Why do we collect your personal data?

To enable us to comply with our corporate policies in relation to data subjects as well as with the requirements under the Data Privacy Act, it is important that we collect, use, store and retain your personal data only as is reasonable and necessary for a declared and specific purpose stated in the pertinent consent forms. In general, we are using your data for any of the following purposes:

• 1. To evaluate and/or fulfill your transaction with us;
• 2. To comply with JMS’s obligations under law and as required by government organizations and/or agencies such as, but not limited to, the following: NPC, BSP, BIR, HDMF or Pag-IBIG, PhilHealth, SSS and so on;
• 3. To comply with legal and regulatory requirements or obligations; and,
• 4. To perform such other processing or disclosure that may be required under law or regulations.

Other uses by nature of our transactions:

In addition, from the general uses mentioned above, we may use your personal information depending on your transactions with us in any of the following means:

A. When you want to become a part of our team [for employment]:

• 1. To consider and evaluate your suitability for employment and, with your permission, inform and consider you for future job opportunities that may be of interest to you;
• 2. To communicate with you about your employment application;
• 3. When hired, to process your data necessary for your employment such as, but not limited to, payroll, benefits application, allowances and refunds processing, tax processing, retirement benefits, and other purposes that demand processing of your personal data (e.g., business travels, anniversaries, social activities, emergencies, and so on);
• 4. When hired, for your performance evaluation and career development including seminars, trainings, workshops, and compliance monitoring,
• 5. When hired, for employee engagement programs to improve employee experience or satisfaction;
• 6. When hired, to process your data necessary to execute business transactions such as preparation and/or approval of business documents and any other functions that are directly related and/or incidental to your job and that will demand processing of your personal data; and,
• 7. Upon separation, to process your data for the exit interview and preparation of final pay.

B. When you are a customer [for retails or corporate customers]:

• 1. For you to remit and accept money remittance;
• 2. For you to schedule a pick-up for delivery and for us to identify and contact you, verify and confirm your request;
• 3. To be able to deliver the shipment to the consignee;
• 4. For you to provide reviews in our products/services;
• 5. To generate statistical insights;
• 6. To conduct research and analysis (through surveys or polls) in order to improve customer experience/satisfaction;
• 7. To respond to specific complaints, inquiries, requests or to provide requested information;
• 8. To provide customer care activities, monitor our quality and security, and provide services timely and efficiently; and,
• 9. To notify and update you (through call, text or email) about our complimentary, commercial and promotional advertisements, loyalty and rewards offers, exclusive invites, discounts, surveys, and other direct marketing that we deemed relevant and beneficial to you based on your preference and interest initially provided to us or made aware of, with which you can opt-out anytime should you prefer not to receive these notifications.

C. When you are a vendor, a potential vendor, or a contractor [for vendors/suppliers or future partners]:

• 1. To contact you when we require your services;
• 2. To carry out due diligence or screening activities (e.g., background investigation) in accordance with legal, regulatory obligations or company policy;
• 3. To contact you when we have concerns regarding the goods or services received;
• 4. To track and measure performance or quality of goods and services received;
• 5. To sustain and strengthen our relationship by having good communication
• 6. To process our payment for the goods/services received; and
• 7. To comply with legal and regulatory obligations.

What type of personal data do we collect?

We collect information to provide you with details and information regarding our product, services, and promotions. We process information also to respond to your enquiries or manage future interactive user function. The common type of data collected by BYAHE from you, generally includes the following:

• 1. Personal information such as full name, home addresses/billing address/shipping address, including photos as proof of delivery e-mail address, employment information, telephone, other personal contact numbers;
• 2. Sensitive personal information such as date of birth, nationality, marital status, gender and education;

You are responsible for ensuring that all data, whether personal information, sensitive personal information or privileged information, you submit to BYAHE is accurate, complete and up-to-date.

How we collect, acquire or generate your data?

We collect data when you:

• 1. Fill-out our forms (e.g., feedback form, resume form, contact form, supplier accreditation form, remittance/encashment form, etc.);
• 2. Disclose your personal information through chat facility, phone calls, emails, SMSs or verbal communication with our authorized representatives; and,
• 3. Through social media services (e.g., Jobstreet, Facebook, Twitter, LinkedIn). We may also collect personal information about you from social media platform, public comments but we will never ask you to supply personal information
• 4. Sign up for our other digital-enabled services like apps, on-stie POS and other digital interfaces that require a digital sign-up process.

Who we share your personal data with?

As a general rule, we do not share your data to third party except in limited circumstances as listed below.
By giving your consent, you authorize BYAHE to disclose your personal data to accredited/affiliated third parties or independent/non-affiliated third parties, whether local or foreign in any of the following circumstances:

• 1. As necessary for the proper execution of processes related to the purposes declared in this Privacy Policy.
• 2. The use or disclosure is reasonably necessary, required or authorized by or under law (such as for criminal investigation, as requested by court of law).

This means we might provide your personal data to the following:

• 1. Our affiliates, subsidiaries, partner companies, organizations, or agencies including their sub-contractors or prospective business partners that act as our service providers and contractors;
• 2. Law enforcement and government agencies;
• 3. All third parties, with which we share this personal data are required to use your personal data in a manner that is consistent with this Privacy Policy.

How we protect your personal data?

We take reasonable steps to ensure that the personal data we collect, use or disclose are accurate, complete, and up-to-date. We strictly enforce this Privacy Policy within BYAHE and we have implemented technological, organizational and physical security measures to protect your personal data from loss, misuse, modification, unauthorized or accidental access or disclosure, alteration or destruction. We put in effect safeguards such as the following:

• 1. We keep and protect your personal data using a secured server behind a firewall, deploying encryption on computing devices and physical security controls.
• 2. We restrict access to your personal data only to qualified and authorized personnel who hold your personal data with strict confidentiality.
• 3. Any personal data that you provide on the website is initially processed and stored by BYAHE. Using a secured connection, only authorized BYAHE personnel can then access and download your personal data from the system.

What if there are changes in our Privacy Policy?

BYAHE may revise this Privacy Policy as the need arises or when dictated by issuances of the National Privacy Commission or any amendment to the Data Privacy Act. Any change to this Privacy Policy shall be duly posted in this website and will take effect immediately. Data subjects are encouraged to periodically check for such updates. Changes shall not be retroactively applied and will not alter how we handle personal data previously collected without obtaining your consent, unless required by law.

How you can access, correct and update the personal data we have about you?

To exercise your rights which include right to access, modify, erase and object to processing your personal data within a reasonable time after such request or should you have any inquiries, feedbacks on this Privacy Policy, and/or complaints to BYAHE or its websites, you may reach us through our “Contact Us” menu in these websites: [email protected], through a written letter or through an email to our Data Protection Officer (DPO).

This Privacy Policy was last amended on May 2024 (Draft Policy Only).