Data Privacy

Last Updated on November 27, 2019

Commonwealth Insurance Company (“CIC”, “we” or “our”) cares about your privacy and the security of your information. We want you to be familiar with how we collect, use and disclose information, including personal information. This Privacy Policy describes our practices in conjunction with your access to our digital products and services. These products and services include insurance, our websites, email newsletters, social media pages, mobile and other applications owned and operated by us, our offline contacts, and to any other services that display this notice (collectively referred to as the “CIC Services”). This Privacy Policy does not apply to certain of our products and services that display a different privacy policy.

The CIC Services contain links to other websites for your convenience and information. We are not responsible for the privacy practices or the content of those sites.

Contact Us

If you have any questions, email us at privacy@cic.com.ph or write us at:

Commonwealth Insurance Company

10/F, 12/F & 19/F BDO Plaza, 8737 Paseo de Roxas, Makati City

We can also be reached by phone at (02) 8818-7626

For information on how this Privacy Policy applies to your use of CIC Services, please visit the relevant section below.

  1. What Personal Information Do We Gather About You?
  2. What Do We Do With The Personal Information We Collect About You?
  3. With Whom Do We Share The Personal Information We Gather?
  4. Other Information Collected Using Technology
  5. Third-Party Advertising
  6. Sensitive Personal Information
  7. Data Retention
  8. Is My Information Protected?
  9. Children’s Guidelines
  10. International Transfers
  11. Changes to This Privacy Policy

When you use the CIC Services by, among other actions, making an inquiry or other product, providing registration details, browsing our sites, or otherwise interacting with our CIC Services, we gather personal information. Personal information is information that identifies you as an individual or relates to an identifiable individual. Several different types of personal information can be gathered when you interact with the CIC Services, depending on the type of product or service being used. Collection of personal information is necessary to delivering you the CIC Services or to enhance your customer experience.

If you disclose any personal information relating to other people to us or to our service providers in connection with the CIC Services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.

We and our service providers collect personal information in a variety of ways, including:

A) Through the CIC Services.

  1. Registration: When you register for a CIC Service, we collect personal information. For example, registration on CIC.com.ph can be done by supplying a unique email address and password, or by linking your Facebook or Google accounts. See below under “From Other Sources” for more information about linking your Facebook or Google Accounts. Registration to an event or conference requires that you complete a form that will include, at a minimum, your name and email address.
  2. User-Generated Content and Public Activities (Including Comments and Reader Reviews): We offer you opportunities to engage in public activities on cic.com.ph and other CIC Services. “Public activities” are any actions you take on CIC Services that are designed to be visible to other users, including comments, recommendations, reader reviews, ratings or any other items that you submit. If you choose to engage in public activities, you should be aware that any personal information you submit can be read, collected and used by other users of these services. We are not responsible for the personal information you choose to submit in the course of your public activities and we have no responsibility to publish, take down, remove or edit any of your public activities or submissions (except as required by applicable laws). For more information, see the Terms of Service.
  3. Contact With Our Call Centers. We collect personal information from you in non-digital contexts, including, for example, when you place an order over the phone or contact customer service.

B) From Other Sources.

  1. Publicly available databases, including privately-held marketing and data analytics resources. For example, we may receive demographic information (age, sex, household income, job industry and job title) from these sources.
  2. Joint marketing third party, when they share the information with us.
  3. Social-media platforms or other third-party services. If you choose to link your social-media account or account relating to other third-party services to the CIC Services, you may be asking third parties to send us certain information from those social media accounts or services accounts, and you are authorizing us to collect, store, and use what they send us in accordance with this Privacy Policy. You can disassociate your cic.com.ph registration from third-party accounts any time.

We collect, use or otherwise process personal information as allowed under applicable law, including where based on one or more of the following:

– The consent you provide to us at the point of collection of your personal information;

– The performance of the contract we have with you;

– The compliance of a legal obligation to which we are subject; or

– The legitimate interests of CIC, a third party or yourself. “Legitimate interest” is a technical term under the regulation. It means that there are good reasons for the processing of your personal information and measures are taken to minimize the impact on your privacy rights and interests. “Legitimate interest” also references our use of your data in ways you would reasonably expect and that have a minimal privacy impact. We have a legitimate interest in collecting and processing personal information, for example: (1) to ensure that our networks and information are secure; (2) to administer and generally conduct business within the CIC; and (3) to prevent fraud.

