SM Cyberzone, the technology and lifestyle center of SM Supermalls, collects, processes and stores personal data about you when you avail of their products and services, including its websites and mobile applications, participate in their events, apply for a job with them, or enter into any contract with them (“Services”), provided that you have given your express consent if and when necessary.

 

This privacy policy has been prepared to better serve any person who avails of the Services of the SM Cyberzone to inform them of how their personal data are being collected, used, and secured by SM Cyberzone.

 

Please read our privacy policy carefully to get a clear understanding of how SM Cyberzone collects, uses, protects or otherwise handles your personal data in accordance with Republic Act No. 10173, or the Data Privacy Act of 2012, and its Implementing Rules and Regulations (collectively, the “Data Privacy Act”). For additional information, kindly refer to the SM Cyberzone Privacy Policy provided at the SM Cyberzone website.

SM Cyberzone collects information you provide directly to it, such as when you attend or participate in any of its events, respond to a survey, register, create or modify your accounts in any of its websites and/or mobile applications, contact customer support, apply for a job with them, enter into any contract with them or otherwise communicate or interact with SM Cyberzone (the “Event”).

 

The following personal data may be collected: your name, age, nationality, civil status, mailing address, email address, phone number, credit card information, or other details to help you with your experience.

SM Cyberzone may use and process the personal data collected about you to allow you to participate in the Event, other similar events to be held by the SM Cyberzone, including the publication of your name should you win the same, and other discounts, promos, sales, advertisements, marketing activities and commercial communications of the SM Cyberzone, including direct marketing. At all times, your personal data shall not be used or processed for any purpose that is contrary to law, morals, or public policy.

SM Cyberzone may share personal data between and among the entities comprising the same to enable them to provide you personalized Services. SM Cyberzone may also share personal data with vendors, consultants, marketing partners, and other service providers who need access to such information to carry out work on behalf of SM Cyberzone. If and when it becomes necessary, a data-sharing agreement shall cover any sharing of data between and among the SM Cyberzone and/or its vendors, consultants, marketing partners, and other service providers. SM Cyberzone may also share information in accordance with any order from any relevant government agency as provided by law.

SM Cyberzone stores, processes and transmits personal data only within the Philippines. SM Cyberzone shall comply with the applicable laws and regulations should it transfer the storage and/or processing thereof outside the country.

 

SM Cyberzone has instituted policies and procedures, which intend to protect personal data that it has collected and continues to collect. These include securing any document containing personal data, requiring the execution of non-disclosure agreements by its employees, consultants, vendors, suppliers, and contractors, among others.

 

SM Cyberzone’s websites are scanned on a regular basis for security holes and known vulnerabilities in order to make your visit to said website as safe as possible. SM Cyberzone also uses regular Malware Scanning. Your personal data is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the personal data confidential. In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology. SM Cyberzone implements a variety of security measures when a user places an order, and enters, submits, or accesses their information to maintain the safety of your personal information.

 

While there will always be a risk of unauthorized disclosure of personal data, SM Cyberzone believes that the foregoing safeguards are sufficient to prevent the occurrence of such risk and is committed to updating and improving such safeguards in order to protect your personal data in compliance with the Data Privacy Act.

Please note that in visiting SM Cyberzone’s website, cookies are utilized. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your Web browser (if you allow) that enables the site’s or service provider’s systems to recognize your browser and capture and remember certain information. For instance, SM Cyberzone uses cookies to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved Services. SM Cyberzone also uses cookies to help it compile aggregate data about site traffic and site interaction so that SM Cyberzone can offer better site experiences and tools in the future.

 

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since the browser is a little different, look at your browser’s Help Menu to learn the correct way to modify your cookies. If you turn cookies off, some features will be disabled. Some of the features that make your site experience more efficient and may not function properly.

As a data subject, you have the following rights under the Data Privacy Act:

 

• You have the right to be informed of the collection and processing of your personal data, the purpose for which they will be processed, among others. Thus, you are required to read this privacy policy before giving your consent to the collection and processing of your personal data. If you have questions, please do not hesitate to ask us questions or clarifications and you may also contact our Data Protection Officer;
• You have the right to object to the processing of your personal data. You will be given an option or opportunity to withhold your consent to the processing of your personal data whenever the SM Cyberzone communicates with you or by notifying our Data Protection Officer;
• You have the right to have reasonable access to your personal data by notifying our Data Protection Officer;
• You have the right to rectify or correct any inaccuracy or error in your personal data by submitting your request for rectification or correction to our Data Protection Officer;
• You have the right to suspend, withdraw, or order the blocking, removal, or destruction of your personal data in accordance with the requirements of the Data Privacy Act. Please notify our Data Protection Officer if you wish to exercise this right;
• You have the right to obtain a copy of your data in an electronic or structured format if the same is processed by electronic means and in a structured and commonly used format by submitting your request to our Data Protection Officer; and
• You have the right to be indemnified if you incur damages due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.

SM Cyberzone may change this Privacy Policy from time to time. If SM Cyberzone makes any significant change in the collection, use, and protection of personal data, SM Cyberzone will provide you notice through the Services or by some other means, such as email. It is encouraged that you periodically review the Privacy Policy in the SM Cyberzone website for the latest information.

If there are any questions regarding this privacy policy, you may contact our Data Protection Officer with the following contact details:

We will secure your consent, if and when necessary, prior to the collection and processing of your personal data, or as soon as practicable and reasonable in order to ensure the continuation of the Services. Before you give your consent, you will be provided with an opportunity to read and review this Privacy Policy. If you are below eighteen (18) years old, SM Cyberzone requires you to secure consent from your parents or legal guardians in order to use any of the Services. SM Cyberzone does not specifically market to persons under eighteen (18) years old.

 

If you consent to the collection and processing of your personal data in accordance with the Privacy Policy, such consent shall be valid for a period of ten (10) years from the date such consent was given or such longer period as may be required by applicable law or when necessary as provided by the Data Privacy Act, or unless you have expressly withdrawn such consent.

 

By signing the accompanying sign-up sheet or ticking the “Agree” button if your personal data was collected manually or electronically, respectively, you are agreeing to this Privacy Policy and expressly giving your consent to the collection, processing, and storage of your personal data as provided herein.