CAPITAL ONE PHILIPPINES DATA PRIVACY STANDARD

Here at Capital One Philippines Support Services Corp. (“Capital One Philippines”), we are committed to the privacy of our associates, non-associates, applicants, candidates, and visitors.

In this Data Privacy Standard, we will provide an overview on how Capital One Philippines collects, uses, and processes Personal Data in accordance with Republic Act No. 10173, or the Data Privacy Act of 2012 (“DPA”), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission.

As used throughout this Standard, Personal Data shall refer to Personal Information and Sensitive Personal Information, as defined under Sections 3 (g) and (l), respectively, of the DPA.

What Personal Data do we collect and for what purpose?

Capital One Philippines may collect the following Personal Data for thein dicated purposes:

For Capital One Philippines Careers:

For Capital One Philippines Visitors:

In addition, the personal data you will provide may be used for any other lawful purpose, as may be allowed under the DPA or in any other related legislation or issuance.

Kindly note that, for Capital One Philippines visitors, in line with our security protocols, our failure to receive the above Personal Data from you may affect your visit to our premises including, but not limited to, denial of entry into our premises and cancellation of any scheduled visit.

How will the Personal Data be collected?

We may collect your Personal Data electronically (e.g., Capital One Careers website, email, electronic forms), over the phone/VoIP/videoconference (e.g., phone call, Zoom, Viber), or physically (e.g., printed forms to be accomplished by the individual).

In addition, the Capital One Philippines Careers website uses a variety of online tools and technologies to collect information when you visit the website, including Device Data and Online Activity Data. Among the tools that may be used are:

  1. Server logs - Server logs automatically record information and details about your online interactions with Capital One Philippines.
  2. Cookies - Cookies are small text files that a website’s server stores in your web browser and allows companies to recognize your device and store information about your account and preferences.
  3. Pixel tags - A pixel tag (also known as a web beacon, clear GIF, pixel, or tag) is an image or a small string of code that may be placed in a website, advertisement, or email. It allows companies to set or read cookies or transfer information to their servers when you load a webpage or interact with online content.
  4. Third-party plugins - The Capital One Philippines Careers website may include plugins from other companies (e.g., social media). These plugins may collect information, such as information about the pages you visit and share it with the company that created the plugin even if you do not click the plugin. These plugins are governed by the privacy policies and terms of the companies that created them.

Are there risks to your Personal Data?

While Capital One Philippines ensures that adequate physical, technical, and organizational security measures are in place to protect your Personal Data's confidentiality, integrity, and availability, this does not guarantee absolute protection against certain risks involving the processing of Personal Data, such as when systems are exposed to targeted cyberattacks, malware, ransomware, and computer viruses or when manual records are accessed without authority. Nevertheless, Capital One Philippines has robust and adequate policies in place to ensure appropriate security incident management.

How do we store and dispose of your Personal Data?

Capital One Philippines stores your Personal Data in a secure data center (on premise and/or cloud) and/or in physical document storage facilities, whichever is applicable. Your Personal Data will be stored for as long as necessary and will be disposed of following Capital One Philippines’ Information Retention Standards and other related standards and procedures and for the fulfillment of the purposes stated in this Standard.

How can you exercise your data subject rights?

You may exercise your data subject rights, including the rights to information, object, access, rectification, erasure or blocking, lodging a complaint, damages, and data portability, in accordance with the DPA and related issuances by reaching out to the Data Protection Officer through the different channels listed below.

Changes to this Standard

This Standard describes C1PH’s current online privacy practices. C1PH may change its privacy practices in the future and we may revise this Standard to reflect material changes. This Standard was last revised November 5, 2024, and is effective as of that date.

Whom should you contact for any data privacy concerns?

For any data privacy concerns, including exercise of data subject rights, you may contact us at:

Addressee: The Data Protection Officer
Mailing Address: 5150 North Bridgeway, Northgate Cyberzone, Filinvest City, Alabang, Muntinlupa City
Email Address: copsscdataprivacy@capitalone.com
Contact Number: +63 287799300

For reference, the Data Protection Officer and the Data Processing Systems of the Company are registered with the National Privacy Commission until September 18, 2025. The Certificate of Registration may be viewed here.

Please note that Capital One Philippines may amend this Data Privacy Standard at any time and will provide a new privacy standard whenever there are substantial changes.