Privacy Notice

1. Identity of the Personal Information Controller

The Personal Information Controller is the Clark Investors & Locators Association (CILA), with registered office at Bldg. 2511-B Samat St., Phil. Cyber Technopark Complex, Clark Freeport, Pampanga, Philippines.

For privacy-related concerns, you may contact our Data Protection Officer at: clarkinvestors@gmail.com

2. Personal Information We Collect

CILA collects the following personal information in the course of its operations:

• Company name, representative names, and position titles
• Contact details (telephone numbers, email addresses)
• Business address and industry classification
• SEC or DTI registration details and business permit information
• For events: dietary requirements and emergency contacts (where applicable)
• For the website contact form: name, email address, and message content

3. Purposes of Processing

We process personal information for the following purposes:

• Membership management, including processing applications and renewal of dues
• Communications with member companies on matters affecting Clark locators
• Event registration, attendance tracking, and check-in
• Maintenance of the member directory (with member consent)
• Responding to inquiries submitted through the Ask CILA platform
• Compliance with legal and regulatory obligations
• Association governance, elections, and record-keeping

4. Legal Basis for Processing

Processing is based on the following legal grounds under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Consent (Art. 13(a) DPA IRR) — for directory listing and optional communications
• Performance of contract — for membership agreements and event registrations
• Legitimate interests of the association and its members — for advocacy and governance functions

5. Retention

CILA retains personal information for the following periods:

• Membership records: for the duration of membership plus five (5) years after termination
• Event records: three (3) years from the date of the event
• Contact form submissions: one (1) year from the date of submission

After the retention period, personal information is securely deleted or anonymized.

6. Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights as a data subject:

• Right to be informed of how your personal data is collected and processed
• Right of access to your personal data held by CILA
• Right to object to the processing of your personal data
• Right to erasure or blocking of personal data under certain circumstances
• Right to data portability in a commonly used electronic format
• Right to lodge a complaint with the National Privacy Commission (NPC)

7. Data Sharing

CILA does not sell, rent, or trade personal data. Personal information is shared only in the following circumstances:

• With authorized CILA committee officers, for the purpose of routing inquiries to the appropriate committee
• With third-party service providers (email delivery, payment processing) under executed data sharing agreements that require equivalent data protection standards
• With government agencies, when required by law or regulation

8. Security Measures

CILA implements the following security measures to protect personal data:

Technical Measures:

• Encrypted storage for all personal data at rest
• TLS encryption for all data in transit
• Role-based access controls limiting data access to authorized personnel only
• Audit logging of all data access and modification events

Organizational Measures:

• Staff training on data privacy obligations and DPA compliance
• Data privacy policies and procedures aligned with RA 10173
• Designation of a Data Protection Officer

9. Contact for Privacy Concerns

To exercise your data subject rights, or to raise any privacy concern, please send a written request to our Data Protection Officer at: clarkinvestors@gmail.com

We will respond to your request within fifteen (15) working days from receipt. If you are not satisfied with our response, you may file a complaint with the National Privacy Commission at www.privacy.gov.ph.

10. Updates to this Notice

CILA reserves the right to update this Privacy Notice from time to time to reflect changes in our data processing practices or applicable law. Material changes will be communicated to member companies via email and posted on the CILA website.

This notice is effective as of January 1, 2026.