RTDS NETWORK ICT SOLUTIONS INC.

Website Data Privacy Policy

Effective Date: November 2025
Last Updated: November 2025

Introduction

RTDS NETWORK ICT SOLUTIONS INC. (“RTDS NETWORK”, “we”, “our”, or “us”) values your privacy and is committed to protecting the confidentiality, integrity, and availability of your personal data.

This Website Data Privacy Policy explains how we collect, process, store, share, and protect personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and related issuances by the National Privacy Commission (NPC).

By accessing or using our website www.rtdsnetwork.com, or any of our online systems and mobile applications, you signify that you have read, understood, and consented to the collection and processing of your personal data as described in this policy.

Basis of Processing Personal Information

We process personal information under the following lawful bases:

The data subject has given his or her consent for the collection and processing of their personal data.
The processing is necessary for the purposes of the legitimate interests pursued by RTDS NETWORK or by third parties to whom the data is disclosed, except where such interests are overridden by the fundamental rights and freedoms of the data subject as protected under the Philippine Constitution.

Basis of Processing Sensitive Personal Information

We process sensitive personal information only when:

The data subject has provided specific consent prior to the processing, or
In cases of privileged information, all parties to the exchange have consented before processing.

Purpose of Processing

Personal data is collected and processed to:

Establish and verify the identity of individuals registered in our systems.
Facilitate service subscription, billing, and technical support.
Prevent and minimize fraudulent activities.
Ensure efficient account management and service delivery.
Comply with legal and regulatory obligations.

Data Subjects

The data subjects covered by this policy include:

Employees
Customers and Subscribers

Categories of Personal Data Collected

We collect and process the following categories of personal data:

Full Name
Email Address
Mobile Number
Address and Service Information
Other identifiers necessary for account setup and verification

Recipients of Personal Data

Personal data may be disclosed to the following authorized recipients:

RTDS NETWORK employees, in connection with customer or employee transactions.
Counterparties or business partners for legitimate service-related operations.
Customers where necessary for verification or inter-account interactions.

Data Controller Information

RTDS NETWORK ICT SOLUTIONS INC. acts as the Personal Information Controller (PIC) for all personal data collected and processed through its website and systems.

The company does not outsource or subcontract data processing to third parties without proper data sharing or processing agreements in place.

Data Life Cycle

a. Data Collection

Data is collected during:

Subscriber registration and onboarding
Payment processing and billing transactions
Customer support and service requests

b. Data Retention

Customer data is retained for two (2) years from the date of account termination, in compliance with audit, billing, and regulatory requirements. After this period, data is securely deleted.

c. Data Disposal or Destruction

Digital records are permanently deleted from all databases using secure erase tools.
A Data Disposal Log is maintained by the IT Department and reviewed by the Data Protection Officer (DPO) to ensure compliance and traceability.

Data Security Measures

a. Organizational Measures

Appointment of a qualified Data Protection Officer (DPO).
Implementation of a Privacy Management Program (PMP).
Regular employee training and privacy awareness sessions.
Strict access control limiting data handling only to authorized personnel.

b. Physical Measures

Restricted access to data centers and server rooms using ID access systems.
24/7 CCTV surveillance and physical security.
Visitor logging and workstation security policies (e.g., no credential sharing, automatic screen lock).

c. Technical Measures

Deployment of firewalls, antivirus, and data encryption.
Regular system updates, patching, and vulnerability testing.
Two-Factor Authentication (2FA) for employee system access.
Secure backup and disaster recovery mechanisms.

Data Sharing and Transfer

Personal data may be transferred or shared under strict compliance with the Data Privacy Act.

Cross-border Data Transfer: Some data may be transferred outside of the Philippines for storage, processing, or backup purposes, subject to data protection safeguards.
Data Sharing Agreements (DSA): RTDS NETWORK maintains formal DSAs with partners and service providers to ensure that all shared data remains protected and processed lawfully.

Automated Decision-Making and Profiling

The system employs automated decision-making processes for certain service-related functions such as fraud prevention, credit verification, or account management.

Automated decisions are based on legitimate interest and customer consent obtained during registration or acceptance of the RTDS Terms and Conditions.
Automated processes are periodically reviewed to ensure fairness, transparency, and compliance with the Data Privacy Act of 2012.

Lawful Basis of Processing

The processing of personal data is based on legitimate interest and informed consent provided by the data subject.

Consent is obtained upon:

Registration through the RTDS Network system or mobile app
Acceptance of the Terms and Conditions and Privacy Policy

Legitimate interest applies for:

Fraud prevention
Efficient account management
Improvement of service delivery and user experience

Data subjects may withdraw their consent at any time by contacting the RTDS Data Protection Officer (DPO). All withdrawals will be properly recorded and respected unless processing is required by law.

Data Transfers Outside the Philippines

Yes, personal data may be transferred or stored outside the Philippines, subject to compliance with applicable data protection requirements and the maintenance of equivalent safeguards in accordance with NPC standards.

Public-Facing Systems

RTDS NETWORK operates external-facing online systems, including web-based and mobile applications, for customer registration, billing, and support. These systems are accessible to both internal employees and external users under secure authentication and encryption protocols.

Rights of the Data Subject

Under the Data Privacy Act, you have the following rights:

Right to be Informed
Right to Access
Right to Object
Right to Erasure or Blocking
Right to Rectification
Right to Data Portability
Right to File a Complaint with the National Privacy Commission

You may exercise these rights by contacting the RTDS NETWORK Data Protection Officer (DPO).

Contact Information

For questions, requests, or concerns related to this Privacy Policy or your personal data, please contact:

Data Protection Officer (DPO)
RTDS NETWORK ICT SOLUTIONS INC.
Stall 2E, RAQ Square Building, Corner Lemens, MacArthur Highway, Mabiga, Mabalacat City, Pampanga, 2010
info.dpo@rtdsnetwork.org
+63 976 524 3517
www.rtdsnetwork.com

Policy Updates

RTDS NETWORK reserves the right to update or modify this Privacy Policy at any time to reflect changes in legal, operational, or technological requirements. Any updates will be posted on this page with a revised “Last Updated” date.

Consent

By continuing to use our website, applications, or services, you confirm that you have read, understood, and agreed to the terms of this Website Data Privacy Policy and consent to the collection and processing of your personal data as described herein.