Privacy Policy

This Privacy Policy explains how HSF Information Technology Corps. (“HSF”, “we”, “our”, or “us”) collects, uses, discloses, and safeguards personal data in accordance with Republic Act No. 10173 or the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission (NPC).

This policy applies to all visitors of our website, portfolio companies, applicants, and other data subjects whose personal data we process in the course of delivering our services in the Philippines.

We collect personal data that you voluntarily provide, including but not limited to your name, company affiliation, email address, contact number, project information, and funding requirements submitted through forms, applications, and email correspondence.

We may also collect limited usage data such as IP addresses, device information, and browsing behavior through analytics tools to help improve the performance and security of our digital services. Any cookies or tracking technologies will only be used where legally permitted and, when required, with your consent.

We process personal data only when there is a lawful basis under Section 12 of the DPA, including: (a) when processing is necessary to fulfil your application or request; (b) when required to comply with legal obligations or regulatory reporting; (c) when processing is necessary for the legitimate interests of HSF, balanced against your rights as a data subject; and (d) when you have given your explicit consent.

Personal data may be used to evaluate applications, respond to inquiries, conduct due diligence, manage portfolio relationships, send relevant updates, and comply with reporting or audit requirements. We will only retain personal data for as long as reasonably necessary for these purposes or as mandated by law.

We do not sell personal data. We may share data with trusted service providers, legal or financial advisors, and government agencies when such disclosure is required by law or essential to deliver our services. Any third-party processing is governed by written agreements that uphold data protection standards under the DPA.

We implement appropriate organizational, physical, and technical safeguards aligned with NPC Circular No. 16-01 and industry best practices. These include access controls, secure storage, encryption where applicable, incident response procedures, and regular training for personnel handling personal data.

You have the right to be informed, access, rectify, erase, or object to the processing of your personal data, as well as the right to data portability and the right to file a complaint before the NPC. Requests may be sent to our Data Protection Officer using the contact details listed below. We will respond within the timelines prescribed by the DPA.

Where personal data may be transferred or stored outside the Philippines, we will ensure that adequate protection measures and contractual safeguards are in place and that the transfer complies with NPC Advisory Opinions and applicable cross-border rules.

We may amend this Privacy Policy to reflect changes in regulations or our processing activities. Notice of material changes will be posted on this page with a revised effective date. Continued use of our services after updates constitutes acknowledgment of the revised policy.

For questions, requests, or concerns, please contact our Data Protection Officer:

Data Protection Officer — HSF Information Technology Corps. Email: privacy@hillsandforestcorp.com

If you believe your rights under the Data Privacy Act have been violated, you may also file a complaint with the National Privacy Commission via complaints@privacy.gov.ph.