As we value the privacy of our relationship, this Data Privacy Notice is being provided to all people (“you” or “your”) who will be availing Tonik Digital Bank, Inc. (“Tonik”, “TDB”, “Tonik Digital Bank”, “we” or “our”) Deposit product Loan product namely the Tonik Savings Account (“TSA”, or “Tonik Account”) or Loan products namely the Shop Installment Loan, Cash Loan, and Upsell (“TDB Loans”).
This Data Privacy Notice provides information on how we collect, use, share, store, and protect your Personal Data pursuant to the requirements of the Data Privacy Act of 2012 (the “DPA” or “R.A. No. 10173”), along with the pertinent circulars, issuances, and regulations of the National Privacy Commission (NPC). Capitalized terms used but not defined in this Data Privacy Notice will have the meaning(s) ascribed thereto in the DPA.
1. WHO WE ARE
Tonik Digital Bank, Inc. is a digital bank located in the Philippines which offers a wide range of retail financial products, including deposits, loans, savings accounts, payments, and cards on a highly secure digital banking platform.
2. PERSONAL DATA WE COLLECT
The following Personal Data is collected by Tonik from you through your application for an account with us through the Tonik app and during the time of your availment of Deposits and/or loans with us:
Personal Identifiers: Name, email address, home address, mobile number, date of birth, place of birth, nationality, gender, parents/guardians name;
Biometric Information: Biometric data such as facial recognition data, voice identification or fingerprint;
Business/Employment Information: Nature of Business and other business information such as name, address, date, and place of birth, contact number or information and citizenship or nationality of the beneficiary or beneficial owner, whenever applicable, Employment details such as job title, industry classification, hiring date, salary information, employment status, pay slips, certificate of employment, etc.;
Transaction Information: Data about your use of services or transactions facilitated in your deposits/loans accounts;
Payment/Cash-In Information: bank account information, credit, debit, or other payment card information that will enable card linking to Tonik account for cash-in related purposes, billing address, payment methods, bank account information, bank account statements, credit card statements, credit, debit, or other payment card information;
Government ID Data: Government-issued ID;
Other Information You Provide to Us: the content of your Tonik correspondence, exchanges with our customer support (including social media);
Behavior and preferences data: such as data you share with us when you contact Customer Care channels, IP address of the mobile device or computer you use and the pages you visit on Tonik websites and applications;
Information from cookies, or other technologies: deployed for analysis of visits to, usage and transactions in websites, installed mobile applications and other device metadata including metadata related to SMS, contacts, network etc., or the use of any information technology application of and/or used by us, social media networks, data aggregators and data integrators and other available data sources and the use of the internet.
3. WHAT WE DO WITH YOUR DATA
HOW WE PROCESS YOUR INFORMATION WHEN YOU OPEN DEPOSIT WITH US
USE OF YOUR INFORMATION BY TONIK
| Type/s of Personal Data | Purpose/s of Processing | Legal Basis for Processing |
|---|---|---|
| Personal Identifiers | To process opening of your deposit account with TDB. To communicate with you regarding the opening of your account, sending of account balance/statement of account. | To engage in a deposit contract with you (e.g. Terms & Conditions). |
| Personal Identifiers | To provide you with news and updated information regarding the products. | Where required under applicable law, we will ask for and rely on your consent. You can withdraw your consent from the processing at any time, but this does not affect the lawfulness of our processing of your Personal Data based on consent before such withdrawal. |
Personal Identifiers Government ID Data Business/Employment Information Cash-In Information Transaction Information Other Information You Provide to Us | To verify your identity, and respond to, handle, process requests regarding your deposit account such as cash-in/cash-out transactions, and for customer service purposes. | To provide you with the agreed services from Tonik (e.g. Terms & Conditions). |
Personal Identifiers Cash-In Information Transaction Information | To process your Personal Data in accordance with the regulatory requirements of Anti-Money Laundering Council and Bangko Sentral ng Pilipinas. | To comply with our legal obligations. |
Personal Identifiers Government ID Data Transaction Information Business/Employment Information | To access, preserve or disclose Personal Data in response to a request from a regulator, law enforcement, court or others. | |
Information from cookies or other technologies Behaviour and preferences data | To improve users’ experience with TDB by providing content recommendations, user suggestions and relevant notification. To operate, maintain, improve, provide, create, and develop all of the features, functionality, and Services (new and existing) found on TDB. | To pursue our legitimate interests to make your experience of our products and Services efficient and effective. |
Information from cookies or other technologies Behaviour and preferences data | To provide and increase safety and security for our websites, products, software, or applications and Services (by preventing, detecting and implementing proper measures against spam, scammers, abuse, misuses of our Services and violation of our rules). | To pursue our legitimate interests to ensure our products and Services are safe and secure and to ensure they are used in accordance with our applicable Terms. |
| Behaviour and preferences data | To investigate and address incidents and violations of Terms. To detect, prevent and combat unlawful behavior. | To pursue our legitimate interests to ensure our products and Services are safe and secure and to ensure they are used in accordance with our applicable Terms. |
