[PLACEHOLDER] Patakaran sa privacy

[PLACEHOLDER] Pansamantalang legal at impormasyong teksto. Inihahanda pa ni Leo ang pinal na bersiyong Filipino.

Last updated: November 4, 2026

This policy explains, in plain English, what personal data utang.ph collects, why, who we share it with, how long we keep it and what your rights are. We follow the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

1. Who we are

utang.ph ("we", "us") is an independent loan comparison and information website for people in the Philippines, owned and operated by Dominet BV, which is based in Amsterdam, the Netherlands. We are the personal information controller for data collected on this website. We are not a lender: we don't grant loans, make credit decisions or collect payments.

To reach us or our Data Protection Officer about anything in this policy, use our contact form and choose the topic "Privacy request". We don't publish an email address.

2. What we collect

Shortlist / lead form: your name, email, mobile number, loan amount, purpose, income range and city (optional), plus the page you were on and campaign (UTM) tags.
Loan matcher: your answers (amount range, purpose, how fast you need the money, income type, first-time borrower). These stay in your browser and the page address unless you ask us to email you your matches. Then we store your email, your answers and the lenders shown.
Contact form: your name, email, topic and message.
Clicks to lenders: when you click a link to a partner, we record which partner, the page and button you clicked from, the time, campaign tags, your browser type and approximate country.
Google ad click IDs: when you arrive from a Google ad, Google adds a click ID (gclid, gbraid or wbraid) to the link. Your browser keeps it for that visit, in session storage for that tab rather than in a cookie, and clears it when you close the tab. If you click a link to a lender, we store the click ID with our record of that click and pass it to the affiliate network (Involve Asia for Finbro and Finmerkado, Leadgid for MoneyCat), so the network can report whether the click led to an application. This lets us measure our ads. We keep it as long as the click record (see section 6).
Analytics cookies (only if you accept): Google Analytics 4 collects pages viewed, device and browser type, approximate location and how you use the site. Before you accept, or if you reject, Google Analytics sets no cookies: it only sends cookieless, anonymous measurement pings (for example that a page was viewed, plus technical details such as browser type) with no cookie ID, which are not linked to you or to your other visits. See our Cookie Policy.

Since 4 November 2026 we no longer store IP addresses, raw or hashed. Lead records created before that date may include a one-way hash of the IP address; we do not add new ones, and these older records are kept only until they are deleted.

Since that date, no IP address is stored or logged by us, raw or hashed. The only exception to this is our staff and admin sign-in page, where after repeated failed sign-in attempts, further tries are blocked for up to 30 minutes, and this never applies to ordinary visitors, clicks, or forms. We never store the IP address itself, only a salted one-way hash of it, which is never written to logs, and the records are deleted within 2 days. Outbound partner clicks and lead or form submissions are recorded without IP data, with details such as the partner, the page and the time. We filter bots using other signals.

We do not ask for government ID numbers, bank or card details, passwords or OTPs. Please don't type them into any of our forms. We don't knowingly collect sensitive personal information as defined in RA 10173.

3. Why we use it (purposes and legal basis)

To do what you asked: show you matching lenders, send you the matches you requested, reply to your message, or (if you submit the shortlist form and tick the consent box) connect you with partners. Basis: your consent, and steps you asked us to take.
To track referrals and get paid: partners pay us a commission for some referrals, so we record clicks to reconcile them. Basis: our legitimate interests.
To improve the site and keep it safe: measuring which pages help people (analytics cookies only with your consent; before that, only cookieless, anonymous pings), preventing spam, fraud and abuse. Basis: consent (analytics) and legitimate interests (security).
To meet legal obligations: for example, responding to lawful requests from authorities.

We do not sell your personal data, and we don't make automated decisions about you that have legal effects.

4. Who we share it with

Partner lenders and loan platforms, only when you act. Clicking "Apply" or a lender link takes you to that lender's site; anything you enter there is collected by the lender under its own privacy policy. If you submit our shortlist form and tick the consent box, we may pass your form details to the partner(s) relevant to your request so they can contact you. We never share your data with lenders without one of these actions.
Affiliate networks (such as Involve Asia and Leadgid) receive a referral code with your click so commissions can be attributed. This code doesn't contain your name, email or phone number.
Shared click database: click data goes to a shared click database run by Dominet BV, without IP data.
Service providers that host and run the site for us under contract: Vercel (website hosting), Neon (database, including contact-form messages) and Google (Analytics: cookieless pings before consent, cookies only with your consent). They may only use the data to provide their service to us.
Authorities, where required by law or to protect rights and safety.

5. Transfers outside the Philippines

Our operator is based in the Netherlands and our service providers store data on servers that may be outside the Philippines (our website runs on servers in the United States and our database is in Singapore). We remain responsible for your data under RA 10173 and use providers that apply reasonable security measures.

6. How long we keep it

Shortlist form and matcher email requests: up to 12 months after you submit, unless you ask us to delete them sooner.
Contact messages: up to 24 months, so we can follow up on corrections and privacy requests.
Click records: up to 24 months, to reconcile commissions with partners.
Google Analytics data: per our Google Analytics retention setting (up to 14 months).

After that we delete or anonymise the data, unless the law requires us to keep it longer.

7. How we protect it

The site is served only over HTTPS, the database is access-controlled and encrypted in transit, and internal reports are password protected. No system is 100% secure; if a personal data breach is likely to harm you, we will notify the NPC and affected people as required by law.

8. Your rights as a data subject

Under the Data Privacy Act you have the right to:

be informed about how your data is processed (this policy);
access the personal data we hold about you;
correct inaccurate or incomplete data;
object to processing, and withdraw consent at any time (for cookies, use "Cookie settings" in the footer);
erasure or blocking of your data;
data portability: get a copy in a common electronic format;
damages if you are harmed by inaccurate, unlawfully obtained or misused data; and
file a complaint with the National Privacy Commission (privacy.gov.ph (opens in new tab)).

To use any of these rights, send a request through our contact form (topic: Privacy request). Tell us the email or mobile number you used so we can find your records. We may ask you to confirm your identity, and we aim to respond within 15 working days. If a partner lender has your data because you applied with them, please also contact that lender directly, they are a separate controller.

9. Children

This site is for adults (18 and over). We don't knowingly collect data from minors; if you think we have, tell us and we'll delete it.

10. Changes to this policy

We may update this policy when our site or the law changes. We'll change the "Last updated" date above, and for significant changes we'll show a notice on the site.