Zenith Capital

Data Privacy Statement

Zenith Capital Credit Group Corporation (“Zenith Capital”) values your privacy and is committed to protecting your personal information. We process your data in accordance with the Data Privacy Act of 2012, its rules and regulations, and recognized standards of security and confidentiality.

This Data Privacy Statement explains how we collect, use, share, store, and protect your information, as well as the choices available to you in managing your personal data.

I. Who is Zenith Capital?

Zenith Capital is a duly registered corporation organized and existing under Philippine law, with principal office at Unit 2701, One World Place, 32nd Street, Bonifacio Global City, Taguig City.

In the regular course of providing its products and related services, Zenith Capital collects and processes personal data to serve clients more effectively. This allows us to verify identities, assess applications, manage accounts, comply with legal requirements, and deliver secure and reliable financial services tailored to the needs of clients, applicants, guarantors, sureties, authorized representatives, counterparties, suppliers, and other relevant individuals.

II. Why do we have your personal information?

Zenith Capital processes personal information strictly for legitimate and lawful purposes necessary to carry out its business. These purposes include the following:

Identity Verification – To establish and confirm the identity of clients, applicants, guarantors, sureties, and authorized representatives, as required under the Anti-Money Laundering Act of 2001 (RA 9160, as amended) and its Implementing Rules and Regulations.
Application Evaluation – To assess and determine the eligibility, repayment capacity, and creditworthiness of applicants prior to the approval or disbursement of loan facilities.
Account Documentation and Administration – To ensure that loan accounts and related obligations are properly maintained and managed.
Regulatory and Statutory Compliance – To comply with mandatory requirements imposed by the Securities and Exchange Commission (SEC), the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other competent government authorities, including the filing of reports, maintenance of records, and submission of information pursuant to applicable laws and regulations.
Risk Management and Fraud Prevention – To safeguard transactions and protect against fraud, financial crime, and other unlawful activities.
Operational and Policy Development – To support internal reporting, auditing, policy-making, and system enhancements that improve the efficiency, reliability, and security of operations.
Official Notices and Communications – To ensure proper delivery of notices, statements, and other communications relevant to accounts and contractual obligations.
Advertising of Services and Products - To promote and make available loan products, services, and offers that may be relevant or beneficial to clients.

III. Who does this Data Privacy Statement apply to?

This Data Privacy Statement applies to all natural and juridical persons whose information is collected and processed by Zenith Capital in the lawful conduct of its operations. It extends, without limitation, to the following:

Clients, Applicants, and Related Parties – persons or entities applying for, availing of, or maintaining loan facilities, together with their authorized signatories, officers, employees, or representatives whose information is required for evaluation and servicing.
Guarantors and Sureties – Parties providing guarantees, suretyship, or other undertakings in connection with loan agreements.
Authorized Representatives – Persons formally designated or empowered to act on behalf of clients, applicants, or related parties, whether by board resolution, secretary’s certificate, power of attorney, or other legal authority.
Counterparties and Service Providers – Contractors, suppliers, and other parties engaged in business transactions or service arrangements with Zenith Capital.
Website and Platform Users – persons accessing or interacting with Zenith Capital’s website, online forms, or digital platforms for inquiries, applications, or transactions.
Inquirers and Other Communicators – persons contacting Zenith Capital to inquire about loan products and services or for any other reason, whether through the website, electronic mail, or other communication channels.
Other Relevant Persons – such as beneficiaries, emergency contacts, references, or other parties whose information is provided to Zenith Capital in connection with loan, employment, compliance, or other lawful purposes.

Where a relationship with Zenith Capital is governed by a specific contract or agreement, the provisions of that document shall be read in harmony with this Data Privacy Statement.

IV. What information do we collect?

The type of information we obtain depends on the nature of your relationship with us, the services you avail of, and the requirements of applicable laws and regulations. This may include:

Identification Information – Such as your full name, date and place of birth, age, nationality, marital status, government-issued identification numbers, specimen signatures, photographs, and other official identifiers.
Contact Information – Including your home, business, or mailing address, email address, telephone and mobile numbers, and other channels through which we can communicate with you.
Financial and Credit Information – Such as income, assets and liabilities, bank account details, tax identification number, payment history, bounced checks, credit references, and related financial records used to assess repayment capacity and creditworthiness.
Employment and Business Information – Including employer or business name, position or designation, length of employment or operations, nature of business, and supporting documentation such as business permits, financial statements, or payslips.
Transaction Information – Including applications for promissory notes, loan agreements, guarantees, suretyship documents, repayment schedules, payment records, receipts, correspondence, and account activity.
Digital and Network Information – Such as your IP address, device identifiers, browser type, operating system, geolocation data, and activity logs generated when you access or use our website, online forms, or electronic platforms.
Visual, Audio, and Communications Data – Such as CCTV recordings at our premises, call recordings with our staff, voice mails, emails, chat logs, and other communications with Zenith Capital.
Beneficiary and Reference Information – Such as the details of co-borrowers, guarantors, beneficiaries, emergency contacts, references, or persons whose information is provided in connection with your transactions.
Other Information as May Be Required by Law or Necessary for Transactions – Including data or documents that may be requested under applicable laws, regulations, or by competent authorities, or otherwise necessary to complete transactions and fulfill contractual or legal obligations.

