Ayala Foundation respects and values the data privacy rights of its data subjects and acknowledges its obligation to ensure that all personal data collected from employees, donors, beneficiaries, customers, vendors, partners, members, and others will be properly secured and processed in adherence to the general principles of the law, particularly in compliance with Data Privacy Act of 2012 or otherwise known as Republic Act (R.A.) 10178 as governed by the National Privacy Commission (NPC).

This Policy outlines our policy in relation to the collection, usage, retention, disclosure, and disposal of your personal data, as well as your rights as data subjects.  The primary purpose of this policy is to help you make informed decisions and be confident in entrusting your personal data to AFI.

For the purposes of this Policy, “Personal Data” refers to any personal information that can be used to identify you as an individual.  It may include but is not limited to, your name, contact number, email address, address, birth date, age, gender, company designation, ethnicity, identification details, personal financial information, affiliation with civic groups, photos, family background, and other personal information as defined by data privacy laws, rules, and regulations.

This privacy statement provides and explains:

1. What do we collect and for what purpose do we process your Personal Data;
2. How and with whom do we share your Personal Data;
3. How do we store and for how long do we retain your Personal Data;
4. How do we dispose of your Personal Data;
5. What are your rights as Data Subjects;
6. Notifications in case of breach of personal information;
7. Updates to our Privacy Policy; and
8. Who should you contact for further information.

Collection and Use of Personal Data

Ayala Foundation may ask you to provide the personally identifiable information or Personal Data necessary to deliver our services and implement our programs effectively while ensuring your needs are met. Access to your Personal Data is limited to authorized personnel essential to fulfilling their roles within our organization.

• Program Implementation – Your Personal Data will be used by our program coordinators and managers to ensure proper facilitation of activities, track participation, address specific needs, and provide updates regarding program milestones.  Some of the uses for programs are as follows:
• Lectures and Workshops – When you enroll or participate in the education programs such as trainings, lectures, and workshops of Ayala Foundation, Ayala Museum, and FHL, your Personal Data will be used to process registration, document participation, deliver related services, and ensure proper records are maintained, among others.
• Processing of Donations and Support – Your information will be used to account for donations, supplies, and items entrusted to us, ensuring transparency and accountability.
• Financial Purposes – Your Personal Data may be used by our Finance and Audit Teams to ensure the proper accounting, reconciliation, and verification of financial transactions related to your involvement in our programs.

• Communication Purposes Using your contact details, we may send you updates regarding our programs, upcoming events, and partnership opportunities. You can opt in or out of receiving these communications at any time.

• Regulatory Compliance – We may disclose your Personal Data to external auditors and regulatory bodies when necessary to ensure compliance with laws and transparency in reporting.

• Monitoring and Evaluation – Your information may be used for statistical analysis, impact assessment, and preparation of internal reports to evaluate the effectiveness of our initiatives and plan future programs.
• Online Payment Processing For online donations or payments, your Personal Data will not be stored. Secure payment processing is handled through third-party providers. Please refer to their Privacy Policies for details.

Below is a non-exclusive list of the specific purposes for which your Personal Data may collected and processed:

1. Subscription to Ayala Foundation/Ayala Museum/ Filipinas Heritage Library (FHL) newsletter, marketing materials, annual reports, and upcoming events;
2. Registration to Ayala Museum / FHL membership;
3. Registration to Ayala Museum/FHL lectures and workshops;
4. Processing admission to Ayala Museum and/or FHL;
5. Registration in events held at the Ayala Museum;
6. Processing of purchases from the Ayala Museum Online Shop;
7. Processing donations and other kind of support to Ayala Foundation/Ayala Museum/FHL
8. Participating in any of the programs of Ayala Foundation;
9. Application to the Ayala Young Leaders Congress (AYLC) Program and/or Scholarship Programs;
10. Registration for the Volunteerism Program of Ayala Foundation;
11. Inclusion in the Alumni Database of Ayala Foundation;
12. Application to career opportunities in Ayala Foundation; and
13. Partnership and/or involvement in any of Ayala Foundation’s Development programs, Arts and Culture programs, and Education programs; and
14. Other program-related purposes that are legitimate and in adherence with the provisions of the law.

Data Sharing

Personal data collected is limited only to the information necessary to perform the abovementioned purposes and is only processed once consent has been secured. Unless compelled by applicable legislation, Ayala Foundation will not provide this information to a third party without your permission, except as necessary to process your requests.

• Within the Organization – Your Personal Data may be shared across our divisions and partner organizations, if required, to maximize program delivery and collaboration.

• Contractual Obligations – Your Personal Data may be shared with external partners to comply with contractual obligations or to enable partners to execute their obligations and deliver services to Ayala Foundation and its stakeholders.

• Legal Compliance – Personal Data may be disclosed to law enforcement, government agencies, or other entities as required by applicable laws and regulations.

• Security Measures – Personal Data may be disclosed to concerned individuals and/or entities in relation to a security issue.  We ensure that your Personal Data is protected through a strict sharing procedure, rigorous security controls, and regular training of personnel to mitigate data breach risks.

Data Storage, Retention, and Disposal

Your Personal Data may be retained in physical or electronic form. Access is strictly limited to authorized personnel, with secured storage methods implemented to ensure privacy.

We normally keep your personal information for up to 5 years following your last transaction or active participation in our programs, unless required for legal obligations or ongoing program support.  For donors of artworks, Ayala Museum will store your personal information as reasonably necessary for Provenance as part museum operating standards or until deletion is requested by the concerned Data Subject.As retention period and storage of your data varies depending on the purpose, you may contact us at dpo@ayalafoundation.org if you wish to know more of our Retention Policy.

After the retention period, your information will be securely disposed of, using methods such as shredding physical documents and permanently deleting digital files.

Rights of Data Subjects

As a Data Subject, you have the following rights under the laws:

• Right to Be Informed – You have the right to know whether your personal data is being processed, the purpose of the processing, and the entities involved.
• Right to Access – You can request access to your personal data, including details about how it is being processed and who has access to it.
• Right to Object – You can object to the processing of your personal data, especially for purposes like direct marketing or automated processing.
• Right to Rectification – You can request corrections to any inaccuracies or errors in your personal data.
• Right to Erasure or Blocking – You can request the deletion or blocking of your personal data if it is no longer necessary for the purpose it was collected or if it was unlawfully processed.
• Right to Data Portability – You have the right to obtain and transfer your personal data in a commonly used format.
• Right to File a Complaint – If your data privacy rights are violated, you can file a complaint with the National Privacy Commission (NPC).
• Right to Damages – You may claim compensation for damages incurred due to the misuse or unauthorized processing of your personal data.

For more detailed information, you can visit the National Privacy Commission’s website.

Notification in Case of Breach

Although no system is 100-percent secure, we strived to take appropriate measures to ensure that your personal data are secured and protected We are committed to promptly notifying you if a data breach occurs, along with information on what was affected and the steps we are taking.

Use of Cookies

Cookies are pieces of data that a website can send to your web browser and store in your computer system. Cookies are only used by Ayala Foundation to improve your navigation experience when you return to our sites. You can edit your browser settings if you prefer to block the use of cookies in the future.

Changes to this Policy

Ayala Foundation reserves the right to change, amend, or further improve this policy, in accordance with the provisions of the law or as it may deem necessary.

Contact Us

Please read this Privacy Statement carefully to understand how we treat Personal Data. If you have questions and clarifications about this Privacy Statement or for any other data privacy concern, you may contact us at: