Because your data is our lifeblood, we take extra care to ensure your personal data gets protected from abuse; the privacy of your personal data is our primary concern. We take positive and concrete action to ensure that all our data processing is compliant with Philippine data privacy laws.

This Privacy Policy informs all data subjects how Káyana keeps its data processing compliant with the principles of transparency, legitimate purpose, and proportionality. It outlines the nature, scope, purpose, and extent of our data processing, specifically where we use automated processing for profiling, direct marketing, and sharing with government authorities.

Contact us. If you have any data privacy concerns that are not addressed in this Privacy Policy, contact us here:

KAYANA Data Privacy Office
6799 Ayala Ave., Makati City, 1226, Philippines
Email: privacy@kayana.ph
Phone: +63 2 1622-3240

If you wish to exercise your data privacy rights or wish to access your data, please click to download these forms, which you can send to our Data Privacy Office:

Data Subject Access Request Form	Exercise of Privacy Rights Form
Use this form to obtain access to or a  copy of your personal data under the custody of Káyana Solutions, and/or  certain information regarding  the nature, purpose, and extent of Káyana’s  data processing.	Use this form to exercise your privacy  rights to be informed, to object, to access, to correct/rectify, to  block/remove, to data portability, and to  be indemnified for privacy violations.

 

For Our MVP Group Customers

We value the personal data of our MVP Group customers and recognize their rights as data subjects, which they may exercise through their authorized representatives or successors in interest.

Why do we process your data? We process a limited amount of MVP Group customers' personal information based on Káyana’s legitimate business interests, which is to analyze your data as a whole and return actionable business intelligence, in general, to the other business units of the MVP Group.

When necessary, under specific use cases to be disclosed to you when such specific use cases are deployed, and when required by law for more advanced processing, we process an extended set of information only with your express recorded consent.

We provide appropriate privacy information using just-in-time notices and informative pop-ups. More extended and expansive privacy information, including contact information for privacy-related concerns here.

We provide effective avenues for the exercise of data subject rights through downloadable forms available in this page.

What personal data do we collect? We process select user and usage data linked to the accounts you identified with our verticals within the MVP group. This data is personal data that we collect during, or incidental to the conduct of your business with the four pillars of the MVP group. We also take data from you and any other information that may be provided to us for Káyana’s legitimate purposes, which were declared to you at the point of collection and from third parties and other sources where the disclosure was the subject of consent you gave separately.

How do we process your data? Using Káyana’s legitimate interest, which is to bring better living to the Filipino through the analysis of data, we bring select data from your accounts in the MVP group and from select MVP Group companies with high levels of data privacy and protection into a data lake controlled by Káyana to create a data integration and transformation layer that works across the different data processing systems within the MVP Group.

 

From our data integration and transformation layer, Káyana creates the following digital products, among others, where processing is made only with your consent, when the processing affects your customer experience with the MVP Group:

1. Customer360-driven Cross-Sell and Insights. Use customer information from across the MVP Group to drive cross-selling, digital adoption, and payment regularity.
2. MVP-level Credit Scoring. Generates creditworthiness scores using combined financial and billing data across the MVP Group to enable enhanced financial services.
3. Data-Driven Marketing. Drive engagement and value management across MVP Group customers by unlocking cross-vertical insights made actionable through Káyana’s unified marketing solution (Marketing, Loyalty, Sales) and powered by Káyana’s data platform, and enable MVP Group companies to deliver personalized experiences, foster strong customer relationships, increase retention rates, and drive revenue growth ultimately maximizing customer lifetime value.
4. Density and Mobility. Use geolocation and mobility analytics to gain actionable insights into customer behaviors and movement paterns to perform segment and persona density better.

To whom do we disclose or share your data? Unless otherwise specified in our other Just-in-Time Privacy Notices, and unless you give your specific consent in cases where this information directly affects you, we do not disclose or share your personal data in raw form with other third parties unless compelled by law.

