration System (NPCRS).

With the NPC Seal of Registration, our Clients and Partners are assured that TFSPH is fully compliant with the mandate of the National Privacy Commission (NPC).

You may contact our Data Protection Officer (“DPO”) through the following:

Data Privacy Unit

32/F GT Tower International, Ayala Avenue corner H.V. Dela Costa Street, Salcedo Village, Makati City, Philippines 1227
Telephone Number: (02) 7-757-8500
E-mail Address: privacy@toyotafinancial.ph

III. Confidentiality

Information that we receive from clients and applicants, whether or not constituting personal data, are generally protected as privileged communications. We diligently observe this professional obligation. We note that local law, regulations, and authorities permit disclosure of such information under certain conditions, as when the information has become public. When we use other companies to provide services for us, we require them to protect the confidentiality of personal information they receive.

Insofar as you disclose personal data when accessing or visiting myTOYOTA Wallet, we may process such personal data as well. Further, we may collect and process information that is normally collected as a standard part of your accessing and visiting activity. This may include your IP-address, access times, system activity, cookies, device identifier and hardware information, and other log and similar information that is collected when you access myTOYOTA Wallet or accounts. Personal data we process and collected may include Personal Information and/or Sensitive personal Information. Personal Information includes Username, Personal Identification Number, home address, work details, e-mail address, mobile number, birthdate, birthplace, financial records, any and all kinds of and similar transaction record of payment usage.

IV. Purpose

TFSPH collects only the Personal Data we need to effectively serve you. We may also use the Personal Data collected for various purposes such as customer service, investor relations, market research, and business development. We may use the Personal Data collected to respond to your queries, to process your requests and applications, to create services that will respond to your needs, and to otherwise carry out our business operations. We may also collect, use, and process your Personal Data for the following general purposes:

• to conduct due diligence prior to executing a contract, and to facilitate the fulfillment of the terms of the contract thereafter;

• to respond to your queries, complaints, and requests;

• to provide information about our services;

• to conduct research and analysis to improve customer experience;

• to maintain security; and

• to comply with legal, regulatory, and contractual requirements or obligations.

The use and processing of your Personal data also depends on your transactions with us. If you inquire about, or avail yourself of our services, we may collect, use, or process your Personal Data to:

• conduct appropriate credit investigation to assess the risk of transacting with you;

• prepare and execute the necessary contract to cover the transaction;

• update our records and keep your contact details and billing address up-to-date; and

• communicate any advisories, changes, and other information relevant to your contact with us

V. Retention

We will retain your Personal Data for as long as necessary to fulfill the purposes outlined in this Privacy Policy and communicated to you, unless longer period is allowed or required by law. Upon expiration of the Retention Period, all physical and electronic copies of the Personal Data shall be destroyed and disposed of using secure means that would render the Personal Data unreadable and irretrievable and prevent the occurrence of any Personal Data Breach and other Security Incidents.

VI. Disclosure

We will not disclose your Personal Data to third parties without your consent. It may however share your Personal Data to its business units. In such cases, your Personal Data will be used in a manner consistent with the purpose for which it was originally collected and to which you consented, and the Data Privacy Act, its Implementing Rules and Regulations, and all relevant regulations and issuances on privacy and data protection.

We may also share your Personal Data with the following entities:

• among subsidiaries, partners and affiliates, and/or within GT Capital Group

• to any judicial, governmental, supervisory, regulatory or equivalent body of the Philippines or other jurisdictions

Under such circumstances, we require our service providers, subsidiaries, partners and affiliates to limit the use of the Personal Data we share with them in a manner consistent with the purpose for which it was originally collected and to which you consented, and the Data Privacy Act, its Implementing Rules and Regulations, and all relevant regulations and issuances on privacy and data protection. Our service providers, subsidiaries, partners and affiliates will not process your Personal Data for any other purpose than what we have agreed with them. However, third-party links or websites shall not be covered under this Privacy Policy since you’ll be leaving the application that is not under our jurisdiction.

VII. International Data Transfer Practices

We transfer Personal Data to another country or territory in substantial compliance with Applicable Laws. When Personal Data is transferred to a party outside the Philippines, we will take all reasonable steps to ensure that the protection afforded to the Personal Data in the country of origin applies to the transfer of that Personal Data.

• We transfer Personal Data to other Toyota entities, in accordance with the Global Group Data Transfer and Processing Agreement entered into among the Company and applicable subsidiaries.

VIII. Rights of Data Subjects

We respect your rights as Data Subjects under Data Privacy Act of 2021.

This Privacy Policy is part of our demonstration of keeping your right to be informed that we collect, process, use and share.

Upon your request, you may be given to your personal data that we collect, process, use and share. You also have the right to request access to the circumstances relating to the processing and collection of your personal data, insofar as allowed by the law.

You have the right to dispute any inaccuracy or error in your personal data and may request us to immediately correct it. Upon your request, and after correction has been made, we will inform any recipient of your personal data of its inaccuracy and the subsequent rectification that was made.

TFSPH recognizes the right of its customer to rectify or delete Personal Data upon their instance or upon the termination of the specific purpose for which the information was collected.

As such, TFSPH shall continue to retain the Personal Data of its clients and customers for as long as required by their business. After which, Personal Data which is no longer necessary shall be properly disposed of for a period of not more than ten (10) years after the purpose for which the Personal Data was collected ceases.

You have the right to file a complaint to the National Privacy Commission if you feel that your personal information has been misused, maliciously disclosed, or improperly disposed, or that any of your data privacy rights have been violated.

You may be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data, taking into account any violation of your rights and freedoms as a data subject, as provided by law.

In case your personal data was processed through electronic means and in a structured and commonly used format, you have the right to obtain of your personal data in such electronic or structured format for your further use, subject to the guidelines of the National Privacy Commission with regard to the exercise of such right.

We wish to advise you that upon the passing of a data subject, or in case of a data subject’s incapacity or incapability to exercise legal rights, the data subject’s lawful heirs and assigns may invoke the data subject’s rights in place of the data subject.

IX. Data Breaches

TFSPH implements appropriate procedures for the management of a Personal Information Breach and/or Security Incident. A Breach and Security Incident Response Team shall duly act, assess, and submit the appropriate report to those concerned.

X. Amendments

We may modify or amend this Privacy Policy from time to time to keep up with any changes in relevant laws and regulations applicable to us or how we collect, use, protect, store, share or dispose of your personal information. If required by Law, we will obtain consent from you and you will be notified on the amendments of the Privacy Policy through your email.

XI. Contact Us

TFSPH welcomes comments and questions on this Data Privacy Policy. In the exercise of your rights pertaining to your personal information or to provide any feedback that you may have about our processing of personal information, you may get in touch with our Customer Service Hotline (7-757-8500) or send an email feedback@toyotafinancial.ph

If you have any questions, clarifications or concerns, you may also write to our Data Protection Officer at:

privacy@toyotafinancial.ph

Toyota Financial Services Philippines Corporation

32/F GT Tower International, Ayala Avenue,

Corner HV dela Costa Street, Salcedo Village, Makati City 1226

TFSPH will make every reasonable effort to answer your questions and advise you of the steps we take to address your issues.