Effective Date: August 5, 2026
Last Updated: August 5, 2026
ePHON respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how ePHON, operated by [LEGAL COMPANY NAME] (“ePHON,” “we,” “us,” or “our”), collects, uses, stores, shares, and protects your information when you use the ePHON mobile application, website, customer portal, and related products and services collectively referred to as the “Services.”
This Privacy Policy applies to customers, prospective buyers, borrowers, policyholders, vehicle owners, dealers, agents, and other individuals who use or interact with our Services.
ePHON is a digital platform that may allow users to:
Browse available vehicles and dealer listings;
Contact dealers and submit vehicle inquiries;
Request quotations;
Apply for vehicle loans or financing;
Submit insurance quotation requests;
Upload application requirements;
Receive application, quotation, payment, policy, or account updates; and
Access other vehicle-related products and services.
For purposes of the Philippine Data Privacy Act of 2012, the personal information controller responsible for your information is:
The information we collect depends on the features and Services you use.
We may collect:
Full name;
Email address;
Mobile or telephone number;
Username and account identifier;
Password or encrypted authentication information;
One-time password or OTP verification records;
Mailing or residential address;
Profile information; and
Communication preferences.
We do not store your password in readable plain text where password-based authentication is used.
When you browse, inquire about, insure, finance, sell, or purchase a vehicle, we may collect:
Vehicle make, model, variant, body type, and year model;
Transmission and fuel type;
Vehicle identification or reference details;
Vehicle price and estimated market value;
Mileage, condition, and usage classification;
Vehicle photographs;
Registration details;
Official Receipt and Certificate of Registration or OR/CR;
Existing financing or insurance information;
Requested loan amount and loan term; and
Other vehicle-related information you submit.
When you apply for a loan or financing product, we may collect:
Selected loan type;
Requested loan amount;
Vehicle price;
Preferred loan term;
Employment, business, or income information;
Financial capacity information;
Supporting financial documents;
Government-issued identification;
Proof of address;
Proof of income;
Bank or payment-related information;
Application status and transaction history; and
Other requirements requested by a lender or financing partner.
Some of this information may qualify as sensitive personal information under applicable law. We process such information only when necessary and when a lawful basis exists.
When you request an insurance quotation, purchase insurance, renew a policy, or submit a claim-related inquiry, we may collect:
Name and contact details;
Vehicle details;
Vehicle use or risk classification;
Vehicle market value;
Existing insurance expiration date;
Selected insurance coverage;
Quotation reference numbers;
Policy and renewal information;
Payment status;
Claims-related information; and
Documents required by participating insurance providers.
You may be asked to upload files such as:
Government-issued identification;
OR/CR documents;
Proof of income;
Proof of billing or address;
Vehicle photographs;
Loan application documents;
Insurance documents; and
PDF, JPG, JPEG, or PNG files required for an application.
You should upload only documents that are relevant to your application and that you are authorized to provide.
When payment functionality is available, payments may be processed through an authorized third-party payment gateway.
The payment provider may collect payment card, bank, electronic wallet, billing, or authentication information. ePHON may receive transaction references, payment status, amount, date, and other confirmation details.
Unless expressly stated during the payment process, ePHON does not directly store complete payment card numbers or security codes.
We may collect information contained in:
Vehicle inquiries;
Messages sent to dealers;
Emails and support requests;
Telephone or chat communications;
Feedback, complaints, and survey responses; and
Records of your interactions with our personnel and participating partners.
Telephone or online conversations will be recorded only when permitted by law and after an appropriate notice has been provided.
When you use ePHON, we or our authorized service providers may automatically collect:
Device type and operating system;
App version;
Browser type;
Internet Protocol or IP address;
Device or application identifiers;
Login dates and timestamps;
Session and authentication records;
Pages, listings, buttons, and features accessed;
Error, diagnostic, performance, and crash information;
Security and fraud-prevention logs;
Push notification token; and
General usage information.
This information helps us operate, secure, troubleshoot, and improve the Services.
Depending on the features you use, ePHON may request access to certain device functions.
These permissions may be used to allow you to photograph, select, or upload identification documents, OR/CR files, proof of income, vehicle photographs, and other application requirements.
ePHON does not access your unrelated photos or files beyond the content you select or authorize, subject to the permissions and technical behavior of your device.
Notification permission may be used to send account alerts, OTP-related notices, inquiry responses, application updates, quotation updates, reminders, and important service announcements.
