Personal Data Collection Statement
Last updated: July 27, 2026
1. Introduction
Rental PH ("we", "us", or "our") is committed to protecting your privacy and personal data. This Personal Data Collection Statement explains how we collect, use, store, and protect your personal information when you use our equipment rental matchmaking platform. This statement is prepared in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong Special Administrative Region ("PDPO").
2. Data Controllers
Data Controller: Rental PH Platform
Contact Email: rentalph99@gmail.com
Address: Bonifacio Global City, Taguig, Metro Manila, Philippines
For Hong Kong users: The data user in respect of your personal data is Rental PH Platform. For enquiries or access/correction requests under the PDPO, please contact us at the email address above.
3. Personal Data We Collect
We collect the following categories of personal data:
3.1 Account Registration Data
- Email address
- One-time password (OTP) verification records
- Account creation and login timestamps
3.2 Renter (Tenant) Verification Data
- Full name
- Government-issued ID documents (e.g., passport, driver's license, national ID, Hong Kong Identity Card)
- Employment certificate or business permit
- Proof of address
- Selfie or facial verification images
3.3 Equipment Owner Verification Data
- Company name and registration details
- Business license, SEC/DTI registration certificates, Hong Kong Business Registration Certificate
- Shareholder or legal representative identification documents
- Equipment ownership documents (ORCR - Official Receipt of Certificate of Registration)
- Equipment photographs
3.4 Equipment & Transaction Data
- Equipment specifications, photos, and location
- Rental pricing and availability information
- Inquiry details (project address, work scope, required dates)
- Conversation and message records between parties
- Financial records (invoices, receipts, payment records)
- Rental contract documents
3.5 Technical & Usage Data
- IP address and browser type
- Device information
- Page visit history and usage patterns
- Cookies and similar tracking technologies
4. Purpose of Data Collection
We collect your personal data for the following specific purposes:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation and authentication | Email, OTP records | Contract performance |
| Identity verification (renter & owner) | ID documents, certificates, photos | Legitimate interest, legal obligation |
| Equipment listing and matching | Equipment data, location, pricing | Contract performance |
| Facilitating communication between parties | Inquiry details, messages | Contract performance |
| Content review and platform safety | Equipment descriptions, user content | Legitimate interest, legal obligation |
| Financial record management | Payment records, invoices, contracts | Contract performance, legal obligation |
| Platform improvement and analytics | Usage data, technical data | Legitimate interest |
| Compliance with legal requirements | All relevant data as required by law | Legal obligation |
PDPO Notice (Hong Kong): The supply of personal data is voluntary. However, failure to provide such data may result in the inability to use the platform's services, including but not limited to verification, equipment listing, and rental transactions.
5. Cross-Border Data Transfer
Your personal data may be transferred to and processed in countries or regions outside the Philippines and Hong Kong, including but not limited to:
- People's Republic of China — for cloud infrastructure hosting and data storage services
- Singapore — for regional cloud service operations
- Other jurisdictions — where our service providers maintain facilities
When transferring data across borders, we ensure that:
- The recipient jurisdiction provides an adequate level of data protection as determined by the National Privacy Commission (NPC) of the Philippines and/or the Privacy Commissioner for Personal Data (PCPD) of Hong Kong
- Appropriate safeguards are in place, including data processing agreements, encryption, and access controls
- Your rights under the Data Privacy Act of 2012 (Philippines) and the PDPO (Hong Kong) remain protected regardless of where your data is processed
- Transfers comply with NPC issuances and circulars on cross-border data sharing, and Section 33 of the PDPO regarding restrictions on transfer of personal data outside Hong Kong
6. Data Retention Period
| Data Category | Retention Period | Disposal Method |
|---|---|---|
| Account data | Duration of account + 5 years after deletion request | Secure deletion |
| Verification documents | Duration of verification validity + 3 years | Secure deletion |
| Equipment and transaction data | 5 years from last transaction | Secure deletion |
| Messages and inquiries | 3 years from last activity | Secure deletion |
| Financial records | 7 years (per tax and accounting regulations) | Secure deletion |
| Privacy policy consent records | 7 years from consent date | Secure deletion |
| Technical/usage logs | 1 year | Automatic rotation |
Personal data will be erased in accordance with the Erasure of Death Records (Privacy) (Exemption) Order (Cap. 486A) where applicable, and upon expiry of the retention period, data will be securely deleted or anonymized.
