Privacy notice

This notice explains how Tamapay handles your personal data when you visit our website or pay a property developer through us. We process personal data in line with the Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and the issuances of the National Privacy Commission.

It covers buyers and anyone else who pays through Tamapay, people who contact us, and visitors to our website. When your developer shares your details with us so we can send you a payment link, the developer is also responsible for that data under its own privacy policy.

• Contact details: your name, email address and, if you give it, your phone number and country of residence.
• Payment details: the developer, project and unit you are paying for, amounts, dates and the payment method used.
• Card details: cards are processed by a certified payment processor. We keep only limited details, such as the card type and last four digits, to identify the card to you.
• Verification details: identification documents or source-of-funds information, only where the law requires us to check them.
• Technical details: your device, browser, IP address and how you use our website.
• Messages: anything you tell us when you contact support.

• To process your payments and send them to your developer with the right unit details.
• To send you receipts, payment links and, if you use auto-debit, reminders and notices.
• To detect and prevent fraud and keep our systems secure.
• To meet our legal duties, including anti-money laundering rules and record keeping.
• To answer your questions and handle refunds and disputes.
• To understand how our website is used and improve it.

We rely on what is needed to carry out your payment, on our legal obligations, on our legitimate interest in running a safe service, and, where required, on your consent. We do not sell your personal data.

• Your developer, so it can match your payment to your account and unit.
• Banks, card networks, e-wallets and payment processors that carry out the payment.
• Service providers that host our systems, send emails or help us prevent fraud, under contracts that require them to protect your data.
• Government agencies, regulators and courts when the law requires it.

Our website uses cookies that it needs to work, and analytics tools that tell us which pages are visited. You can block or delete cookies in your browser settings. Some parts of the site may not work properly without them.

Because you may be paying from abroad, and some of our service providers operate overseas, your data may be handled outside the Philippines. When that happens we make sure it is protected to the standard Philippine law requires.

We use encryption, access controls and monitoring to protect your data, and only staff who need it can see it. If a breach puts your data at risk, we will notify you and the National Privacy Commission as the law requires.

We keep payment records for as long as the law requires, which for financial records can be several years after the payment. Other data is kept only while we need it for the purposes above. After that we delete it or make it anonymous.

Under the Data Privacy Act you have the right to:

• be told how your data is used;
• see a copy of your data;
• have inaccurate data corrected;
• object to processing, or withdraw consent where we rely on it;
• ask us to delete or block your data, unless we must keep it by law;
• receive your data in a format you can take elsewhere;
• be compensated for damage caused by misuse of your data;
• file a complaint with the National Privacy Commission.

To use any of these rights, contact us through our contact page and say it is a privacy request. We may ask you to confirm your identity first.

We will post any update to this notice on this page with a new date, and tell you directly if a change significantly affects you.

Questions about privacy can go to our Data Protection Officer through our contact page. For anything else, use our contact page.