If a feature requires your location, ePHON will provide an appropriate disclosure and request permission before accessing location information. Location access should be limited to the level reasonably required by the feature.
You may manage app permissions through your device settings. Disabling a permission may prevent certain features from working properly.
We may use your information to:
Create, verify, secure, and maintain your account;
Authenticate users and send OTP verification codes;
Display vehicles and personalized account information;
Process vehicle inquiries and connect you with dealers;
Prepare and manage insurance quotations;
Receive and process loan or financing applications;
Forward applications to selected lenders, insurers, dealers, or service providers;
Verify submitted information and documents;
Process payments and confirm transactions;
Provide customer support;
Send application, quotation, renewal, policy, payment, or inquiry updates;
Prevent fraud, unauthorized access, abuse, and security incidents;
Maintain records and transaction history;
Improve the performance, design, reliability, and features of the Services;
Generate aggregated or de-identified statistics;
Comply with legal, regulatory, contractual, accounting, and reporting obligations;
Establish, exercise, or defend legal claims; and
Send promotional communications when you have consented or when otherwise permitted by law.
We will not use your personal data for a purpose that is incompatible with the purpose disclosed when it was collected unless we obtain additional consent or another lawful basis applies.
Depending on the circumstances, we process personal data based on one or more of the following:
Your consent;
The performance of a contract or steps requested before entering into a contract;
Compliance with a legal or regulatory obligation;
Protection of lawful rights and interests;
Our legitimate business interests, provided your rights and freedoms are not improperly affected;
The establishment, exercise, or defense of legal claims; or
Other grounds permitted under the Philippine Data Privacy Act and applicable laws.
Where processing is based on consent, you may withdraw your consent. Withdrawal will not affect processing that was lawful before the withdrawal and may limit our ability to continue providing certain Services.
We may disclose relevant information to the following recipients when necessary.
Information from a vehicle inquiry may be shared with the dealer, seller, branch, or representative responsible for the vehicle.
Loan application information and supporting documents may be shared with banks, financing companies, loan providers, credit evaluators, and authorized representatives selected for or involved in processing your application.
These organizations may conduct their own evaluation and may process your data under their respective privacy policies.
Insurance quotation, application, renewal, policy, payment, and claims-related information may be shared with insurance companies, insurance intermediaries, adjusters, and authorized service providers.
We may use trusted providers for:
Cloud hosting and data storage;
Email and SMS delivery;
OTP verification;
Payment processing;
Customer support;
Analytics and crash reporting;
Cybersecurity and fraud prevention;
Document management;
Database and software maintenance; and
Professional, accounting, legal, or compliance services.
These providers are authorized to process personal data only for the relevant service and are expected to protect it appropriately.
We may disclose information when required by law, regulation, court order, subpoena, lawful government request, or when reasonably necessary to protect users, prevent fraud, investigate misconduct, or defend legal rights.
Information may be transferred as part of a merger, acquisition, reorganization, financing, sale of assets, or similar business transaction, subject to applicable privacy and confidentiality requirements.
ePHON does not sell or rent personal data to third parties for monetary compensation.
We may share information with dealers, lenders, insurers, payment processors, and other partners when necessary to provide a product or service requested by you. Such sharing is not treated by us as a sale of personal data.
With your consent or where legally permitted, we may send information about:
Vehicle listings;
Loan and financing products;
Insurance products;
Promotions;
Renewals;
New ePHON services; and
Partner offers relevant to your request.
You may unsubscribe by using the link or instructions included in the communication or by contacting us.
Service-related communications, security notices, OTP messages, transaction confirmations, and important account notices are not considered promotional and may still be sent when necessary.
Your information may be stored on ePHON’s systems or on servers operated by authorized cloud and technology providers.
Some providers may process or store data outside the Philippines. When personal data is transferred internationally, we take reasonable steps to ensure that appropriate contractual, organizational, and technical safeguards are in place and that recipients provide a comparable level of protection.
We retain personal data only for as long as reasonably necessary to:
Provide the Services;
Process and complete applications or transactions;
Maintain account and transaction records;
Comply with legal, tax, accounting, insurance, lending, and regulatory obligations;
Resolve complaints and disputes;
Prevent fraud and security incidents; and
Establish, exercise, or defend legal claims.
Retention periods may differ depending on the type of information and the product involved.
When information is no longer required, we will securely delete, anonymize, destroy, or restrict access to it, subject to applicable legal and technical limitations.
