MandalaLoan Privacy Policy

The Mandala Lending Corp. ("MandalaLoan", "we", or "the Company") is 100% committed to protecting your privacy. Engage with MandalaLoan's mobile application services only after you have thoroughly reviewed the terms of service below. Registration, access, or utilization of our app implies your affirmation of having grasped and consented to the stipulations of this contract. It is also incumbent upon you to follow all pertinent legal frameworks and governmental mandates. Bear in mind, you will be held solely accountable for any infringements of these terms. In the event that you are not in accord with, or have yet to fully comprehend, any segment of this agreement, we advise against engaging with the MandalaLoan mobile application and its services.

The Mandala Lending Corp. is a micro-lending company registered with the Securities and Exchange Commission (SEC) in the Philippines.
Corporate Name：The Mandala Lending Corp.
Business Name: MandalaLoan
Company Registration No. CS202005567
Certificate of Authority No. 3300
The MandalaLoan mobile app is owned and operated by The Mandala Lending Corp.

Data Collection and Use

To enhance user experience, we gather and manage personal information within the bounds of legal guidelines. This data encompasses, though is not restricted to, your name, contact details, financials, and other essential particulars. We are committed to safeguarding such information with suitable protections and assure you that your details will remain confidential, not shared with any third parties without explicit consent, except in instances where disclosure is legally mandated or permitted.

User Responsibilities

Users must protect their own account security and keep their credentials confidential, avoiding any sharing with others. Additionally, all actions and transactions on MandalaLoan must align with legal requirements and the agreement's terms of service.

Privacy Policy Updates

Periodic revisions to our privacy policy are possible. We will alert users of any updates and the corresponding effective dates. It's important to review this policy frequently to stay informed about the current conditions.

1. Collection of Personal Information

To enhance our loan services, we gather certain personal details from users, always with their permission. This data collection encompasses a variety of information, though it's not limited to:

• Basic Information: education level, marital status, social interaction details, address.
• Employment Information: type of work, monthly income, company name, company address.
• Contact Information: emergency contact number, social media contacts, email.
• Identity Information: identification document, facial recognition data, name, date of birth.
• Other Information: other data actively provided by the user or authorized by the platform.

In our efforts to enhance user experience, we also obtain data regarding the devices and applications that interface with our platform. The collected information and the permissions sought are as follows:

• Camera: To facilitate photo uploads and capture within the loan application, we require your device's camera access.
• SMS: Granting SMS permissions allows us to streamline the verification process and conduct risk assessments when you connect a withdrawal account or initiate a loan application, by automatically inputting the verification code.
• App Installation List: To safeguard against fraudulent activities and secure your financial assets, we require a list of the applications on your device to perform a risk evaluation.
• Device Information: device brand, model, operating system version, unique device identifier, network environment, WiFi connection, device status, application details, memory information, etc.

We retain personal information only for as long as necessary to fulfill the intended purposes and in compliance with legal requirements. To request immediate data removal, reach out to our customer support at the email address detailed within this Privacy Policy.

2. Validity and Accuracy of Submitted Information

Ensuring Information Integrity
It is imperative that the details you supply are both precise and veracious, without any deceit. You are also expected to maintain the currency of your information, updating us promptly of any alterations. We may invoke the right to solicit documentation to affirm the veracity of your disclosed data.

Consensual Personal Data Sharing
Personal data is procured only upon your voluntary provision. Should you decide to withhold such information or retract consent for its utilization, this may impede our ability to deliver full or partial services of the platform.

3. How We Use Your Personal Information

The personal information we gather from you will be employed for the subsequent objectives:

• Assessment of Eligibility: Assess whether you are eligible to use our products or services.
• Identity Verification: Verify your identity and the accuracy of the information you provide.
• Contacting Users: Contact users to obtain information for account registration or other required details.
• Fraud and Risk Monitoring: Monitor and prevent fraud, money laundering and other illegal activities related to the use of our services.
• Crime Prevention and Risk Management: Detect, prevent and investigate actual or suspected criminal activities, and analyze and manage business risks.
• Customer Behavior Analysis: Analyze user behavior and improve our services.
• Problem Resolution: Solve problems you and other users encounter when using our services.
• Marketing and Product Promotion: Market or provide new, relevant, complementary products and services to users.
• Customer Service and Support: Provide customer assistance, manage disputes and handle complaints.
• Risk Assessment Development: Develop, improve and maintain online and offline risk assessment processes and models.

We are committed to aligning our use of your personal data with legal standards, striking a balance between enhancing our services and preserving user privacy.

4. With Whom Do We Share Your Personal Data?

Personal user information will be kept confidential, and we will only reveal it to third parties if it's crucial for the provision of MandalaLoan’s offerings. We strive to anonymize your data or remove identifiers when sharing it.

You are aware and consent to the potential sharing of your personal information with specific entities when it is required and fitting for the aforementioned objectives:

• Subsidiaries and Affiliates: MandalaLoan’s subsidiaries, parent company, or affiliated entities.
• Employees and Service Providers: Our employees, subcontractors, agents, service providers, or related parties.
• Governmental Authorities: Any government agency or authority as authorized by applicable law or pursuant to a court order from a competent jurisdiction.
• Collection Agencies and Legal Representatives: External debt collection agencies, attorneys, and other agents we engage to enforce our rights against users.
• Third-Party Service Providers: Entities providing services that assist or support our loan business management, solely for those purposes.
• Banking Partners: Partner banks involved in facilitating financial transactions.
• External Legal and Consulting Professionals: External lawyers, auditors, and consultants necessary for resolving disputes or handling complaints.

