The Philippine Stock Exchange, Inc. (“PSE”) and its subsidiaries are committed to respect and protect your personal information and sensitive personal information. The PSE will collect, record, retain, use, store, disclose, modify, process, and share your personal information for purposes set forth below. Personal information refers to any information whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual.

This Privacy Policy applies to circumstances governed and covered by the Data Privacy Act of 2012 (“DPA”). This is designed for compliance with the DPA and its Implementing Rules and Regulations.

What Personal Data We Collect

The PSE will collect, use, store, modify, share, record, disclose, and process your personal information consisting of your full name, email address, name of your employer/company, role or designation, password, username, system access logs, and audit logs such as log-in timestamps and user actions.

How We Collect and Process Your Personal Data

The PSE will collect, use, retain, record, store, modify, disclose, share, and process your personal information when you register or create a PSE back-office (“Portal”) account, supply the required information, and access or use, in any way, PSE Portal or your PSE Portal account.

Purposes of Our Processing and Sharing of Your Personal Data

The PSE will collect, process, and/or share your personal information for purposes of (a) creating, maintaining, or terminating your PSE Portal account; (b) operation, administration, and maintenance of the PSE Portal which supports the operational and post-trade functions of PSE, among others; (c) user authentication, authorization, and role-based access control; (d) generation of reports and audit logs; (e) compliance with operational and internal control requirements; (f) system security, performance monitoring, and incident investigation; (g) compliance with legal and regulatory obligations and requirements which may be imposed by, but not limited to, the Securities and Exchange Commission, Bureau of Internal Revenue, courts, and other government regulatory and law enforcement agencies, including foreign regulatory and law enforcement bodies; (h) risk assessment, statistical and trend analysis, and planning purposes; (i) documentation; (j) compliance with obligations, requirements, policies, procedures, contracts, measures, technology support or updates, or arrangements for sharing data and information within PSE and its wholly-owned subsidiaries consisting of the (1) Capital Markets and Integrity Corporation which is the independent audit, surveillance, and compliance arm of PSE, (2) Securities Clearing Corporation of the Philippines which is the central securities clearing institution, and (3) Premier Software Enterprises, Inc., the technology arm of PSE; (k) those directly or necessarily related to any of the foregoing; and (l) those to which you give consent.

You Consent to Our Processing and Sharing

By signing up for an account and clicking the “I agree” button, maintaining a PSE Portal account, accessing or using the PSE Portal or your PSE Portal account, you agree and consent to the processing and sharing or disclosure by PSE of your personal information for the purposes set forth above. You also agree and consent to the sharing by PSE of your personal information to regulated market participants as required for operational integration and to PSE’s authorized technology partners and solution providers strictly for system implementation, maintenance, and support purposes, and you consent to their processing of your personal information for the same purposes.

When accessing or using your PSE Portal account outside the Philippines, you acknowledge and agree that your personal information may be transferred to and processed in the Philippines pursuant to legal and regulatory standards for data protection that may be different from your current or home jurisdiction.

You also acknowledge and agree that PSE has put in place appropriate organizational, physical, and technical security measures to protect your personal information. You are also aware that notwithstanding the said privacy protection measures that have been put in place by PSE, there is a risk that your personal information may be subject to unauthorized disclosure, processing or breach. You also agree to hold PSE, its directors, officers, and employees free and harmless from any damage, loss, liability or injury that you may suffer on account of any unauthorized disclosure, processing or breach of your personal information, provided that there is no bad faith or gross negligence on the part of PSE or any of its officers or employees who directly process your personal information.

How We Protect Your Personal Data

We maintain the confidentiality, integrity, and security of your personal information by employing organizational, physical, technological, and procedural safeguards such as by establishing limitations or restriction of access to personal information, document storage and information security policies and protocols, security measures on restricted access to our systems, offices, and premises, stringent selection of third-party data processors, solution providers, and agents, non-disclosure and privacy protection clauses in agreements, non-disclosure agreements (“NDA”), special NDAs, data privacy trainings for our officers and employees, closed circuit television system, security guards on duty 24x7, and technology-based security tools to protect our websites, PSE Portal, PSE applications, information communication technologies, systems, personnel, and data storage. We ensure that our employees are trained to properly handle your personal information and whenever we engage other companies to render services for us, we require them to protect your personal information aligned with our security standards.

How Long Do We Keep Your Personal Information

Your personal information shall be retained for as long as the purposes for which it was collected remains in effect until such time as it is no longer required or necessary to keep your personal information for any other legal, regulatory, or business purposes.

Your Rights as a Data Subject

Under and in accordance with the provisions of the DPA and Section 34, Rule VIII of its Implementing Rules and Regulations, you have the rights to: (1) be informed whether personal information is being or has been processed, and this includes processing through automated decision-making and profiling; (2) require PSE to correct any personal information relating to you as data subject which is inaccurate; (3) object to the processing of your personal information; (4) be indemnified for damages sustained; (5) access your personal information; (6) suspend, withdraw or order the blocking, removal or destruction of your personal information from PSE’s system; (7) data portability; and (8) lodge a complaint with the National Privacy Commission for breach of your rights. You hereby understand and acknowledge that when you exercise your right set out in (6) herein, PSE reserves its right to terminate the services hereunder.

Any request in relation to the exercise of your right or for information regarding this Data Privacy Statement should be addressed to our Data Protection Officer through this email address: [email protected] or this office address: The Philippine Stock Exchange, Inc., 6th to 10th Floors, PSE Tower, 5th Avenue corner 28th Street, Bonifacio Global City, Taguig, Metro Manila 1634, Philippines. For purposes of your request, kindly use the applicable form provided below:

• Request to Access Personal Data
• Request to Correct or Rectify Personal Data
• Request to Erase Personal Data
• Request to Data Portability