Privacy Notice
Puhunan.ph Privacy Notice · Version 1.0 · Effective October 15, 2026
1. Who we are
Puhunan.ph is operated by PUHUNAN FINANCIAL CONSULTANCY SERVICES, Unit 6 Squarebiz Plaza, Piapi Dumaguete City. We are the personal information controller for data collected on this site. Data Protection Officer: dpo@puhunan.ph, 09175381208.
2. What we do
We match people looking for loans with SEC-licensed partner lenders. We are not a lender and do not approve, release, or collect loans.
3. What we collect
- Identity: First name, middle name, last name, suffix, sex, and date of birth.
- Contact details: Mobile number, email address, and complete residential address (house/street, province, city/municipality, barangay, ZIP code).
- Employment and income: Employment type, monthly income, and source of income.
- Collateral information: Whether you own a car, truck, motorcycle, tricycle, or real estate with OR/CR or title, and your loan product of interest.
- Valid ID: A photo of one (1) valid Philippine government-issued ID, to verify your identity as part of the loan inquiry process.
4. Why we use it and our legal basis
- To match you to the appropriate loan product (consent).
- To match and refer your loan inquiry request to our accredited lending partners (consent).
- To compute an internal lead score that helps our partners prioritize and assess your request (legitimate interest).
- To contact you for follow-up, verification, or to provide updates on your loan inquiry status (consent).
- To comply with our legal and regulatory obligations under Philippine law (legal obligation).
- To improve our services, conduct analytics, and detect fraud or misrepresentation (legitimate interest).
5. Who receives your data
Only the partner lenders you are matched with, named on your confirmation screen and on our Partner Lenders page. Our service providers (cloud hosting, secure cloud file storage for ID images, SMS, and email) process data only on our instructions under written agreements. We do not sell your data.
6. What lenders do with it
Each lender becomes a separate controller once it receives your data. Its own privacy notice governs its processing, including credit checks with the Credit Information Corporation or credit bureaus. Links are on our Partner Lenders page.
7. Storage and transfers
Your inquiry details and lead record are stored in Negros Island Region. Photos of your valid ID are stored separately in an access-restricted cloud file storage service provided by Google LLC (Google Drive), which may process and store them outside the Philippines. Where personal data is stored or processed outside the Philippines, we rely on our provider's data processing terms and require a level of protection equivalent to that under RA 10173.
8. How long we keep it
- ID images: Deleted from our cloud storage 30 days after forwarding, or 30 days after submission if unmatched. Deletion removes the file from the storage account; any residual copy in the provider's backup systems is removed under the provider's own retention schedule.
- Lead data: 3 months, then deleted or anonymized.
- Consent records: Kept as long as needed to prove consent and handle complaints.
9. How we protect it
Encryption in transit and at rest, ID images kept in a separate, access-restricted folder in our cloud file storage account that only authorized staff can open, and staff confidentiality obligations. If a breach is likely to cause you serious harm, we will notify you and the National Privacy Commission within 72 hours of knowing of it.
10. Your rights
You can: be informed; access your data; correct it; object or withdraw consent; ask us to delete or block it; get a copy in a portable format; and claim damages for violations. Email dpo@puhunan.ph or use our Privacy Request Form. We respond within 15 working days. Withdrawing consent stops future sharing; it cannot recall data already sent to a lender, but we will tell the lenders you withdrew.
11. Complaints
Contact our DPO first. You may also complain to the National Privacy Commission (privacy.gov.ph). You can file a complaint through our complaints form.
13. Minors
Our service is for people 18 and older. We delete data we learn came from a minor.
14. Changes
We will post updates here with a new version and date, and ask for fresh consent if purposes change.