A) Provide the CIC Services You Request.We use the information we gather about you to enable your use of the CIC Services and fulfill your requests for certain products and services, such as providing the CIC Services’ functionality to you, arranging access to your registered account, providing you with customer service, responding to your inquiries, requests, questions, suggestions, compliments or complaints, completing your transactions, sending you administrative information (such as change of our terms, conditions, or policies) saving your reading list or property search, presenting your crossword-solving statistics, and enabling you to participate in and renew paid services, polls, promotions, surveys, panels or research, and message boards. We will engage in these activities to manage our contractual relationship with you or comply with a legal obligation.

B) Analysis and Development of New Products and Services.We perform statistical, demographic and marketing analyses of users of the CIC Services, and their subscribing and purchasing patterns, so we can analyze or predict our users’ preferences for product and services development purposes, to determine our promotional campaign effectiveness so we can adapt our campaign to the needs and interests of our users, and to generally inform advertisers about the nature of our subscriber base. We use this information for analytical purposes, including analysis to improve customer relationships, to support strategic business decisions and our marketing tactics and to measure and track our brand health. We will engage in these activities to manage our contractual relationship with you, to comply with a legal obligation, or because we have a legitimate interest in doing so.

C) Customizing Your Experience.We use the information that we have to better understand you and customize certain features of the CIC Services to provide you with an enhanced experience including to show you offerings, promotions or products that may be of interest to you, based on the demographic information, type of device you are using to access the CIC Services, your usage of the CIC Services and your reading history. We will provide personalized services because we have a legitimate interest.

D)    Administrative Purposes.We and our service providers use the information we have about you for the following legitimate business purposes:

  • For auditing purposes, to verify that our internal processes function as intended and comply with legal, regulatory and contractual requirements;
  • For fraud and security monitoring purposes, including, for example, to detect and prevent cyberattacks; and
  • To understand and assess satisfaction with our CIC Services or our customer care team.

We engage in these activities to manage our contractual relationship with you, to comply with a legal obligation, or because we have a legitimate interest.

E) Aggregating and/or Anonymizing Personal Information.We aggregate and/or anonymize personal information so that it will no longer be considered personally identifying. We do so to generate other data for our use, which we may use and disclose for any purpose.

F) User Generated Content and Public Activities.When you share or recommend links to content on a social-media platform (such as Facebook, Google+ and Twitter), that action and any information you share will be covered by that platform’s privacy policy. Any information you disclose in your public activities, along with your screen name or ID, or any image or photo, becomes public.

A) Sharing Within CIC.We share your personal information with our affiliates for the purposes listed in this Privacy Policy. You can consult the list and location of our affiliates https://cic.com.ph/contact-us/.

B) Sharing With Service Providers.We contract with other companies, agents or contractors (“service providers”) to provide services on our behalf. These services are, for example, credit-card, payment and billing processing, fulfillment of orders, information technology and related infrastructure provision, customer service, ad serving, shipping, email distribution, list processing and analytics, research surveys/interviews/focus group management and analysis, or promotions management. In the course of performing these services, our service providers have access to your information including your personal information.

C) Sharing With Other Third Parties.We will not sell, rent, swap or authorize any third party (except our service providers) to use your email address without your permission. Nothing in this Privacy Policy is intended to restrict our use or sharing of aggregated or de-identified information in any way.

  1. We may share personal information, such as name, company and title, about attendees to our live events and conferences with sponsors; if we do, we will notify you when you provide us the information.
  2. We may use a third-party payment service to process payments made through the CIC Services. If you wish to make a payment through the CIC Services, your personal information will be collected by such third party and not by us, and will be subject to the third party’s privacy policy, rather than this Privacy Policy.  We have no control over, and are not responsible for, this third party’s collection, use and disclosure of your personal information.
  3. We have a legitimate interest in disclosing or transferring your personal information to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings). Such third parties may include, for example, an acquiring entity and its advisors.

D) Compliance With Legal Process.We may access, preserve and disclose personal information if we are required to do so by law or we have a good faith belief that such action is necessary to (1) comply with the law or with legal process; (2) protect and defend our rights and property; (3) protect against misuse or unauthorized use of the CIC Services; (4) protect the personal safety or property of our users or the public (among other things, this means that if you provide false information or attempt to pose as someone else, information about you may be disclosed as part of any investigation into your actions); and (5) cooperate with public and government authorities (which may be outside your country of residence).

E) By Using the CIC Services, You May Elect to Disclose Personal Information.

i) Public Activities: see above for more details on such activities. Public activities may be included in our feeds and other distribution formats. As a result, your public activities may appear on other websites, blogs, or feeds.

ii) Through Your Social Sharing Activity: When you connect your CIC Services account with your social media account, you will share information with your friends associated with your social media account, with other users, and with your social media account provider. By doing so, you authorize us to facilitate this sharing of information, and you understand that the use of shared information will be governed by the social media provider’s privacy policy.

