How we handle your personal information

Last updated: October 1, 2026

CashPlus Lending Corporation ("CashPlus", "we", "us") respects your privacy. This notice explains what personal information we collect, why, how we use and protect it, and the rights you have under the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC).

1. Who we are

CashPlus Lending Corporation is a lending company organized under Philippine law and operating under the Lending Company Regulation Act of 2007 (RA 9474), supervised by the Securities and Exchange Commission. For the personal information described here, CashPlus is the personal information controller: we decide how and why it is processed, and we are accountable for it.

Principal office: Pasig City, Metro Manila, Philippines. Data Protection Officer: admin@cashplus.ph.

2. Who and what this notice covers

This notice applies to loan applicants, borrowers, co-makers, the authorized representatives of business borrowers, and anyone who contacts us or uses cashplus.ph. It covers information we collect through this website, email, phone calls, SMS, messaging apps, and in person at our office.

3. Information we collect

Some of this is sensitive personal information under the Data Privacy Act, such as your age, civil status, and government-issued ID numbers. We process it only when allowed by law, as explained in section 5.

What we do not collect: we do not access the contacts, photos, files or location on your phone; we do not ask for your passwords or one-time PINs (OTPs); and we do not ask about your health, religion, political views or similar matters.

If you don't provide the information we ask for, we may not be able to evaluate your application or grant a loan.

4. Where we get it

• From you, through the application form, documents you submit, and your communications with us.
• From your co-maker or the borrower. If someone named you as their co-maker, we received your details from them. We will contact you to explain your role and get your consent before you sign.
• From your employer, bank or references, only to verify the information you gave us and with your authorization.
• From public and government sources, such as to check that a business permit or registration is valid.
• From the Credit Information Corporation or other credit bureaus, when you authorize us or the law allows it.
• From payment partners, such as banks and e-wallets that confirm your payments.

5. Why we use it and our legal basis

We will not use your information for a new purpose that is unrelated to these without telling you first and, where required, asking for your consent.

6. How loan decisions are made

We do not make loan decisions by automated means alone. The loan calculator on this website gives estimates only. A CashPlus loan officer reviews every application, and the final decision and terms are made by our staff.

7. Who we share it with

We do not sell or rent your personal information. We share it only as follows, and only what each party needs:

• Your co-maker, limited to the details of the loan they guarantee and its payment status.
• Service providers that help us operate, such as our email provider (Google Workspace), website hosting (GoDaddy), banks and e-wallets for release and payment, document storage, couriers, notaries, and IT support. They may use your data only on our instructions and under written confidentiality and data protection terms.
• Auditors, lawyers and consultants, under a duty of confidentiality.
• Collection agents, if we ever engage one for an overdue account. They must follow SEC Memorandum Circular No. 18, s. 2019 and a written data sharing or outsourcing agreement.
• Government agencies and courts when the law requires it, including the Securities and Exchange Commission, the Credit Information Corporation, the Anti-Money Laundering Council, the Bureau of Internal Revenue, the National Privacy Commission, and courts or law enforcement acting under a valid order.
• A successor business, if CashPlus is merged, sold or reorganized, under the same protections described in this notice.

We never contact people in your phone contacts, and we never post your name, photo or debt publicly.

8. Storage outside the Philippines

Our email and website providers may store data on servers outside the Philippines. We use reputable providers with contractual and technical safeguards, and we remain responsible for your information under Section 21 of the Data Privacy Act wherever it is stored.

9. How long we keep it

When a retention period ends, we securely dispose of the records: paper is shredded and electronic files are permanently deleted.

10. How we protect it

• Organizational: a designated Data Protection Officer, access only for staff who need it, signed confidentiality agreements, and privacy training.
• Physical: locked storage for paper documents and restricted access to our office.
• Technical: encrypted website connections (HTTPS), two-step verification and strong passwords on our accounts, application backups stored outside the public website folder, and regular review of who has access.

No system is completely secure, but we work to prevent unauthorized access, loss, misuse or alteration of your information.

11. If a data breach happens

If a breach involves sensitive personal information or information that could be used for identity fraud, and it is likely to cause you serious harm, we will notify the National Privacy Commission and you within seventy-two (72) hours of learning about it, as required by NPC Circular No. 16-03. We will tell you what happened, what information was involved, what we are doing about it, and what you can do to protect yourself.

12. Your rights

Under the Data Privacy Act, you have the right:

• To be informed whether and how your personal information is being processed.
• To access your personal information and learn how it was obtained, used and shared.
• To object to processing, including for marketing or when it is based on consent or our legitimate interests.
• To correct information that is wrong or incomplete.
• To erasure or blocking of information that is outdated, false, unlawfully obtained, or no longer needed.
• To data portability: to get a copy of your information in an electronic format you can reuse.
• To claim damages if you are harmed by inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of your information.
• To file a complaint with the National Privacy Commission.

You may also withdraw your consent at any time. This does not affect processing already done, and we may continue processing that is required by law or needed for an existing loan contract. Some records, such as loan and anti-money laundering records, must be kept for the periods in section 9 even if you ask us to delete them. We will tell you if this applies.

13. How to make a request

1. Email our Data Protection Officer at admin@cashplus.ph with the subject "Data Privacy Request".
2. Include your full name, mobile number, loan reference number if you have one, and what you are asking for.
3. We may ask you to verify your identity before acting, to protect your information. We use what you send only for this purpose.
4. If someone is asking on your behalf, they must send your signed written authorization and a copy of their valid ID.

Requests are free of charge. We will reply within fifteen (15) working days. If we need more time, or if we cannot fully grant your request because of a legal requirement, we will tell you why.

14. This website

cashplus.ph does not use advertising cookies, tracking pixels or analytics. Our hosting provider keeps basic server logs for security. The website loads its fonts from Google Fonts, so Google receives your device's IP address when you open a page. Links to other websites, such as sec.gov.ph or privacy.gov.ph, are governed by those sites' own privacy policies.

15. Age limits

Our loans are only for persons 18 to 60 years old. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it.

16. Protect yourself from scams

CashPlus will never ask for your passwords or one-time PINs (OTPs), never ask for payment before your loan is released, and never ask you to send money to a personal GCash, Maya or bank account. Our staff only email from addresses ending in @cashplus.ph. If someone contacts you claiming to be from CashPlus and asks for any of these, do not respond, and report it to loans@cashplus.ph.

17. Complaints

If you have a concern about how we handle your personal information, please contact our Data Protection Officer first so we can address it. If you are not satisfied with our response, you may file a complaint with the National Privacy Commission through privacy.gov.ph or by calling (02) 5322 1322.

18. Changes to this notice

We may update this notice when our practices or the law change. The latest version will always be on this page with its "Last updated" date. If a change materially affects how we use information we already hold, we will notify active borrowers by email.

19. Contact us