1. Personal Information Collected and Manner of Collection. We collect, either manually or through electronic means, various personal information necessary to provide our sales, services and meet our contractual obligations with you. The information we collect may include but is not limited to: Name, Contact details (address, phone number, email address), Photographs (for identification purposes), Birth, Employment, Business or Affiliation record/s, Identification documents (driver’s license, passport, etc.), Vehicle details (make, model, VIN, license plate number, location), Financial information (bank and credit card details, payment history, etc.), Service history and records, Communication preferences and any other information required for the fulfillment of our sales, marketing and/or after-sales transactions/services.

2. Purposes of Data Collection and Processing. We collect and process your personal information for the following legitimate purposes:

• To complete sales and transactions for vehicles and related services;
• To facilitate after-sales services, including warranty, maintenance, and repairs;
• To process and respond to your inquiries, requests, and complaints;
• To comply with legal and regulatory requirements;
• To improve customer service and enhance your experience with us;
• To send marketing communications (with your explicit consent);
• To conduct market research and analysis; and
• To perform of our sales, marketing and/or after-sales transactions, compliance and support services.

While your consent may be solicited to process your personal data, we may also process personal data without your consent, such as when processing is allowed under Section 12 or Section 13 of the DPA.

3. Data Sharing and Disclosure. We may share your personal information with Autohub Group, trusted third-party service providers, business partners, subsidiaries, and affiliates for the purposes mentioned above or when disclosure is allowed under Section 12 or 13 of the DPA. These parties are contractually obligated to maintain the confidentiality and security of your information and can only use it in accordance with our instructions.

4. Storage, Retention and Disposal. Your personal information is securely stored in our filing or database systems, computers, and servers, within a controlled and secure environment. We may also utilize cloud-based third-party data storage providers to store your personal information. We will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, and as required by applicable laws and regulations. Physical records shall be disposed of through shredding, while digital files shall be anonymized. In all instances, our manner of disposal shall ensure that the personal information shall no longer be retrieved, processed, or accessed by unauthorized persons.

5. Risks Involved and Data Protection and Security Measures. Risk encompasses the possibility of an incident or breach leading to adverse consequences for both individuals and the Company. Such risks can manifest in unauthorized collection, use, disclosure, or access to personal data and may also extend to compromising the confidentiality, integrity, and availability of personal data, potentially resulting in violations of general data privacy principles and the rights of data subjects.

The Company safeguards the confidentiality, integrity, and availability of your personal information by ensuring a combination of adequate organizational, physical, technical, and security measures based on generally accepted data privacy and information security standards.

However, this does not guarantee absolute protection against certain risks involving the processing of personal data, such as when systems are exposed to targeted cyberattacks, malware, ransomware, and computer viruses or when manual records are accessed without authority. Nonetheless, adequate company policies are in place to ensure appropriate security incident management in line with existing laws, rules and regulations.

6. Your Rights as a Data Subject. As a data subject, you have the right to:

• Be informed about the purposes of data processing and any data sharing;
• Access and request a copy of your personal information we hold and process about you. It is your right to obtain confirmation on whether or not data relating to you are being processed;
• Rectify any inaccuracies in your data. This is your right to have your personal data corrected if it is inaccurate or incomplete;
• Erasure or order blocking of your personal data whenever warranted. Withdraw your consent for marketing communications;
• Object to the processing of your data for legitimate reasons; and
• The right to data portability through which you may obtain and electronically move, copy, or transfer your data securely for further use.

7. Changes and Feedback on our Privacy Notice

The Company reserves the right to update or revise this privacy notice at any time and will provide a new privacy notice whenever there are substantial changes. For any concerns or inquiries regarding your personal information and data privacy, please contact our Data Privacy Officer at email [email protected] or mobile number +639270796004.

Opt-In / Opt-Out

I hereby agree to receive marketing updates, promotions, and news from the Company regarding its products, services, promotions, and other events.

Yes: ___

No: ___

I acknowledge that I have carefully read and fully understood this form and with my signature, hereby unconditionally provide my consent as of the date noted herein.

Full Name: ___________________________________________

Signature: ____________________________________________ Date: ________________________

AHGC/PDPACONSENT/001 – (AUDIT CONTROL NO. – _______)