Other information does not specifically identify you and are collected through technology. It includes tracking information collected by us as well as third parties.

We use various internet technologies to manage, and track the use of, the CIC Services. We use and disclose this information for any purpose, except where we are required to do otherwise under applicable law. Information that we collect using these technologies is combined with personal information about you. If we combine information with personal information, we will treat the combined information as personal information.

A) Device Information.We collect information about the computer, mobile device or other device you use to access the CIC Services, such as Internet protocol (IP) addresses (the region or general location where your computer or device is accessing the Internet), geolocation information, unique device identifiers, browser type, browser language and other transactional information.

B) Cookies, Local Storage and Other Similar Technologies.We use “cookies”, tags and scripts, and other similar technologies including local storage objects such as HTML5. These technologies allow us to manage access to and use of the CIC Services, recognize you and provide personalization, and help us understand how people use the CIC Services. You will not be able to access certain areas of our websites, including cic.com.ph, if your computer does not accept cookies from us. Because there is no accepted standard on how to respond to “do not track” browser-based signals, we do not respond to such signals. For more detailed information about our use of cookies and local storage, and how to manage them for the applicable CIC Service.

C) Analytics, Log Files and Reading History.As is true of most web sites, we gather certain information automatically and store it in log files. This information include IP address, browser type, operating system and other usage information about the use of the CIC Services, including a history of the pages you view.

We automatically combine this collected log-information with other information we collect about you. We do this to improve services we offer you, including customized recommendations, advertising and currency display, to improve marketing, and to track access and use of the CIC Services across the devices that you use to access the CIC Services.

D) Location Information.Some of our mobile applications can deliver content based on your current location if you choose to enable that feature of the app, for example, by use of satellite, cell phone tower, or WiFi signals. If you enable the location-based feature, your current location will be stored locally on your device, which will then be used by the app. If you elect to have a location-based search saved to your history, we will store that information on our servers. If you do not enable the location-based service, or if an app does not have that feature, the app will not transmit to us, and we will not collect or store, location information. The ads in our apps are not targeted to you based on your current GPS location, but they are targeted to you based on your ZIP code or device’s IP address.

Some of the services and advertisements included in the CIC Services, including on cic.com.ph and within our mobile apps, are delivered or served by third-party companies, which may collect information about your use of the CIC Services.

These companies place or recognize cookies, pixel tags or other technology to track certain information about our CIC Services website users. For example, in the course of serving certain advertisements, an advertiser may place or recognize a unique cookie on your browser in order to collect certain information about your use of the CIC Services. For another example, an advertiser or ad server may also be able to collect your device’s unique identifier in the course of serving an ad. In many cases, this information could be used to show you ads on other websites based on your interests.

We do not have access to, nor control over, these third parties’ use of cookies or other tracking technologies or how they may be used.

Your access to our websites should not be affected if you do not accept cookies served by third parties

Unless specifically requested (for example, in connection with a particular survey), we ask that you not send us, and you not disclose, any sensitive personal information (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through the CIC Services or otherwise to us. Any requested information that includes sensitive information about health, political opinions, ethnicity, race, religion, sex life or sexual orientation can be left unanswered.

We retain personal information for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include:

  • The length of time we have an ongoing relationship with you and provide the CIC Services to you (for example, for as long as you have an account with us or continue to use the CIC Services);
  • Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or
  • Whether retention is advisable in light of our legal position (for example, in light of applicable statutes of limitations, litigation or regulatory investigations).

We seek to protect personal information with reasonable organizational, technological and physical safeguards commensurate to the sensitivity of the personal information.   Although we take appropriate measures to safeguard your information, we cannot guarantee its absolute security. To further protect your data, we recommend that you use complex passwords for your accounts with us and for accounts with third parties that you link to any of your accounts with us. Please do not use the same passwords you use for CIC Services for other services or share your password with unauthorized people. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Contacting Us” section above.

We do not knowingly collect or store any personal information from children except as permitted by applicable law.

CIC is headquartered in the Philippines. The information you provide to us or that we obtain as a result of your use of the CIC Services is collected in your country and subsequently transferred to the Philippines in which we have facilities or our affiliates operate or in which we engage service providers.

In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your personal information.

We evaluate this privacy policy periodically in light of changing business practices, technology and legal requirements. As a result, it is updated from time to time. Any such changes will be posted on this page. If we make a significant or material change in the way we use or share your personal information, you will be notified via email and/or prominent notice within the CIC Services at least 30 days prior to the changes taking effect.