FORDAYS JAPAN INTERNATIONAL INC.
DATA PRIVACY POLICYINTRODUCTION
Fordays Japan International Inc. (“Fordays”) is fully aware of the importance of protecting thepersonal information of its members and other customers. Recognizing this responsibility, we
have established this Privacy Policy to ensure members’ personal information is handled in asafe and appropriate manner.
Fordays’ privacy practices are developed in accordance with Republic Act No. 10173 or the Data
Privacy Act of 2012 and its implementing rules and regulations (collectively, the “DPA”).
This privacy policy (“Policy”) explains how Fordays implements its commitment to collect andprocess personal data in accordance with the DPA. It sets out information that we must provide
to the members and other customers (collectively, “Data Subjects”) whose personal data wecollect and process.
When we use the term “personal data”, we mean data that constitutes personal information or
sensitive personal information, as these terms are defined under the DPA.
WHAT PERSONAL DATA DO WE COLLECT AND PROCESS?
We collect and process personal data necessary for Fordays’ corporate and business purpose. We
obtain most of this data directly from Data Subjects. Such personal data consists of, amongothers:

Complete Name
Home/ Office Address
Email Address
Home/ Office/ Mobile Number
Birthdate
Marital Status
TIN Number
Details of any Government-Issued ID with Photo and Signature (e.g., Passport, Driver’s
License, SSS, UMID, Senior Citizen, PWD, PRC, OFW, and Postal)
Bank Account Number
ACR i-Card (for foreigners)

WHAT DO WE USE THE PERSONAL DATA FOR? HOW DO WE USE IT?
We collect and process personal data for which Data Subjects have provided the data or made itotherwise available to us or to the public, and to enable us to fully and efficiently achieve thosepurposes.

Among these purposes are:
1. Processing of membership applications;
2. Processing of payment for purchases made by members;
3. Transferring of bonus payments to members’ accounts;
4. Shipping of products ordered;
5. Providing members with information about Fordays’ activities (e.g., sales promotions)and services;
6. Confirming members’ participation of Fordays’ seminars and other Fordays events;
7. Conducting market research, data analysis, questionnaires, etc.; and8. Handling, recording, and managing inquiries from the member themselves or from a thirdparty.
Thus, we would collect and process personal data during the following instances:
1. upon the request of the Data Subject;
2. when the consent of the Data Subject has been obtained;
3. when the data collected is necessary in order to enter into a contract;
4. when it is needed to comply with a legal obligation or is otherwise required by law;
5. when there is a legitimate interest on the part of Fordays; or
6. under such other basis as may be permitted by law.
When the consent of the Data Subject is required, such consent may be obtained through theData Subject’s signing of a consent form or similar document or through other means inaccordance with the provisions of the DPA.
Processing will be conducted only as may be required by these purposes and in the ordinary
course of Fordays’ operations. We utilize standard manual and computerized methods andsystems to file, store and process personal data.
HOW MAY WE DISCLOSE PERSONAL DATA?
To achieve Fordays’ corporate and business objectives, it may need to transfer or providepersonal data to persons and entities outside the association, which requires such personal data.
These would include government and regulatory agencies, counterparties in contracts for goods
and/or services, Fordays’ members, and organization and entities with which Fordays partners orcooperates with, on projects, events and activities. Some of these persons and entities may beoutside the Philippines.
Fordays undertakes to enter into contracts with the recipients of personal data, when required by
the DPA or other laws.
HOW LONG WILL WE RETAIN PERSONAL DATA?
Fordays will retain personal data for as long as it remains necessary or relevant for the purposes
set out in this Policy and in accordance with the terms and conditions of the relevant agreementwith the Data Subjects, unless a longer retention period is required to meet legal or regulatory
requirements.

