1. Who We Are
Estra Finance (referred to as "Estra", "we", "us", or "our") is a loan facilitation platform registered in the Philippines. We operate at www.estrafinance.ph and act as a Personal Information Controller under RA 10173.
Our Data Protection Officer (DPO) can be reached at:
- Email: privacy@estrafinance.ph
- Postal: Estra Financial Consultancy Service, Unit 5A, 5th Floor, Hollywood Square, No. 33 West Avenue, Nayong Kanluran, Philippines
2. What Information We Collect
2.1 Personal Information
- Full name, date of birth, civil status
- Government-issued identification numbers (SSS, TIN, PhilHealth, Pag-IBIG)
- Contact details: email address, mobile number, home address
- Employment information: employer name, position, length of service
2.2 Financial Information
- Monthly income and income sources
- Existing loans and monthly obligations
- Bank account details (as required for loan processing)
- Credit and financial history as declared by you
2.3 Document Data
- Payslips, income tax returns, and employment certificates
- Bank statements
- Land titles, tax declarations, and property documents
- Marriage certificates and other civil documents
- Business documents (for self-employed applicants)
2.4 Platform Usage Data
- Device information, IP address, and browser type
- Pages visited, features used, and session duration
- Referral source and campaign tracking data
3. Why We Collect Your Information
We collect and process your information only for the following specific, declared purposes:
- To facilitate your home loan application and match you with suitable lenders
- To verify your identity and assess your loan eligibility
- To share your application and documents with your selected lender(s) for credit assessment
- To track your application status and communicate updates to you
- To comply with our legal and regulatory obligations
- To improve our platform and services through anonymised analytics
- To communicate with you about your application, account, or platform updates
We will never use your data for purposes not listed above without obtaining your specific, separate consent. Your data will not be sold or used for third-party marketing.
4. Legal Basis for Processing
We process your personal data on the following lawful bases under Section 12 of RA 10173:
- Your express consent, given at the time of application
- Performance of a contract — to fulfill our loan facilitation service to you
- Compliance with a legal obligation — as required by Philippine law
- Legitimate interests — to operate and improve the Platform, in a manner that does not override your rights
6. Data Retention
- Active application data: duration of application process plus 5 years after closure
- Approved loan records: 10 years, in compliance with financial record-keeping requirements
- Declined or withdrawn applications: 3 years
- Platform usage data: 2 years
After the applicable retention period, your data will be securely deleted or anonymised.
7. Your Rights Under the Data Privacy Act
As a data subject under RA 10173, you have the following rights:
- Right to be Informed — the right to know how your data is collected and used
- Right to Access — request a copy of your personal data held by us
- Right to Rectification — correct inaccurate or outdated data
- Right to Erasure — request deletion of your data, subject to legal retention requirements
- Right to Object — object to processing in certain circumstances
- Right to Data Portability — request your data in a structured, machine-readable format
- Right to Withdraw Consent — withdraw consent at any time, without affecting prior lawful processing
To exercise any of these rights, contact our DPO at privacy@estrafinance.ph. We will respond within 30 days.
8. Data Security
Estra implements appropriate technical and organisational security measures to protect your personal information, including:
- Encrypted data transmission (SSL/TLS)
- Access controls and role-based permissions for staff
- Secure document storage with audit logging
- Regular security assessments
In the event of a personal data breach likely to result in harm, we will notify the National Privacy Commission (NPC) and affected individuals within 72 hours, as required by RA 10173.
10. Children's Privacy
The Platform is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware of such data, we will delete it promptly.
11. Complaints
If you believe your privacy rights have been violated, you may file a complaint with:
National Privacy Commission (NPC)
Website: www.privacy.gov.ph | Email: complaints@privacy.gov.ph
We encourage you to contact us first at privacy@estrafinance.ph so we may address your concern directly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or Platform notification. Continued use of the Platform after the effective date constitutes acceptance of the revised policy.
13. Contact
Data Protection Officer — Estra Financial Consultancy Service (Estra Finance)
Unit 5A, 5th Floor, Hollywood Square, No. 33 West Avenue, Nayong Kanluran, Philippines
Email: admin@estrafinance.ph | Website: www.estrafinance.ph