Privacy Policy
SEC Registration No. CS201912321 | Certificate of Authority No. 3041
Effective Date: March 24, 2026
Bee PH ("we", "us", or "our") is a lending company duly registered with and regulated by the Securities and Exchange Commission (SEC) of the Philippines. We are committed to protecting your privacy in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as the guidelines issued by the National Privacy Commission (NPC).
This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the Bee PH mobile application and services.
1. Information We Collect
Personal Information
- Full name, date of birth, and gender
- Contact information (mobile number, email address)
- Government-issued ID details (for identity verification under KYC requirements)
- Employment and income information
- Bank account details for loan disbursement and repayment
- Emergency contact information (selected by you through the device contact picker)
Financial Information
- Loan application details
- Credit history and credit score data
- Transaction and repayment history
Device Information
- Device type, model, and operating system
- Unique device identifiers
- IP address and network information
Usage Data
- App usage patterns and preferences
- Transaction history within the app
- Communication records with our support team
Information We Do NOT Collect
- Social media account data
- Browsing history outside the Bee PH app
- Contents of your text messages or call logs
- Your photos, videos, or media files
2. App Permissions
Bee PH requests only the minimum permissions necessary for our lending services:
Camera
Used exclusively for Know-Your-Customer (KYC) identity verification, such as capturing your government-issued ID and taking a selfie for identity matching. Camera access is activated only during the verification process and is not left running in the background.
Location
Used for loan assessment, fraud prevention, and regulatory compliance. Location data helps us verify your eligibility and detect suspicious activity.
Contact Picker
Bee PH uses your device's built-in contact picker to let you select emergency contacts or character references. This is a client-side interaction only — we do not access, upload, or store your contact list on our servers. Bee PH does not harvest, copy, or transmit your contacts. Only the specific contacts you select are submitted as part of your loan application.
This approach complies with NPC Circular No. 2022-02 and Google Play's Personal Loan App policies, which prohibit lending apps from accessing users' contact lists.
3. How We Use Your Information
We process your personal information based on the following legal grounds:
| Purpose | Legal Basis |
|---|---|
| Process and evaluate loan applications | Contractual necessity |
| Verify your identity (KYC) and creditworthiness | Legal obligation |
| Disburse approved loans and process repayments | Contractual necessity |
| Credit scoring and risk assessment | Legitimate interest and consent |
| Communicate about your account and services | Contractual necessity |
| Comply with legal and regulatory requirements (SEC, BSP, AMLC, NPC) | Legal obligation |
| Prevent fraud and ensure security | Legitimate interest |
| Improve our products and services | Legitimate interest |
| Report to the Credit Information Corporation (CIC) | Legal obligation under RA 9510 |
4. Automated Decision-Making and Credit Scoring
Bee PH uses automated credit scoring systems to evaluate loan applications. These systems process your personal information, financial history, device data, and repayment behavior to generate a credit score and lending decision.
Your rights regarding automated decision-making:
- Right to be informed: You have the right to know the logic involved in the automated processing that significantly affects you.
- Right to contest: You may contest any automated decision by contacting our Data Protection Officer.
- Right to human review: You may request that a qualified person review any automated lending decision.
This disclosure is made in compliance with NPC Circular No. 20-01 (Guidelines on the Processing of Personal Data for Loan-Related Transactions).
5. Data Sharing
We may share your personal information with the following parties and for the following purposes:
- Credit Information Corporation (CIC): We are required by law (Republic Act No. 9510) to submit and access credit information through the CIC for credit assessment purposes.
- Payment partners: To process loan disbursements and repayments through authorized financial channels.
- Debt collection agencies: When necessary, we engage SEC-authorized third-party collection agencies. Bee PH remains fully responsible for the conduct of these agencies in accordance with SEC Memorandum Circular No. 18, Series of 2019.
- Regulatory authorities: We share information with the SEC, NPC, Bangko Sentral ng Pilipinas (BSP), and Anti-Money Laundering Council (AMLC) as required by law.
- Cloud infrastructure provider: Our data is hosted on Amazon Web Services (AWS) under a data processing agreement with appropriate security safeguards (see Section 6).
- Service providers: Third-party service providers who assist in our operations, subject to strict confidentiality agreements and data processing agreements.
We do not sell your personal information to third parties.
6. Cross-Border Data Transfer
Your personal data may be stored and processed on cloud infrastructure provided by Amazon Web Services (AWS), which may involve servers located outside the Philippines. We ensure the following safeguards are in place:
- Encryption of data in transit (TLS) and at rest (AES-256)
- Strict access controls and authentication mechanisms
- Contractual data processing agreements with AWS
- Compliance with the cross-border data transfer requirements of RA 10173
7. Data Retention
We retain your personal information for the following specific periods:
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Active loan records | Duration of relationship + 5 years | AMLA and Lending Company Regulation Act |
| KYC documents (government IDs, selfies) | Minimum 5 years after account closure | BSP regulations |
| Transaction records | 5 years | Anti-Money Laundering Act |
| Contact and support records | 2 years after resolution | Legitimate interest |
| Account deletion requests | Processed within 30 days | Apple/Google store requirements |
Data that is no longer required for any legal, regulatory, or business purpose is securely deleted or anonymized.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit and at rest
- Secure server infrastructure with regular patching
- Role-based access controls and multi-factor authentication
- Regular security audits and vulnerability assessments
Breach Notification: In the event of a personal data breach that is likely to affect your rights and freedoms, we will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach. Affected data subjects will be notified within a reasonable period, in accordance with NPC guidelines.
9. Your Rights Under the Data Privacy Act of 2012
Under Republic Act No. 10173, you have the following rights:
- Right to be informed — to be informed of the collection and processing of your personal data
- Right to access — to obtain a copy of your personal information held by us
- Right to correction — to have inaccurate or incomplete data corrected
- Right to erasure or blocking — to suspend, withdraw, or order the blocking, removal, or destruction of your personal data under certain circumstances
- Right to object — to object to the processing of your personal information
- Right to data portability — to receive your personal data in a structured, commonly used, and machine-readable format
- Right to file a complaint — to file a complaint with the National Privacy Commission if you believe your data privacy rights have been violated
- Right to damages — to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data
To exercise any of these rights, please contact our Data Protection Officer at info@cashb.ph.
10. Account and Data Deletion
You have the right to request the deletion of your account and personal data at any time. To submit a deletion request, visit our dedicated Account Deletion page.
What happens when you request deletion:
- Your request will be processed within thirty (30) days.
- All personal data not subject to legal retention requirements will be permanently deleted.
- Data that we are legally required to retain (such as loan records, KYC documents, and transaction history per the retention periods in Section 7) will be retained for the required period and then deleted.
11. Children's Privacy
Bee PH services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly.
12. Cookies and Tracking
Our website (cashb.ph) may use cookies and similar technologies to:
- Enhance your browsing experience
- Analyze website usage through Google Analytics
- Remember your preferences
You can manage cookie preferences through our cookie consent banner or your browser settings.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes through the Bee PH app or our website. The updated effective date will be posted at the top of this policy.
14. Contact Us
For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
- Data Protection Officer: info@cashb.ph
- Phone: +63 912 265 4029
To file a complaint regarding data privacy, you may also contact the National Privacy Commission:
- Website: https://privacy.gov.ph
- Email: complaints@privacy.gov.ph