Privacy Policy
Last updated: October 11, 2026
This policy explains, in plain English, what personal data PersonalLoans.ph collects, why, who we share it with, how long we keep it and what your rights are. We follow the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).
1. Who we are
PersonalLoans.ph ("we", "us") is an independent loan comparison and information website for people in the Philippines, owned and operated by Dominet, which is based in Australia. We are the personal information controller for data collected on this website. We are not a lender: we don't grant loans, make credit decisions or collect payments.
To reach us or our Data Protection Officer about anything in this policy, use our contact form and choose the topic "Privacy request". We don't publish an email address.
2. What we collect
- Shortlist / lead form: your name, email, mobile number, loan amount, purpose, income range and city (optional), plus the page you were on and campaign (UTM) tags.
- Loan matcher: your answers (amount range, purpose, how fast you need the money, income type, first-time borrower). These stay in your browser and the page address unless you ask us to email you your matches. Then we store your email, your answers and the lenders shown.
- Contact form: your name, email, topic and message.
- Clicks to lenders: when you click a link to a partner, we record which partner, the page and button you clicked from, the time, campaign tags, your browser type, approximate country and a one-way scrambled (hashed) version of your IP address. We don't store your raw IP address.
- Analytics cookies (only if you accept): Google Analytics 4 collects pages viewed, device and browser type, approximate location and how you use the site. See our Cookie Policy.
We do not ask for government ID numbers, bank or card details, passwords or OTPs. Please don't type them into any of our forms. We don't knowingly collect sensitive personal information as defined in RA 10173.
3. Why we use it (purposes and legal basis)
- To do what you asked: show you matching lenders, send you the matches you requested, reply to your message, or (if you submit the shortlist form and tick the consent box) connect you with partners. Basis: your consent, and steps you asked us to take.
- To track referrals and get paid: partners pay us a commission for some referrals, so we record clicks to reconcile them. Basis: our legitimate interests.
- To improve the site and keep it safe: measuring which pages help people (analytics only with your consent), preventing spam, fraud and abuse. Basis: consent (analytics) and legitimate interests (security).
- To meet legal obligations: for example, responding to lawful requests from authorities.
We do not sell your personal data, and we don't make automated decisions about you that have legal effects.
4. Who we share it with
- Partner lenders and loan platforms, only when you act. Clicking "Apply" or a lender link takes you to that lender's site; anything you enter there is collected by the lender under its own privacy policy. If you submit our shortlist form and tick the consent box, we may pass your form details to the partner(s) relevant to your request so they can contact you. We never share your data with lenders without one of these actions.
- Affiliate networks (such as Involve Asia and Leadgid) receive a referral code with your click so commissions can be attributed. This code doesn't contain your name, email or phone number.
- Service providers that host and run the site for us under contract: Vercel (website hosting), Neon (database), Google (Analytics, with your consent) and, if enabled, Formspree (delivers contact-form messages to our inbox). They may only use the data to provide their service to us.
- Authorities, where required by law or to protect rights and safety.
5. Transfers outside the Philippines
Our operator is based in Australia and our service providers store data on servers that may be outside the Philippines (for example in Singapore, the United States or Australia). We remain responsible for your data under RA 10173 and use providers that apply reasonable security measures.
6. How long we keep it
- Shortlist form and matcher email requests: up to 12 months after you submit, unless you ask us to delete them sooner.
- Contact messages: up to 24 months, so we can follow up on corrections and privacy requests.
- Click records: up to 24 months, to reconcile commissions with partners.
- Google Analytics data: per our Google Analytics retention setting (up to 14 months).
After that we delete or anonymise the data, unless the law requires us to keep it longer.
7. How we protect it
The site is served only over HTTPS, the database is access-controlled and encrypted in transit, internal reports are password protected, and IP addresses are stored only as a hash. No system is 100% secure; if a personal data breach is likely to harm you, we will notify the NPC and affected people as required by law.
8. Your rights as a data subject
Under the Data Privacy Act you have the right to:
- be informed about how your data is processed (this policy);
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- object to processing, and withdraw consent at any time (for cookies, use "Cookie settings" in the footer);
- erasure or blocking of your data;
- data portability: get a copy in a common electronic format;
- damages if you are harmed by inaccurate, unlawfully obtained or misused data; and
- file a complaint with the National Privacy Commission (privacy.gov.ph (opens in new tab)).
To use any of these rights, send a request through our contact form (topic: Privacy request). Tell us the email or mobile number you used so we can find your records. We may ask you to confirm your identity, and we aim to respond within 15 working days. If a partner lender has your data because you applied with them, please also contact that lender directly, they are a separate controller.
9. Children
This site is for adults (18 and over). We don't knowingly collect data from minors; if you think we have, tell us and we'll delete it.
10. Changes to this policy
We may update this policy when our site or the law changes. We'll change the "Last updated" date above, and for significant changes we'll show a notice on the site.