To smooth the process of your loan application, we might share pertinent personal details with external collaborators such as lending institutions, payment processors, and post-loan service agencies, ensuring that any such sharing or processing adheres to the guidelines of our Privacy Policy.

5. How Long Do We Retain Your Personal Data?

We retain personal information for the duration necessary to fulfill the objectives stated in this Privacy Policy and for a reasonable period to complete our service offerings. As mandated by anti-money laundering and counter-terrorist financing regulations, we are obligated to maintain your personal data for a minimum of five years, even if you request the erasure of your relevant data. Furthermore, we may retain your personal data under the following circumstances: to fulfill legal obligations, with legal authorization, or to establish evidence for legal defense. Throughout the data retention period, we ensure compliance with applicable laws and regulations, while supporting necessary compliance management.

We promptly delete or anonymize data that is no longer needed for its initial collection purpose, unless retention is necessary to meet legal obligations or other mandatory reasons. We prioritize user privacy, implementing suitable measures for the secure management and processing of your personal information, ensuring adherence to all legal requirements.

6. Personal Information Security

We place a high priority on safeguarding the personal data gathered, utilized, and stored on our platform. A range of technical safeguards are in place, such as data encryption, to prevent unauthorized access, data loss, misuse, or tampering. Stringent security protocols are enforced to ensure the utmost protection of your information during both storage and transmission. Our commitment is to maximize the protection of your personal information.

While we implement suitable security practices, absolute security during data transmission or storage within our systems cannot be assured. Given the evolving nature of technology, we cannot promise complete prevention of unauthorized access or disclosure of information under all circumstances. Thus, we disclaim liability for any information loss or exposure due to security vulnerabilities beyond our control. We remain dedicated to consistently assessing and enhancing our security protocols to counter new information security risks.

Although we implement a suite of security measures to shield our systems and networks, we cannot absolutely guarantee the impenetrability of your personal information against unauthorized access, whether through third-party hacking or other illicit means. We do not assert that your data is impervious to loss, misuse, or alteration by external parties. To mitigate potential cybersecurity risks, we advise users to take proactive steps in securing their personal account information and to remain vigilant against possible network threats.

7. Your Rights as a Data Subject

As a data subject, you have various rights as described below and can exercise them by contacting our customer service center via email. Please note that in some cases, we may not be able to comply with your request (for example, we have a legitimate reason to continue to use or process your personal data, or we need to retain your data to comply with a legal obligation).

Right to be informed

It is our duty to inform you about the collection and processing of your personal information, including the legal grounds for these activities, the entities with whom we may share your data, the sources from which we collect it, and the rights you hold as a data subject. These details are transparently outlined within MandalaLoan's app and Privacy Policy.

Right of access

You are entitled to obtain a copy of your personal data and the processing details we possess, except when disclosure could infringe upon the rights and freedoms of others or if the law mandates that we deny such requests. Be aware that your access right does not extend to analytical insights, deductions, models, or business data derived from your information.

Right to rectification

Should you find any inaccuracies in the personal data we have on file, you are entitled to request rectifications. We will promptly make the necessary updates. You may be asked to supply proof or documentation to substantiate the correctness of your update request.

Right to erasure or blocking

You have the right to ask us to delete your personal data if:

• You believe we no longer need to hold the data;
• You believe we have no legal grounds to process the data;
• You believe we are using the data unlawfully;
• You believe the law requires us to delete the data.

Right to restrict or object to processing

If your personal data is processed based on your consent or our legitimate interests, you have the right to ask us to stop processing your data at any time. This includes situations where:

• You believe the data is inaccurate;
• You believe we are using the data unlawfully;
• You need the data for legal proceedings and want us to retain it;
• You have told us that there is no lawful reason for us to continue using the data and we are considering your request

Right to Lodge a Complaint

If you suspect that your data protection rights have been infringed upon, you hold the right to lodge a complaint with the appropriate governmental authorities, such as the National Privacy Commission of the Philippines.

8. Your Obligations as a Data Subject

As the data subject, it is your responsibility to inform us in writing within 14 days of any alterations to the information you've submitted. You must also promptly reply to our inquiries and furnish us with the necessary user or personal details when requested. Failure to supply the required information promptly, or refusal or revocation of our authorization to handle, transfer, or disclose your personal data, may result in an inability to offer you new or ongoing services. We reserve the right to dissolve our relationship with you if necessary to safeguard the ongoing service provision.

We maintain the right to enforce necessary actions to adhere to our regulatory compliance obligations should you fail to meet your responsibilities, which may encompass suspending, transferring, or closing your account in accordance with local laws. This is to ensure ongoing service delivery and safeguard the rights of all users.

9. Contact Us

If you notice any unauthorized changes to your account details or have inquiries regarding transactions, feel free to contact our customer support via email at any time. Our support team is committed to offering prompt assistance and will work diligently to address your concerns. Here is how you can reach us:

• Website: https://www.mandalacash.com/
• Email: cs.mandala@gmail.com
• Address: 211-213 Carolina Mall, Santa Rosa-Tagaytay Road, Puting Kahoy, REGION IV-A Silang, Cavite, 4118 Philippines

Our Privacy Policy may be subject to updates to enhance our services and align with evolving data privacy regulations. We will notify you promptly of any such revisions to ensure you are always apprised of the measures we take to safeguard your personal data.

Effective Date: September 1, 2024