Information from cookies or other technologies Behaviour and preferences data Transaction Information Business/Employment Information | Data analysis, identifying usage trends, determining the effectiveness of our product. | To pursue our legitimate interests to inform and improve our products and Services. |
HOW WE PROCESS YOUR INFORMATION WHEN YOU AVAIL OUR LOAN PRODUCTS
Here in Tonik, we offer a wide array of loan products depending on the needs of our consumer and their preferred credit facility in accordance with the Bank’s mission of financial inclusion, these are:
Shop Installment Loan (SIL) - an unsecured loan product of TDB. This unsecured loan must be used specifically for the purchase of goods (refrigerator, washing machine, television, etc.), furniture and other consumer goods or products. For the said product, the Bank has engaged a third party, namely Purple Hub Inc., who act as Tonik’s partner in the promotion and the acceptance of SIL applications on various retail stores partnered with Tonik. For SIL, the Government ID of applicants are requested by Promoters from Purple Hub for verification purposes only to check the legitimacy of the document and eligibility of the customer on the loan, but in no way is the document being recorded or retained by Purple Hub.
Cash Loan - an unsecured multi-purpose loan product of TDB that aims to make available fast and affordable credit to individuals starting from PHP 5,000.00 up to PHP 20,000.00.
Upsell Loan - an unsecured multi-purpose loan product of TDB that aims to make available fast and affordable credit to individuals with loan history from the TDB, starting from PHP 5,000.00 up to PHP 250,000.00.
Big Loan - a secured loan product of TDB that enables a customer as a homeowner to borrow money for any purpose by leveraging the equity of their home.
USE OF YOUR INFORMATION BY TONIK
USE BY TONIK DIGITAL BANK, INC
| Type/s of Personal Data | Purpose/s of Processing | Legal Basis for Processing |
|---|---|---|
| Personal Identifiers | To process loan application, payment or crediting of loan request. To communicate with you regarding the status of your loan applications, payment reminders, collection purposes, or for customer service purposes. | To engage to a loan contract with you (e.g. Terms & Conditions, Amortization Schedule, and other loan documents). |
| Personal Identifiers | To provide you with news and updated information regarding the products. | Where required under applicable law, we will ask for and rely on your consent. You can withdraw your consent from the processing at any time, but this does not affect the lawfulness of our processing of your Personal Data based on consent before such withdrawal. |
Personal Identifiers Government ID Data Business/Employment Information Payment Information Transaction Information Other Information You Provide to Us | To verify your identity and respond to, handle, process requests of loan applications, and decide on its approval or denial. | To engage to a loan contract with you (e.g. Terms & Conditions, Amortization Schedule, and other loan documents). |
Personal Identifiers Payment Information Transaction Information | To process your Personal Data in accordance with the regulatory requirements of Anti-Money Laundering Council and Bangko Sentral ng Pilipinas. | To comply with our legal obligations. |
Personal Identifiers Government ID Data Transaction Information Business/Employment Information | To access, preserve or disclose Personal Data in response to a request from a regulator, law enforcement, court or others. | |
Information from cookies or other technologies Behaviour and preferences data | To improve users’ experience with TDB by providing content recommendations, user suggestions and relevant notification. To operate, maintain, improve, provide, create, and develop all of the features, functionality, and Services (new and existing) found on TDB. | To pursue our legitimate interests to make your experience of our products and Services efficient and effective. |
Information from cookies or other technologies Behaviour and preferences data | To provide and increase safety and security for our websites, products, software, or applications and Services (by preventing, detecting and implementing proper measures against spam, scammers, abuse, misuses of our Services and violation of our rules). | To pursue our legitimate interests to ensure our products and Services are safe and secure and to ensure they are used in accordance with our applicable Terms. |
| Behaviour and preferences data | To investigate and address incidents and violations of Terms. To detect, prevent and combat unlawful behavior. | To pursue our legitimate interests to ensure our products and Services are safe and secure and to ensure they are used in accordance with our applicable Terms. |
Information from cookies or other technologies Behaviour and preferences data Transaction Information Business/Employment Information | Data analysis, identifying usage trends, determining the effectiveness of our product. | To pursue our legitimate interests to inform and improve our products and Services. |
USE BY PURPLE HUB, INC. (FOR SHOP INSTALLMENT LOANS ONLY)
| Type/s of Personal Data | Purpose/s of Processing | Legal Basis for Processing |
|---|---|---|
| Government ID Data | To verify your identity and respond to, handle, process requests of loan applications, and decide on its approval or denial. | To fulfill Purple Hub’s legal obligations with Tonik Digital Bank based on the Promoter’s Agreement between Purple Hub and TDB. |
4. WHO DO WE SHARE YOUR INFORMATION WITH
Sharing with third parties - During its operations, Tonik may share certain information with third parties, including merchant-partners, banks, financial institutions, service providers, credit bureaus, insurers, and vendors, for legitimate business purposes such as payment processing, fraud prevention, and other technical services. Tonik ensures that only necessary information is shared and that these third parties adhere to appropriate security measures.