7. Your Rights as a Data Subject
You have the following rights under applicable data protection laws:
Right to Information
You have the right to be informed of the purposes and methods of data processing. (RA 10173 Sec. 18; PDPO Principle 1)
Right to Access
You may request access to your personal data that we hold. (RA 10173 Sec. 16; PDPO DPP 6)
Right to Rectification
You may request correction of inaccurate or incomplete data. (RA 10173 Sec. 16; PDPO DPP 2)
Right to Erasure
You may request deletion of your data, subject to legal retention requirements. (RA 10173 Sec. 16)
Right to Object
You may object to the processing of your data in certain circumstances. (RA 10173 Sec. 18)
Right to Data Portability
You may request a copy of your data in a structured, machine-readable format. (RA 10173 Sec. 18)
Right to Withdraw Consent
You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before withdrawal. (PDPO DPP 3)
Right to Lodge Complaint
You may file a complaint with the NPC (Philippines) or PCPD (Hong Kong).
To exercise any of these rights, please contact us at rentalph99@gmail.com. We will respond to your request within 30 days.
Hong Kong PDPO Access/Correction Requests: Under the PDPO, you have the right to request access to and correction of your personal data. Requests should be made in writing to our Data Protection Officer at the contact details above. We may charge a reasonable fee for processing access requests as permitted under the PDPO.
8. Data Security Measures
We implement the following technical and organizational measures to protect your data:
- Encryption: Data in transit is encrypted using TLS/SSL; sensitive data at rest is encrypted using industry-standard algorithms
- Access Control: Strict role-based access controls limit data access to authorized personnel only
- Row-Level Security (RLS): Database-level policies ensure users can only access their own data
- Regular Audits: Periodic security reviews and vulnerability assessments
- Incident Response: Procedures in place for timely notification of data breaches as required by law (NPC within 72 hours; PCPD as soon as practicable)
- Data Minimization: We only collect data that is necessary for the stated purposes
9. Third-Party Data Sharing
We do not sell your personal data. We may share your data with third parties only in the following circumstances:
- Service Providers: Cloud hosting, database, and storage providers under strict data processing agreements
- Platform Users: Limited profile information shared between equipment owners and renters to facilitate transactions (with your consent)
- Legal Requirements: When required by law, court order, or government authority
- Business Transfers: In the event of a merger, acquisition, or asset sale, with prior notice to affected users
PDPO Notice (Hong Kong): Your personal data may be disclosed to agents, contractors, or third-party service providers engaged by us for the purposes stated above. Each recipient is contractually obligated to protect your data in accordance with this statement and applicable law.
10. Cookies and Tracking Technologies
We use essential cookies and similar technologies to maintain session state, authenticate users, and ensure platform functionality. We do not use third-party advertising cookies. You may disable cookies in your browser settings, though this may affect platform functionality.
11. Children's Privacy
Our platform is intended for users aged 18 and above. We do not knowingly collect personal data from children under 16 years of age. If you believe we have collected data from a minor, please contact us immediately and we will take steps to delete such data.
12. Changes to This Statement
We may update this Personal Data Collection Statement from time to time. Material changes will be communicated through a prominent notice on our platform and/or via email. The "Last updated" date at the top reflects the most recent revision. Continued use of the platform after changes constitutes acceptance of the updated statement.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:
Bonifacio Global City, Taguig, Metro Manila, Philippines
Philippines: You may file a complaint with the National Privacy Commission (NPC) at https://privacy.gov.ph
Hong Kong: You may file a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) at https://www.pcpd.org.hk