V. How do we collect personal information?

Zenith Capital obtains personal information through various lawful channels in order to process applications efficiently, secure transactions, and provide reliable services, including but not limited to those listed below:

Direct Interactions – When you submit applications and supporting documents, sign agreements, communicate with us in person, by phone, or through email, or when you provide feedback and inquiries.
Through Our Website and Online Forms – When you access our website, fill out application or inquiry forms, upload documents, or transact with us using digital platforms operated by or for Zenith Capital.
Through Business Transactions – When you engage with us as a client, guarantor, surety, supplier, contractor, or service provider, and provide information necessary to complete the transaction.
From Authorized Representatives – When persons acting on your behalf (such as signatories, agents, or representatives) submit documents, applications, or other information to Zenith Capital.
From Related Parties and Partners – When your information is provided by co-borrowers, guarantors, sureties, counterparties, business partners, or service providers in connection with your transactions with us.
From Publicly Available Sources – When we obtain information from government registries, published records, or publicly accessible channels as part of due diligence and verification processes.
From Recruitment and Employment Processes – When you apply for employment directly with us, through recruitment agencies, or via professional networking and job-search platforms, and when information is provided by former employers or references.
From Background Verification Providers – When independent service providers perform checks on information you submit in connection with financing or employment, such as credit investigations, reference checks, or background screenings.

Information About Other Persons
If you provide information relating to another person (for example, a guarantor, beneficiary, or reference), you are responsible for ensuring that such person has consented to the disclosure of their information to Zenith Capital. You also agree to hold Zenith Capital free from any liability arising from the disclosure of such information without proper authority.

VI. How We May Use Your Information

Your personal information may be used, processed, stored, shared, and disclosed by Zenith Capital to its authorized personnel, service providers, and third parties (as may be permitted by law) in the following manner:

Identity Verification – We use your information to authenticate government-issued identification documents, signatures, photographs, and other credentials against submitted records and verification databases in order to confirm your identity.
Application Processing – We use your information to review personal, business, and financial records, to conduct credit checks and credit investigations, and to assess repayment capacity and creditworthiness for purposes of evaluating loan applications.
Account Documentation and Administration – We use your information to prepare, execute, and maintain loan agreements, promissory notes, suretyship undertakings, account records, and payment schedules. We also use it to manage collections, settlements, and reconciliations.
Regulatory Filings and Compliance – We use your information to prepare and submit reports, certifications, and disclosures to competent authorities, to maintain statutory records, and to respond to lawful orders or regulatory inquiries.
Fraud Detection and Risk Controls – We use your information to conduct background checks, monitor transactions, detect irregular activities, and apply safeguards intended to prevent fraud, money laundering, and other unlawful activity.
Internal Reporting and Analytics – We use your information to generate internal reports, to conduct audits, and to perform statistical or behavioral analysis for the improvement of credit policies, operational processes, and internal controls.
Client Communications – We use your information to send billing reminders, payment confirmations, account statements, notices, advisories, and other communications relevant to your account. We also use it to respond to your inquiries or complaints.
Marketing and Promotions – We use your information to provide you with details about relevant loan products, services, and offers through official channels such as SMS, email, or telephone, subject to your consent where required.

Option to Opt-Out from Receiving Promotional Advertisements and Offers
You may choose to opt-out from receiving promotional advertisements and offers by sending us an e-mail at Insert Email.

Third-Party Processing – We use your information to validate or update records through authorized contractors or service providers, including those engaged for credit checks, document verification, residence verification, collections, or similar services.
Use of Digital Tools – We use your information to record and analyze online interactions, including IP addresses, device identifiers, and activity logs, in order to enhance security, detect fraud, improve reliability, and optimize the user experience of our platforms.
As Required by Authorized Third Parties – We use your information to support the delivery of services and products to you, to comply with lawful orders and enforcement requests, to implement contractual terms and company policies, to investigate or address unlawful activities or technical issues, to protect the rights, property, and security of clients, employees, and third parties, and to enforce Zenith Capital’s rights and pursue available remedies under applicable law.

All processing and use of personal information shall be undertaken in accordance with Zenith Capital’s prescribed policies on data privacy, information security, records retention, and enforcement of legal rights.

Access to and disclosure of your information is limited to parties who have a legitimate need to know in connection with the services we provide, subject to applicable laws and regulations. We may share your personal information with the following:

