OneLink Data and Privacy Policy
This privacy policy relates specifically to the OneLink Automated Fare Collection system.
Privacy Statement
At OneTeam, we value your privacy and are committed to protecting your personal information. This privacy statement outlines how we collect, use, and safeguard your data.The privacy practices outlined in this statement are intended for individuals residing in or based in the Philippines. They comply with the Data Privacy Act of 2012 (Republic Act No. 10173).
Collection, Use, and Processing of Personal Information
We collect personal information that you provide to us. This information may include your name, email address, date of birth, contact details, location details and any other data you choose to share. We use your personal information to provide and improve our services, communicate with you, and personalise your experience. Your data may also be processed for analytical purposes, ensuring compliance with legal obligations, and enhancing our overall operations.
Rest assured, we take the necessary measures to protect your personal information throughout its lifecycle.
Disclosure of Personal Information
We may disclose your personal information in the following circumstances:
-
As service providers, we may share your data with trusted third-party service providers who assist us in delivering our services, such as customer support. These providers are committed to protecting your information and will use it only for the purposes for which it was shared.We will also be sharing location information, which will be used in aggregated form to enhance our services and improve your experience. By analyzing this data, we aim to deliver better experiences for all our users.
-
For legal requirements, we may disclose your personal information if required by law or in response to valid requests from governmental authorities.
-
We may share your information with third parties if you provide explicit consent for us to do so.
We are committed to ensuring that your personal information is handled securely and responsibly in any disclosures made.
Storage and Safeguarding of Cardholder Personal Information
We prioritise the security of your personal information. All data is stored in secure environments that employ industry-standard security measures to protect against unauthorised access, loss, or misuse.
-
Sensitive information, such as cardholder details, is encrypted during transmission and storage to ensure confidentiality.
-
Access to personal information is limited to authorised personnel only, who require this data to perform their job functions.
-
We conduct regular security audits and assessments to identify and mitigate potential vulnerabilities in our systems.
-
We retain your cardholder personal information only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal requirements.
Information is collected to understand, diagnose, and support data-driven decision-making regarding the public transport network, including:
-
Calculating accurate fares, public revenue, and cost recovery for transport services.
-
Providing reduced fares for eligible customers.
-
Verifying requests for refunds when customers are incorrectly charged or dispute a charge, and confirming ongoing entitlements.
-
Ensuring ticketing compliance and enforcement.
-
Identifying cards that require compensation due to unforeseen network events.
-
Gathering insights to track the busiest routes and the number of passengers tapping on and off.
We are committed to maintaining the highest standards of security to safeguard your information and ensure your trust.
Children’s data
Children under the age of 13 will be required to obtain consent from their parents or legal guardians prior to using our services, which include the collection, processing, and possible disclosure of their personal information. This consent can be provided either through a verified parental account or by submitting a signed consent form. We may request additional information to verify the authenticity of the consent provided, ensuring compliance with privacy regulations and safeguarding the child's personal data.
What are your data protection rights
As an individual, you have certain rights regarding your personal information. These rights may include:
-
Right to be Informed: You have the right to be informed about the collection and processing of your personal data, including its purpose. Please read this privacy policy carefully before consenting to data collection and processing.
-
Right to Access: You have the right to access your personal data by contacting us through the information provided on our website.
-
Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal information.
-
Right to Erasure: You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent.
-
Right to Restrict Processing: You have the right to request the restriction of processing your personal data under certain conditions.
-
Right to Data Portability: You have the right to request that we transfer your personal data to another organisation or directly to you, under certain circumstances.
-
Right to Object/opt-out: You have the right to object to the processing of your personal data in certain situations, particularly for direct marketing purposes.
-
Right to Withdraw Consent: If you have provided consent for us to process your personal data, you have the right to withdraw that consent at any time.
-
Right not to be subject to automated decision-making: You have the right to object to the processing of the personal data, including automated processing.
-
Right to obtain data: You have the right to obtain a copy of your data in an electronic or structured format.
-
Other rights: You have the right to receive compensation for damages caused by inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data. Additionally, you have the right to file a complaint with the NPC.
To exercise any of these rights, please contact us using the information provided in our contact section. We are committed to responding to your requests in a timely manner and in accordance with applicable laws.
Changes to our privacy policy
We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.
-
When we make significant changes, we will notify you through a notice on our website, allowing you to review the updated policy.
-
We encourage you to periodically review this privacy policy to stay informed about how we protect your information and your rights.
-
The date at the top of this policy indicates when it was last updated. Your continued use of our services after any changes constitutes your acceptance of the revised policy.
If you have any questions or concerns about changes to this privacy policy, please contact us.
Compliance with Data Protection Laws
We are committed to complying with all applicable data protection and privacy laws, including but not limited to the Data Privacy Act of 2012 (Republic Act No. 10173) and any other relevant regulations. All collection, processing, storage, and disclosure of personal information shall be conducted in accordance with these legal standards.