The Balikbayan Box System is committed to protecting the privacy and personal information of its users in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC).This Data Privacy Policy explains how personal information is collected, processed, stored, retained, and disclosed in connection with the use of the Balikbayan Box System. It also informs users of their rights as data subjects and the measures implemented to protect their personal information.This Policy applies to individuals who register for or use the System, including senders, consignees, and other authorized users.
I. Information Collection and Processing
In the course of registering for and using the Balikbayan Box System, personal information may be collected and processed as necessary to facilitate user registration, identity verification, shipment booking, customs monitoring, transaction processing, and other related functions.The processing of personal information shall be undertaken based on the applicable lawful grounds under the Data Privacy Act of 2012, depending on the nature and purpose of the processing activity.
A. Types of Personal Information Collected
Depending on the user's role and the services or functionalities accessed, the System may collect the following categories of information:
1. Personal and Account Information
Full name;
Date of birth;
Nationality;
Residential address;
Email address;
Mobile or contact number;
Account credentials and user identification details; and
Other information necessary for account registration and verification.
2. Identity Verification Information
Type of identification document presented;
Identification document number and details;
Photographs or captured images of identification documents;
Selfie photographs or facial images submitted for identity verification;
Liveness verification results; and
Other information required to establish and verify the identity of the registered user.
3. Sender and Consignee Information
Full name of sender and consignee;
Residential or delivery addresses;
Contact information;
Relationship or other relevant information, where required for transaction processing; and
Other details necessary to facilitate the shipment and delivery of balikbayan boxes.
4. Shipment and Transaction Information
Booking and shipment reference numbers;
Item descriptions and categories;
Declared quantities and values of goods;
Shipment and package details;
Supporting documents and attachments;
Shipment history and transaction records;
Information relating to sender privileges, applicable exemptions, and availments; and
Other information necessary for customs monitoring and compliance verification.
5. Payment and Financial Transaction Information
Payment reference numbers;
Transaction amounts;
Payment status and confirmation details;
Relevant billing and transaction records; and
Other information necessary to verify and reconcile payments.
Payment credentials and sensitive financial information may be processed directly by authorized payment service providers, subject to their applicable privacy and security arrangements.
6. Technical and System Usage Information
Internet Protocol (IP) addresses;
Device and browser information;
Login records and timestamps;
System activity and transaction logs;
Audit trail information; and
Other technical information generated through the use of the System.
B. Purposes of Collection and Processing
Personal information may be collected and processed for the following purposes:
Facilitating user registration, account creation, and account management;
Verifying the identity and authenticity of registered users through document verification, selfie capture, and liveness checks;
Facilitating the creation, submission, and management of balikbayan box bookings;
Recording and processing shipment declarations, including item descriptions, quantities, and declared values;
Monitoring sender privileges, availments, and applicable exemptions in accordance with customs laws and regulations;
Supporting the identification of shipments that may require further review, verification, or examination;
Supporting the computation or estimation of applicable customs duties, taxes, and other charges;
Facilitating payment verification and transaction reconciliation;
Providing shipment monitoring, tracking, and status updates;
Generating operational reports, dashboards, and audit trails;
Supporting the Bureau of Customs (BOC) in the performance of its regulatory, monitoring, enforcement, and revenue protection functions;
Preventing fraudulent activities, unauthorized transactions, and misuse of the System;
Maintaining system security, reliability, and operational efficiency;
Addressing user inquiries, complaints, and technical support requests; and
Complying with applicable laws, regulations, government directives, and other legitimate requirements.
C. Automated Processing and Artificial Intelligence-Assisted Functionalities
The System may utilize automated processing, data analytics, and artificial intelligence (AI)-assisted functionalities to support identity verification, shipment monitoring, valuation estimation, and the identification of potential discrepancies.Information submitted by users may be processed through these functionalities to generate estimates, indicators, recommendations, and other outputs intended to support operational and regulatory decision-making.Where applicable, system-generated results shall be subject to appropriate review and verification by authorized personnel.Automated processing and AI-assisted functionalities shall not, by themselves, constitute a final determination of customs valuation, duties, taxes, eligibility for exemptions, or shipment clearance.
D. Sources of Personal Information
Whenever practicable, personal information shall be collected directly from users through the System's registration forms, identity verification processes, booking interfaces, declarations, and other applicable functionalities.Information may also be obtained from authorized third parties, government databases, service providers, or other legitimate sources when necessary for identity verification, transaction processing, customs monitoring, and compliance purposes, subject to applicable laws and regulations.
