BP Waterworks Inc. is a public utility company registered with the Securities and Exchange Commission of the Philippines. We provide and supply water to homeowners of subdivision projects and/or condominium units and collect the condominium and association dues for and in behalf of the condominium corporations and homeowners’ association, respectively (the “Services”).
Agreement to Use of Personal Information and Data
Information We Collect
1. Any information collected as a result of the Data Subject’s relationship with us such as personal information from:
(a) prospective and existing customers including customers with terminated services collected during (i) application for water services such as name, address, phone number, email address, Tax Identification Number (TIN) and such other information relative to legal occupation of the premises served); (ii) billing, payment and collection; and (iii) any communication in relation to your commercial relationship with us such as when you wish to contact us to lodge your concerns and complaints;
(b) prospective, active and separated employees collected during (i) application for work; (ii) processing of the application for work; (iii) employment; and (iv) termination of employment;
(c) vendors, suppliers or contractors collected during accreditation and vetting of credentials and processing of payments such as the name, address, contact details, TIN, banking information, etc.;
(d) guests and visitors collected during visits to our office premises such as the name, address and video recordings and still photo images captured by our CCTV system;
2. Personal information provided by the Data Subject collected while using our mobile and web applications, website and social network accounts.
3. Personal information collected automatically from the Data Subject through the use of our mobile and web applications, website, and social network accounts such as device information, log data, and product usage data.
4. Personal information collected from public data bases and third party data providers with the consent of the Data Subject. We take steps to ensure that third parties are legally and contractually bound to disclose personal information of the Data Subject.
5. Any other personal information voluntarily provided by the Data Subject for any legitimate purpose declared at the point of collection.
How We Use the Personal Information and Data
In general, we store, process and analyze the personal information and data that we collect from the Data Subject and use it for internal purposes only. We do not disclose any personal information and data collected to third parties except as otherwise provided herein and only on a “need-to- know” basis.
For certain categories of Data Subjects, we collect their personal information and data for the specific purposes enumerated herein.
(a) Prospective and existing customers including customers with terminated services
(i) to provide and improve our Services;
(ii) for billing, payment and collection purposes;
(iii) to contact you regarding your account or send you system alert messages and other messages related to our Services;
(iv) to give you information about our Services and programs;
(v) to provide customer support;
(vi) to respond to your inquiry, concern or complaint;
(vii) to verify your identity when you access your account;
(viii) to meet legal requirements or respond to lawful requests by authorities;
(ix) to prosecute and defend our rights in a legal proceeding;
(x) to provide information to our representatives and advisors;
(xi) to enforce compliance with any agreement with us; and
(xii) for other Services related purposes.
(b) Prospective, active and separated employees
(i) to evaluate your qualification for employment;
(ii) to administer salaries, deductions, entitlements and benefits;
(iii) to comply with statutory and regulatory requirements and submissions;
(iv) to evaluate performance;
(v) to determine appropriate training, development, health and wellness programs;
(vi) to administer disciplinary action and sanction;
(vii) to maintain employment records;
(viii) to process work-related claims; and
(ix) for other employment related purposes.
(c) Vendors, suppliers or contractors
(i) to verify or confirm your identity as vendor, supplier or contractor and your authorized contact persons;
(ii) to transact business with you;
(iii) to facilitate the payment of goods and services you delivered to us;
(iv) to comply with statutory and regulatory requirements;
(v) to update and maintain you account information;
(vi) to respond to your feedbacks, questions or comments;
(vii) to meet legal requirements or respond to lawful requests by authorities;
(viii) to prosecute and defend our rights in a legal proceeding;
(ix) to provide information to our representatives and advisors;
(x) to enforce compliance with any agreement with us; and
(xi) for other business or contractual related purposes.
(d) Guests and visitors
(i) to establish your identity;
(ii) record the purpose of your visit;
(iii) monitor your activity in our office premises; and
(iv) for other security related purposes.
Protecting Personal Information and Data
We take appropriate technical and organizational measures to protect the personal information and data provided by our Data Subjects from loss, misuse, unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved in the processing and the nature of the personal information and data. Your personal information and data can only be accessed by our authorized staff and contractors that need access to such information and data to perform specified services. We require our vendors, suppliers and contractors, through agreements, to secure and keep your information confidential and we do not allow them to disclose your information to others, or to use it for their own purposes. We are constantly reviewing our information security practice to ensure that no one can gain unauthorized access to your personal information and data.
Your information may be disclosed to government entities pursuant to and in compliance with applicable laws and regulations, subpoena and court order.
Data Protection Rights
(a) You may access, correct, update or request deletion of your personal Information and data. We take reasonable steps to ensure that the personal information and data we collect is reliable for its intended use, accurate, complete, and up to date. You may contact our data privacy officer and visit our main office located at Doña Rosario Bldg. No. 24 Adriatico St. cor. Fullon St. Phase 2C, Bahayang Pag-asa Subdivision, Brgy. Molino V, Bacoor City, Cavite in person to access, correct, update, delete your personal information, or alter your data. We will consider your request in accordance with applicable laws.
(b) You can object to processing of your personal information, ask us to restrict processing of your personal information, or request portability of your personal information.
(c) You have the right to complain to the National Privacy Commission about our collection and use of your personal information.
Retention of Personal Information and Data
We retain personal information and data where we have an ongoing legitimate business or legal need to do so. Our retention periods will vary depending on the type of personal information or data involved, but, generally, we will refer to these criteria in order to determine the retention period:
1. Whether we have a legal or contractual need to retain the personal information or data; or
2. Whether the personal information or data is necessary to provide our Services.
If we have no ongoing legitimate business need to process your personal information or data, we will dispose or discard it in a secure manner that would prevent further processing, unauthorized access, or disclosure to any other party. For electronically stored personal information or data, we will either delete or anonymize it, or if this is not possible (for example, because your personal information or data has been stored in backup archives), then we will securely store your personal information or data and isolate it from any further processing until deletion is possible.