How do we protect your data? Cybersecurity is a priority at Káyana. We take pains to ensure that the right people safeguard our data. We implement intentional and deliberate security measures when processing your personal data. These measures are part of a control framework that implements fail-safe mechanisms to ensure your data is safe; they include, but are not limited to: using secure servers, firewalls, and security controls and ensuring the regular conduct of audits and testing of our security protocols.

Retaining your data. We keep your data only for as long as necessary or if you are a customer of the MVP Group. We will only keep your data much longer with your consent, for purposes to be disclosed to you when we obtain such consent. Following the end of our retention period, your data shall be disposed of or discarded securely, preventing further processing, unauthorized access, or disclosure to any other party or to the public.

What if the data is wrong? You are free to exercise your full data subject rights to have your data corrected or rectified, or if the data was improperly obtained, to have the data blocked or removed. If you believe your data is in error, or you wish to erase your data in whole or in part, contact us through the information listed here.

 

For Our Employees

We value the privacy of our employees and their dependents and our job applicants, on-the-job trainees, and retirees. We collect and maintain their personal data in connection with our prospective, active, and previous contracts with them, whether for employment or training agreements. We ensure that their information is up-to- date and kept confidential even until their separation from Káyana.

What personal data do we collect? We collect your personal data during, or incidental to the conduct of, your employment with Káyana Solutions. These data include any other information that you voluntarily provide to us for any legitimate purpose declared at the point of collection as well as information about you that we received from third parties and other sources where the disclosure was subject of a consent that you gave separately or a legal requirement.

Why do we process your personal data? We store, process, and/or analyze the personal data collected for Káyana’s legitimate business purposes, which are all related or incidental to the conduct of our business.

With whom do we share your personal data? Unless you provide specific consent or except in instances allowed under Philippine data privacy laws, we do not share your personal data as an employee with our business partners and other third parties for their commercial purpose or benefit.

Retaining your personal data. We keep your personal data for as long as necessary, and for as long as you are employed with Káyana and until all accountabilities have been cleared. Following the end of our retention period, your data shall be disposed of or discarded securely, preventing further processing, unauthorized access, or disclosure to any other party or to the public.

 

For Vendors and Consultants

We value the privacy of all our individual vendors, suppliers, contractors, and consultants, as well as the officers, employees, attorneys-in-fact, and authorized representatives of our corporate service providers. We request the personal data of sole proprietors and other individual persons representing our corporate contractors, mostly for purposes of accreditation and official correspondence. At the point of data collection, we allow them to review our Privacy Statement and sign acknowledgment forms to signify that they have understood how we uphold their rights as data subjects and how we secure copies of their personal data that are in our possession.

What personal data do we collect? We collect your personal data in the course of, or incidental to the conduct of, our business with you. These data include any other information that you voluntarily provide to us for any legitimate purpose declared at the point of collection as well as information about you that we received from third parties and other sources where the disclosure was subject of a consent that you gave separately or a legal requirement.

Why do we process your personal data? We store, process, and/or analyze the personal data collected for Káyana’s legitimate business purposes, which are all related or incidental to the conduct of our business.

With whom do we share your personal data? Unless you provide specific consent or except in instances allowed under Philippine data privacy laws, we do not share your personal data as an employee with our business partners and other third parties for their commercial purpose or benefit.

Retaining your personal data. We keep your personal data for as long as necessary, and for as long as you are employed with Káyana and until all accountabilities have been cleared. Following the end of our retention period, your data shall be disposed of or discarded securely, preventing further processing, unauthorized access, or disclosure to any other party or to the public.

 

Updates to our Privacy Policy

From time to time, we may update this Statement to comply with applicable laws, rules, and regulations, reflect any changes to the foregoing, align with industry practices, or for another legitimate purpose. You will be informed of any material changes to this Policy. When necessary and appropriate, we will ask again for your consent to the processing outlined in this Privacy Policy.