II. Disclosure and Sharing of Personal Information
To facilitate the services and functions of the Balikbayan Box System, personal information may be made accessible or disclosed, when necessary and legally authorized, to the following:
1. Bureau of Customs (BOC)
For customs administration, shipment monitoring, verification of sender privileges and availments, regulatory oversight, enforcement, revenue protection, and other official functions.
2. e-Konek Pilipinas, Inc.
In its authorized capacity as the System provider and/or service provider, for system administration, technical support, maintenance, security, and other services covered by applicable agreements and data protection arrangements.
3. Authorized Government Agencies
Where disclosure is necessary for the performance of their respective mandates or pursuant to applicable laws, regulations, or lawful government requests.
4. Authorized Logistics and Shipping Partners
Including freight forwarders, deconsolidators, consolidators, and other authorized parties involved in the handling, processing, and delivery of balikbayan boxes.
5. Payment Service Providers and Financial Institutions
For payment processing, verification, reconciliation, and related financial transactions.
6. Technology and Service Providers
Including authorized third-party providers engaged to support identity verification, system hosting, data processing, security, and other technical functionalities.
7. Other Authorized Parties
Where disclosure is necessary to fulfill legitimate purposes, comply with legal obligations, protect the rights and interests of the relevant parties, or where otherwise permitted under applicable laws.Personal information shall only be disclosed to authorized recipients for legitimate and specified purposes and subject to applicable data protection requirements and contractual safeguards.
III. Storage, Retention, and Protection of Personal Information
The System shall implement appropriate organizational, physical, and technical security measures to protect personal information against unauthorized access, disclosure, alteration, loss, destruction, or other unlawful processing.These measures may include:
Access controls and authentication mechanisms;
Encryption and secure data transmission;
Activity monitoring and audit trails;
Secure data storage and backup procedures;
Appropriate access restrictions for authorized personnel; and
Other applicable information security safeguards.
Personal information shall only be retained for as long as necessary to fulfill the purposes for which it was collected, comply with applicable legal and regulatory requirements, support legitimate operational requirements, and resolve disputes or enforce applicable agreements.Upon the expiration of the applicable retention period, personal information shall be securely disposed of, anonymized, or otherwise processed in accordance with applicable laws, regulations, and records management policies.
IV. Rights of Data Subjects
In accordance with the Data Privacy Act of 2012, users whose personal information is collected and processed through the Balikbayan Box System shall have the following rights, subject to applicable limitations and conditions:
1. Right to Be Informed
The right to know whether personal information pertaining to them is being or has been processed, including the purposes and scope of such processing.
2. Right to Access
The right to reasonably request access to their personal information being processed.
3. Right to Rectification
The right to request the correction of inaccurate or incomplete personal information.
4. Right to Erasure or Blocking
The right to request the removal, blocking, or destruction of personal information when legally justified and subject to applicable retention requirements.
5. Right to Object
The right to object to the processing of their personal information when the conditions under applicable laws are met.
6. Right to Data Portability
The right to obtain a copy of their personal information in an accessible format, subject to applicable requirements.
7. Right to Damages
The right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal information, subject to applicable laws.
8. Right to Lodge a Complaint
The right to file a complaint with the National Privacy Commission if they believe their personal information has been mishandled or their data privacy rights have been violated.Requests relating to personal information may be submitted through the designated Data Protection Officer or the appropriate privacy contact identified by the responsible Personal Information Controller.The exercise of these rights shall be subject to applicable legal obligations, including requirements relating to customs administration, regulatory compliance, and records retention.
V. Contact Information and Privacy Inquiries
For questions, concerns, or requests relating to the collection and processing of personal information through the Balikbayan Box System, users may contact the designated Data Protection Officer or the appropriate privacy office of the responsible Personal Information Controller through the following channels:
Mail: Public Information and Assistance Division (PIAD) Office located at the Office of the Commissioner Building, Gate 3, South Harbor, Port Area, Manila
This Privacy Policy may be amended or updated when necessary to reflect changes in the System's functionalities, operational requirements, applicable laws and regulations, or data protection practices.Any revisions shall be published through the System, together with the applicable effectivity date.Users are encouraged to periodically review this Privacy Policy to remain informed of how their personal information is collected, processed, and protected.