Deletion of an account may not result in the immediate deletion of information that we are legally required or reasonably permitted to retain. Information retained for legal, fraud-prevention, dispute, or regulatory purposes will not be used for unrelated marketing.
We use reasonable and appropriate organizational, physical, and technical safeguards designed to protect personal data. These may include:
Access controls and account authentication;
Encryption during transmission;
Secure storage and controlled document access;
Password protection and OTP verification;
Activity and security logging;
Restricted employee and service-provider access;
Backup and recovery procedures;
Security monitoring;
Vendor security requirements; and
Procedures for handling suspected data breaches.
No electronic transmission or storage system is completely secure. You are responsible for protecting your account credentials, device access, OTP codes, and passwords.
Do not share OTP codes or passwords with anyone claiming to represent ePHON.
Subject to the conditions and limitations provided by law, you may exercise the following rights:
Right to be informed: To know how and why your personal data is processed.
Right to access: To request access to personal data we hold about you.
Right to object: To object to certain processing, including processing based on consent or for direct marketing.
Right to rectify: To request correction of inaccurate or incomplete information.
Right to erasure or blocking: To request the deletion, blocking, withdrawal, or removal of personal data when legally appropriate.
Right to data portability: To receive eligible personal data in a structured and commonly used electronic format.
Right to damages: To seek compensation when authorized by law for harm caused by unlawful or unauthorized processing.
Right to file a complaint: To submit a complaint to the National Privacy Commission.
To exercise a privacy right, contact us using the details in Section 20. We may request reasonable information to verify your identity and protect your data from unauthorized requests.
Some requests may be limited or denied when continued processing or retention is required or permitted by law.
You may request deletion of your ePHON account and associated personal data using either of the following methods:
In the ePHON app:
[INSERT EXACT PATH, FOR EXAMPLE: Profile → Settings → Account → Delete Account]
Online account-deletion page:
[INSERT PUBLIC ACCOUNT-DELETION PAGE URL]
By email:
Send a request to [PRIVACY OR SUPPORT EMAIL] with the subject line “ePHON Account Deletion Request.”
Your request should include the name, email address, or mobile number associated with your account. We may send an OTP or request another reasonable form of verification before processing the request.
After verification, we will delete or anonymize the account and associated personal data unless certain information must be retained for:
Active or pending applications;
Completed financial or insurance transactions;
Legal or regulatory compliance;
Fraud prevention and security;
Accounting, audit, or reporting requirements;
Disputes or legal claims; or
Other lawful and disclosed purposes.
Where information was shared with an independent dealer, lender, insurer, or payment provider, you may also need to contact that organization regarding information it controls under its own systems and privacy policy.
Users who submitted an inquiry or application without creating an account may also request deletion of eligible information through the email address or deletion page above.
You are responsible for providing accurate, complete, and current information.
You may update certain account information through the app or request correction by contacting us. We may require supporting information when a correction affects an application, quotation, payment, policy, or legally significant record.
ePHON may use automated processes to validate form entries, match vehicle information, calculate estimates, detect duplicate applications, prevent fraud, or route applications to an appropriate provider.
Unless clearly stated otherwise, any quotation, estimate, eligibility indication, or calculation shown through ePHON is not a guarantee of approval.
Dealers, lenders, insurers, and other partners may conduct their own evaluation and make independent decisions under their own criteria and privacy practices.
The Services may contain links to dealer websites, lender portals, insurance providers, payment providers, maps, social media services, or other third-party platforms.
We do not control the privacy practices of independent third parties. Information you provide directly to them is governed by their respective privacy notices and terms.
ePHON is not directed to children below 18 years old, and children should not submit loan, financing, insurance, or vehicle-purchase applications through the Services.
If we learn that personal data was submitted by a child without appropriate authorization, we will take reasonable steps to delete or restrict the information, subject to applicable law.
Parents or guardians may contact us regarding information they believe was submitted by a child.
If a personal data breach occurs, we will investigate the incident, take reasonable containment and remediation measures, and provide notifications to affected individuals and the appropriate authorities when required by applicable law.
We may update this Privacy Policy when our Services, business practices, technologies, partnerships, or legal obligations change.
The updated version will be posted in the ePHON app or on our website, together with a revised “Last Updated” date. Where required, we will provide additional notice or obtain consent before materially changing how personal data is processed.
For questions, requests, complaints, corrections, withdrawals of consent, account deletion, or other privacy concerns, contact you may contact us
You may also file a complaint with the National Privacy Commission of the Philippines when you believe your personal data rights have been violated.