Privacy Policy

1. Who We Are

Estra Financial Consultancy Service, also known as Estra Finance or Estra (referred to herein as "Estra", "we", "us", or "our"), is a loan facilitation business registered in the Philippines under DTI Business Name No. 5980911. Our registered address is Unit 5A, 5th Floor, Hollywood Square, No. 33 West Avenue, Nayong Kanluran, Philippines. We operate at estrafinance.com.ph and act as a Personal Information Controller under RA 10173.

Our Data Protection Officer (DPO) can be reached at:

• Email: pr*****@**************om.ph
• Postal: Estra Financial Consultancy Service, Unit 5A, 5th Floor, Hollywood Square, No. 33 West Avenue, Nayong Kanluran, Philippines

2. What Information We Collect

2.1 Personal Information

• Full name, date of birth, civil status
• Government-issued identification numbers (SSS, TIN, PhilHealth, Pag-IBIG)
• Contact details: email address, mobile number, home address
• Employment information: employer name, position, length of service

2.2 Financial Information

• Monthly income and income sources
• Existing loans and monthly obligations
• Bank account details (as required for loan processing)
• Credit and financial history as declared by you

2.3 Document Data

• Payslips, income tax returns, and employment certificates
• Bank statements
• Land titles, tax declarations, and property documents
• Marriage certificates and other civil documents
• Business documents (for self-employed applicants)

2.4 Platform Usage Data

• Device information, IP address, and browser type
• Pages visited, features used, and session duration
• Referral source and campaign tracking data

3. Why We Collect Your Information

We collect and process your information only for the following specific, declared purposes:

• To facilitate your home loan application and match you with suitable lenders
• To verify your identity and assess your loan eligibility
• To share your application and documents with your selected lender(s) for credit assessment
• To track your application status and communicate updates to you
• To comply with our legal and regulatory obligations
• To improve our platform and services through anonymised analytics
• To communicate with you about your application, account, or platform updates

We will never use your data for purposes not listed above without obtaining your specific, separate consent. Your data will not be sold or used for third-party marketing.

4. Legal Basis for Processing

We process your personal data on the following lawful bases under Section 12 of RA 10173:

• Your express consent, given at the time of application
• Performance of a contract — to fulfill our loan facilitation service to you
• Compliance with a legal obligation — as required by Philippine law
• Legitimate interests — to operate and improve the Platform, in a manner that does not override your rights

5. Who We Share Your Information With

5.1 Partner Lenders

Your application data and supporting documents are shared with lenders you select, which may include BDO, BPI, China Bank, Union Bank, Security Bank, Metro Bank, Maybank, and PNB, as well as other accredited lending institutions on the Platform.

5.2 Service Providers

We may share data with trusted third-party service providers who assist in operating the Platform (e.g., cloud storage, document processing, analytics), subject to strict data processing agreements.

5.3 Referral Partners

If you were referred by a partner, we may share limited status updates with that partner. We will not share your financial documents or detailed personal information with referral partners without your explicit consent.

5.4 Legal and Regulatory Authorities

We may disclose your information to government agencies, courts, or regulators if required by law, court order, or regulatory directive.

We do not sell your personal information to any third party. We do not share your data with advertisers.

6. Data Retention

• Active application data: duration of application process plus 5 years after closure
• Approved loan records: 10 years, in compliance with financial record-keeping requirements
• Declined or withdrawn applications: 3 years
• Platform usage data: 2 years

After the applicable retention period, your data will be securely deleted or anonymised.

7. Your Rights Under the Data Privacy Act

As a data subject under RA 10173, you have the following rights:

• Right to be Informed — the right to know how your data is collected and used
• Right to Access — request a copy of your personal data held by us
• Right to Rectification — correct inaccurate or outdated data
• Right to Erasure — request deletion of your data, subject to legal retention requirements
• Right to Object — object to processing in certain circumstances
• Right to Data Portability — request your data in a structured, machine-readable format
• Right to Withdraw Consent — withdraw consent at any time, without affecting prior lawful processing

To exercise any of these rights, contact our DPO at pr*****@**************om.ph. We will respond within 30 days.

8. Data Security

Estra implements appropriate technical and organisational security measures to protect your personal information, including:

• Encrypted data transmission (SSL/TLS)
• Access controls and role-based permissions for staff
• Secure document storage with audit logging
• Regular security assessments

In the event of a personal data breach likely to result in harm, we will notify the National Privacy Commission (NPC) and affected individuals within 72 hours, as required by RA 10173.

9. Cookies and Tracking

The Platform uses cookies to maintain your session, analyse usage, and support referral attribution. You may manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.

10. Children's Privacy

The Platform is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware of such data, we will delete it promptly.

11. Complaints

If you believe your privacy rights have been violated, you may file a complaint with:

National Privacy Commission (NPC)
Website: www.privacy.gov.ph
Email: co********@*********ov.ph

We encourage you to contact us first at pr*****@**************om.ph so we may address your concern directly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or Platform notification. Continued use of the Platform after the effective date constitutes acceptance of the revised policy.

13. Contact

Data Protection Officer — Estra Financial Consultancy Service (Estra Finance)
Unit 5A, 5th Floor, Hollywood Square, No. 33 West Avenue, Nayong Kanluran, Philippines
Email: pr*****@**************om.ph
Website: estrafinance.com.ph