DATA PRIVACY NOTICE

1. POLICY STATEMENT.

The Law Office of Flores and Ofrin (“The Firm” or “we”, “our”, “us”) is committed to protect and respect your right to data privacy. This Privacy Notice is intended to inform users and website visitors (“you”) regarding our policies on data privacy.

2. SERVICE DESCRIPTION.

The Firm operates the website https://floresofrinlaw.com (the “website”). The website is intended to disseminate information to the public regarding the services of the Firm, as well as updates on Philippine law and jurisprudence. The website is also intended to accept queries and communications from website users.

3. CONSENT TO THE PRIVACY NOTICE.

By clicking “I Agree”, you accept the policies and procedures that we employ in relation to the collection and use of any personal data that you may disclose through the website.

We may update this Privacy Notice from time to time as we improve our services. We will notify you of any changes that would substantially affect your data privacy rights and ask for your consent to such changes.

4. PERSONAL INFORMATION CONTROLLER.

The Firm is the personal information controller of any personal data that you disclose on the website.

5. METHOD OF COLLECTION.

The Firm will only collect information through the following channels:

(1) when you submit information through our “Contact Us” Form

(2) when you subscribe to our newsletter

(3) when you message us through any of our social media accounts on Linkedin, Facebook, and Google.

Your information will be redirected to one of our representatives.

6. CATEGORIES OF PERSONAL DATA COLLECTED AND PROCESSED.

When you send us a message, we collect your Name, E-mail Address, and the contents of the message you send to us.

When you subscribe to our newsletter, we will collect only your e-mail address.

When you message us through any of our social media accounts, we will collect the contents of your message. We may also view the details of your public profile.

7. PURPOSES FOR COLLECTION AND USE.

When you submit your personal data, your personal data will be used for the following purposes:

7.1. To address your questions and concerns;

7.2. To communicate with you through any communication channel regarding any questions, concerns, or complaints that you may have in relation to your use of the website, your transactions, and exercise of your data privacy rights;

7.3. If you subscribe to our newsletter, to email you our newsletter;

7.4. Improvement of the website;

7.5. To conduct direct marketing activities, such as e-mail announcements and other promotional activities;

7.6. To comply with statutory and regulatory requirements, including directives, issuances by, or obligations of the Firm to any competent authority, regulator, supervisory body, enforcement agency, exchange, court, quasi-judicial body, or tribunal;

7.7. To enable the Firm to exercise sound corporate governance over its businesses, ensure that risks arising therefrom are duly identified, measured, managed and mitigated, and enhance risk assessment and prevent fraud;

7.8. To conduct company audits, investigate complaints and security threats;

7.9. Other legitimate business purposes;

7.10. To establish, exercise, or defend legal claims;

7.11. Fulfill any other purposes directly related to the above-stated purposes.

8. THIRD PARTY DISCLOSURES.

Any information you submit through the website may be accessible by our webhost.

9. OPT OUT.

You may inform us of the specific personal information you do not want to be processed beyond the requested purpose. We will respect your request in so far as it is feasible to fulfill the purposes for which the personal data was collected.

10. DATA STORAGE.

We will retain your personal data for as long as your concern is pending and as may be required by law. Your data will be stored on the secure servers of our third party service providers, which may be located in different locations, depending on the service provider. You may, at any time, request for the deletion of your personal data by contacting us if you no longer wish to keep your account. Please note that request for deletion with the Firm does not equate to the deletion of your personal data from the servers and/or other storage facilities of the insurers/brokers or lenders with whom you transacted.

11. DATA SECURITY AND DISPOSAL.

The Firm shall take commercially reasonable precautions to protect your personal data. Unfortunately, no data transmission over the internet can be considered as 100% secure. However, once the information has been received by the Firm, it employs and observes security procedures and policies commensurate with industry standards to safeguard against loss, theft, unauthorized access, destruction, use, modification and disclosure. Further, the Firm retains your personal information only as long as necessary to fulfill the purposes declared in this Privacy Notice or as maybe required by law. When such purposes are fulfilled, the Firm shall anonymize your information.

12. CONFIDENTIALITY OF DATA.

Our employees are mandated to operate and hold personal data under strict confidentiality. They are required to sign non-disclosure agreements and are have received training on our privacy and security policies to ensure confidentiality and security of personal data.

13. RIGHTS OF THE DATA SUBJECT.

You are entitled to the following rights:

13.1. The right to be informed on whether your personal information shall be, are being or have been processed;

13.2. Be furnished with the information indicated below before the entry of your personal information into the processing system of the personal information controller, or at the next practical opportunity:

13.2.1. Description of the personal information to be entered into the system;

13.2.2. Purposes for which they are being or are to be processed;

13.2.3. Scope and method of the personal information processing;

13.2.4. The recipients or classes of recipients to whom they are or may be disclosed;

13.2.5. Methods utilized for automated access, if the same is allowed by the data

subject, and the extent to which such access is authorized;

13.2.6. The identity and contact details of the personal information controller or its representative;

13.2.7. The period for which the information will be stored; and

13.2.8. The existence of their rights, i.e., to access, correction, as well as the right to lodge a complaint before the Commission.

13.3. Any information supplied or declaration made to you on these matters shall not be amended without prior notification: Provided, that the notification under subsection 12.2 shall not apply should the personal information be needed pursuant to a subpoena or when the collection and processing are for obvious purposes, including when it is necessary for the performance of or in relation to a contract or service or when necessary or desirable in the context of an employer-employee relationship, or when the information is being collected and processed as a result of legal obligation;

13.4. Reasonable access to, upon demand, the following:

13.4.1. Contents of your personal information that were processed;

13.4.2. Sources from which personal information were obtained;

13.4.3. Names and addresses of recipients of the personal information;

13.4.4. Manner by which such data were processed;

13.4.5. Reasons for the disclosure of the personal information to recipients;

13.4.6. Information on automated processes where the data will or likely to be made as the sole basis for any decision significantly affecting or will affect you;

13.4.7. Date when your personal information was last accessed and modified; and

13.4.8. The designation, or name or identity and address of the personal information controller.

13.5. Dispute the inaccuracy or error in the personal information and have the personal information controller correct it immediately and accordingly, unless the request is vexatious or otherwise unreasonable. If the personal information has been corrected, the personal information controller shall ensure the accessibility of both the new and the retracted information and the simultaneous receipt of the new and the retracted information by recipients thereof: Provided, That the third parties who have previously received such processed personal information shall be informed of its inaccuracy and its rectification upon your request;

13.6. Suspend, withdraw or order the blocking, removal or destruction of your personal information from the personal information controller’s filing system upon discovery and substantial proof that the personal information are incomplete, outdated, false, unlawfully obtained, used for unauthorized purposes or are no longer necessary for the purposes for which they were collected; and

13.7. Be indemnified for any damages sustained due to such inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal information.

13.8. Right to data portability - where personal information is processed by electronic means and in a structured and commonly used format, you have the right to obtain from the personal information controller a copy of data undergoing processing in an electronic or structured format, which is commonly used and allows for further use.

14. QUESTIONS AND CONCERNS.

If you have further questions or concerns about this data privacy notice, or if you wish to exercise your rights as a data subject, you may contact our Data Privacy Team through resource@floresofrinlaw.com.