Authorized Personnel of Zenith Capital – Directors, officers, employees, and staff who require access to your information in order to evaluate applications, administer accounts, manage collections, or otherwise perform their official duties.
Guarantors, Sureties, and Co-Borrowers – Individuals or entities contractually bound in relation to your loan obligations, where disclosure is necessary to enforce rights or comply with legal and contractual requirements.
Service Providers and Business Partners – Third parties engaged by Zenith Capital to perform services such as credit investigations, document and residence verification, collections, payment processing, information technology support, and other services necessary to carry out better operations.
Credit Bureaus and Reference Agencies – Institutions legally authorized to collect and maintain credit information, for purposes of verifying credit history, establishing creditworthiness, or updating credit records.
Regulators and Competent Authorities – Government agencies, courts, and regulatory bodies to which Zenith Capital is legally required to submit reports, disclosures, or certifications in compliance with applicable laws and regulations.
Auditors, Consultants, and Advisors – External professionals who provide auditing, legal, compliance, risk management, or advisory services to Zenith Capital, subject to confidentiality undertakings.
Investors, Funders, and Assignees – Present or prospective investors, funding partners, or assignees of receivables, where disclosure is required for due diligence, reporting, or transaction completion, subject to confidentiality obligations.
Affiliates and Related Parties – Entities that are under common ownership or control with Zenith Capital, to the extent necessary for group reporting, consolidated risk management, or shared services.
Other Persons as May Be Required by Law – Any other person or entity to whom Zenith Capital is legally compelled or allowed to disclose information in order to comply with lawful orders, protect its rights, or safeguard the interests of clients and third parties.

VIII. How long do we keep your information?

Zenith Capital retains personal information only for as long as necessary to fulfill the purposes for which it was collected, and as required or permitted by applicable laws and regulations.

Loan Transactions – Records relating to loan applications, accounts, guaranties, and related agreements are retained for the duration of the contractual relationship and for a reasonable period thereafter to address any post-termination obligations, enforcement actions, or legal claims.
Regulatory Requirements – Certain information may be kept for specific minimum periods mandated by law, such as the Anti-Money Laundering Act of 2001, the Tax Code and Bureau of Internal Revenue regulations, the Securities Regulation Code, and other applicable issuances.
Business and Audit Purposes – Records necessary for audit, compliance monitoring, and risk management may be retained for periods consistent with industry practice and regulatory expectations.
Secure Disposal – When personal information is no longer required for the above purposes, it will be securely deleted, anonymized, or otherwise disposed of in a manner that prevents further access, processing, or disclosure.

Zenith Capital continuously reviews its retention policies to ensure compliance with legal obligations and industry standards, while upholding the confidentiality and security of personal information.

IX. How do we keep your information safe and secure?

Your trust and privacy are important to us. Zenith Capital implements reasonable and appropriate organizational, technical, and physical measures to safeguard your personal information against loss, unauthorized access, alteration, disclosure, or misuse including but not limited to:

Organizational Measures – Access to personal information is limited only to authorized personnel who require it to perform their official functions. All employees and representatives handling client data are bound by strict confidentiality obligations.
Technical Measures – Personal information stored in our systems is protected through encryption, secure networks, firewalls, and monitoring tools that detect and prevent unauthorized access. We also implement authentication protocols and regular system updates to maintain data integrity and security.
Physical Measures – Records and documents containing personal information are kept in secure facilities with controlled access. Safeguards such as locked storage, surveillance systems, and restricted entry are applied to prevent unauthorized physical access.
Third-Party Safeguards – Service providers and business partners who process information on our behalf are required to comply with data privacy and security standards consistent with Philippine laws and international best practices.
Continuous Review – Our security policies and procedures are subject to periodic review, audit, and enhancement to address evolving risks, regulatory requirements, and industry standards.

Despite these safeguards, no method of transmission or storage is completely secure. Nevertheless, Zenith Capital is committed to maintaining the highest practicable level of protection for your personal information in accordance with industry practices and regulatory requirements.

X. Changes to our Data Privacy Statement

We may update this Data Privacy Statement from time to time to reflect new data privacy rules and improvements in security practices. We encourage you to check this page regularly so you remain informed about how we protect your personal information.

Last updated: Insert Date of Posting

XI. Rights of the Data Subject

We respect your right to privacy under the Data Privacy Act as follows:

The right to be informed on the personal and/or business information that we collect and how it will be processed
The right to object to the processing of your personal and/or business information including processing for direct marketing, automated processing or profiling and to withhold consent to the processing in case of changes or any amendment to the information supplied or declared
The right to access or demand access to your personal and/or business information
The right to rectification and to dispute any inaccuracy or error in your personal and/or business information
The right to suspend, withdraw, order the blocking, removal or destruction of your information from the Zenith Capital’s system
The right to damages and to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal and/or business information, taking into account any violation of your rights and freedom
The right to portability, to obtain a copy of such information in an electronic or structured format that is commonly used
The right to lodge a complaint before the National Privacy Commission

For further details, please refer to NPC's website: Rights of Data Subject - https://privacy.gov.ph/data-privacy-act/#w16

XII. How to exercise these rights

We'll handle all your requests to access, correct, or move your personal information unless legal reasons prevent us from doing so. You can request a copy of any personal information we have about you, and if something needs updating, we're here to help you correct it.

For any inquiry, request or concern on this Data Privacy Statement or your personal information, you may visit our office at Unit 2701, One World Place, 32nd Street, Bonifacio Global City, Taguig City or you may choose to call us at (+632) 8636 5458.

XIII. Acknowledgment

By continuing to use our website or submitting information to Zenith Capital, you acknowledge that you have read and understood this Data Privacy Statement and consent to the collection, use, and processing of your personal information as described herein.