Privacy Policy.

1. Introduction

BridgePoint Business Alliances Corporation ("BridgePoint", "we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you interact with our website, services, and personnel.

This policy is governed by the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and issuances by the National Privacy Commission (NPC).

2. Information We Collect

We collect personal information in three main ways:

2.1 Information You Provide Directly

• Contact details — name, email, mobile number, position, company
• Business information — industry, electricity consumption data, financial information (when applying for funding)
• Communications — messages, inquiries, and uploaded documents
• Application data — for Business Associates, Careers, or RCOA assessments

2.2 Information Collected Automatically

• Browser and device information (IP address, browser type, OS)
• Usage data (pages visited, time spent, referral source)
• Cookies and similar technologies (with your consent)

2.3 Information from Third Parties

• Referrals from existing Business Associates
• Public business directories and registries
• Authorized data sources during due diligence

3. How We Use Your Information

We use your personal information for the following purposes:

• Service delivery: Processing inquiries, assessments, and engagements across our service pillars
• RCOA & energy services: Eligibility assessments, ERC documentation, RES coordination
• Communication: Responding to your messages and providing updates on engagements
• Compliance: Meeting legal, tax, regulatory, and AMLA obligations
• Marketing (with consent): Sending newsletters, insights, and relevant offerings
• Service improvement: Analyzing usage to improve our website and services

4. Lawful Basis for Processing

We process personal data only when we have a lawful basis under the Data Privacy Act, including:

• Your consent (for marketing and optional services)
• Contract execution (when you engage our services)
• Legal obligations (regulatory and tax compliance)
• Legitimate interests (improving services, fraud prevention)

5. Information Sharing

We do not sell personal information. We may share your information with:

• Alliance partners: Licensed RES, LCTSI, MSOC partners, etc. — only where necessary for service delivery and bound by confidentiality
• Regulators and government agencies: ERC, BIR, SEC, DOLE, NPC — as legally required
• Professional advisors: Lawyers, auditors, and consultants engaged by BridgePoint
• Service providers: IT vendors, hosting providers — under data protection agreements

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods vary by data type and are outlined in our internal Data Retention Schedule, available on request.

7. Data Security

We implement appropriate technical, organizational, and physical safeguards to protect personal data — including encryption, access controls, secure storage, employee training, and incident response protocols. However, no system is 100% secure, and we cannot guarantee absolute security.

8. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the right to:

• Be informed about what data we collect and why
• Access your personal data we hold
• Rectify inaccurate or incomplete data
• Erase or block processing of your data
• Damages in case of violation of your rights
• File a complaint with the National Privacy Commission
• Data portability — request a copy of your data in a structured format
• Object to processing for direct marketing

To exercise any of these rights, email bridgepointbac@gmail.com.

9. Cookies & Tracking

Our website uses cookies and similar technologies to improve functionality and analyze usage. You can control cookies through your browser settings. Disabling cookies may affect some functionality.

10. International Data Transfers

If we transfer your data outside the Philippines (e.g., for cloud services), we ensure equivalent protection through contractual safeguards and compliance with NPC requirements.

11. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect data from minors. If you believe we have, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last Updated" date. Material changes will be communicated through our usual channels.

13. Contact Us

For questions, concerns, or to exercise your data subject rights:

• Data Protection Officer: bridgepointbac@gmail.com
• Phone: +63 995 072 0468
• Address: Unit 5401, Corporate Finance Plaza, Ortigas Center, Pasig City

You may also file complaints directly with the National Privacy Commission at privacy.gov.ph.