WHAT ARE THE RIGHTS OF DATA SUBJECTS?
Under the DPA, Data Subjects have the right to be informed of their data privacy rights. Theserights are:
1. Right to be informed – prior to collection and processing of their personal data, Data
Subjects have the right to be informed of the following:a. The fact of collection and processing of personal data pertaining to the Data
Subject;
b. Description and categories of personal data being collected and processed;
c. Purpose of the collection, and processing, including the purposes for data sharing
or automated processing;d. Lawful basis of the collection and processing, when the Data Subject has not
given consent;e. Scope and method of personal data processing;f. Identities of intended recipients of personal data;
g. Methods and logic used for automated processing, if any;h. Identity and contact details of the personal data controller or its representative;
i. Retention period; andj. Rights of a Data Subject.
This Policy sets out this information, where applicable.
2. Right to object – Data Subjects have the right to indicate their refusal to the collection
and processing of their personal data, including processing for direct marketing,automated processing, or profiling. They also have the right to be informed and towithhold their consent to further processing in case there are any changes or amendments
to information given to them concerning the processing of their personal data. Once they
have withheld consent, further processing of their personal data will no longer be allowed,
subject to certain exceptions under the law.
3. Right to access – upon request in writing, Data Subjects should be given access to thefollowing:a. Contents of their personal data that were processed;
b. Sources from which their personal data were obtained;
c. Identities and addresses of recipients of their personal data;
d. Manner by which their personal data were processed;
e. Purposes for granting access to the recipients of their personal data;
f. Information on automated processing, in case the data was used as the sole basis
for any decision that significantly affects or will significantly affect them as aData Subject;g. Date when their personal data was last accessed or modified;h. The designation, identity, and address of the personal information controller.

4. Right to rectification – Data Subjects have the right to dispute any inaccuracy or error in
their personal data and may request the controller to immediately correct any suchinaccuracy or error. Upon reasonable request, and after the correction has been made, thecontroller should then inform any recipient of their personal data of its inaccuracy and thesubsequent rectification that was made.
5. Right to erasure or blocking – in the absence of any other legal ground or overriding
legitimate interest for the lawful processing of personal data, or when there is substantial
proof that personal data is incomplete, outdated, false, or has been unlawfully obtained,
they may request the controller to suspend, withdraw, or order the blocking, removal, ordestruction of personal data from its filing system. The controller may also notify those
who have previously received their processed personal data.
6. Right to damages – they have the right to be indemnified for any damages sustained due
to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of
their personal data, taking into account any violation of their rights and freedoms as aData Subject.
7. Right to data portability – in case personal data was processed through electronic means
and in a structured and commonly used format, they have the right to obtain a copy of
their personal data in such electronic or structured format for their further use, subject tothe guidelines of the National Privacy Commission (“NPC”) with regard to the exerciseof such right.
8. Transmissibility of rights of the Data Subject - upon their death, or in case of theirincapacity or incapability, their lawful heirs and assigns may invoke their rights as a Data
Subject in their place and stead.
9. Right to lodge a complaint before the NPC – Data Subjects also have the right to lodge acomplaint before the NPC in accordance with their relevant rules of procedure.
The rights mentioned above subject to limitations provided by law.
OUR DATA PRIVACY OFFICE
We have appointed a Data Protection Officer to oversee data privacy compliance. She may becontacted at:Marianne V. Bonus
G/F SyCipLaw Center
105 Paseo de Roxas, San Lorenzo Village,Makati City, Metro Manila, 1226(+632) 838 8669
support_ph@fordays.com.ph

SECURITY MEASURES
Fordays has taken appropriate security measures to protect personal data that it collects andprocesses against unauthorized access or unauthorized alteration, disclosure, or destruction,
appropriate to the sensitivity of the data.
Fordays protects personal data shared with third party service providers through contractual orother means in an effort to ensure that any such service provider will provide a comparable levelof protection while personal information is being processed by that service provide.
INCIDENT MANAGEMENT
Fordays will comply with the relevant provisions of the DPA on addressing personal data
breaches and security incidents, including notification to the NPC and relevant Data Subjects, if
necessary and required.
AMENDMENTS
Fordays may amend or update this Policy from time to time. Amendments and supplements will
be made available at our website: https://www.fordaysjapan.ph/ and office located at the GroundFloor, SyCipLaw Center, 105 Paseo de Roxas, Makati City.