NOTE: On SIL Loans, Purple Hub, Inc., does not share any of your information with any third person as it does not record or collect any information from the client except Government IDs as explained in Item No. 3 of this Notice.
Sharing for legal and regulatory compliance - Tonik may also disclose information to comply with legal or regulatory obligations, including requirements from government agencies, courts, or other authorities. This may include sharing data with law enforcement, credit reference agencies, or when required by law.
Sharing with business partners and affiliates - Tonik may share information with affiliates, research partners, or entities involved in business transactions such as loan assignments or guarantees, as well as with third-party providers of loyalty or rewards programs.
Personal Data processed for Tonik may involve cross-border data transfers. We ensure such transfers are conducted in accordance with data protection laws and our obligations as a controller. Tonik will ensure that the methods of sharing your Personal Data are following requirements based on applicable local and foreign laws and regulations.
5. YOUR CONTROLS AND CHOICES
As a Data Subject, you have the following rights regarding your Personal Data:
Right to correct/rectify and access/have a copy of your Personal Data, to object, withdraw, suspend/block, remove or delete your Personal Data
If you wish to exercise your data protection rights concerning information processed by Tonik, please contact us by sending an email to the TDB’s DPO at dataprivacy@tonikbank.com. Provided, however, that the enforcement of your right to object, withdraw, suspend/block, deletion of Personal data is not necessary for compliance with a regulatory obligation, and it is not necessary to establish, exercise or defend legal claims.
Right to file a complaint
We recognize your right to file a complaint with the NPC (via: complaints@privacy.gov.ph), should any of the DPA provisions regarding security of your Personal Data, including your rights as Data Subjects, are violated.
Right to be indemnified under the DPA
Tonik further recognizes your right to receive indemnification for any damage sustained due to such inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of Personal Data. For further knowledge and reference about your rights as Data Subjects and how can you exercise them, you may visit NPC’s official website at https://privacy.gov.ph/
6. DATA RETENTION AND DISPOSAL
The Bank will generally retain your personal data for a period of five (5) years from the date of your last transaction or separation, whichever occurs later. Your information will be maintained in accordance with Tonik’s data retention policies and applicable laws or regulations. We will retain your personal data as long as necessary to fulfill legal, regulatory, and business purposes, as outlined in the Bank’s data privacy policies.
7. DATA SECURITY AND INTEGRITY
Your personal data is stored in secure databases managed by the Bank’s IT Department. The Bank employs physical, technical, and organizational security measures to protect the confidentiality of your information. These measures are regularly reviewed and updated to keep pace with technological advancements and regulatory requirements.
8. CHANGES TO THIS PRIVACY POLICY
We may update this privacy policy occasionally to align with technological advancements, industry standards, or regulatory obligations. If the changes are significant, we will notify you either by email, a notice on our website or apps, or other appropriate methods. If required by law, we will also get your consent.
9. CONTACT US
To learn more about Tonik’s data privacy policies and how we use your Personal Data, you can chat with us through your Application, or by sending us an email at dataprivacy@tonikbank.com or call us at the customer care hotline +63 2 5322 2645.
To access Tonik’s full privacy policy as provided in its Data Privacy Statement, you may visit https://tonikbank.com/data-privacy-statement.
10. CONSENT
By clicking the tick box on your application journey as to the processing of your information, you accept the terms of this Data Privacy policy and consent to our collection, use, disclosure and retention of your information on terms and conditions as described in this Data Privacy Notice.