This privacy policy ("Policy") applies when you access or use PesoHaus. Leapgen Lending Inc.("PesoHaus"), a company duly organized in the Philippines and operating as an administrator, is committed to protecting the information collected from you.

Please read the Privacy Policy carefully before proceeding. This Privacy Policy describes how PesoHaus ("we", "our") collects, stores, uses and protects the information you provide directly related to your use of PesoHaus or indirectly through third parties to obtain information provided through PesoHaus online services. PesoHaus only retains your information for as long as authorized by law or relevant to the purposes for which it was collected.

Therefore, PesoHaus shall only use the information you disclose to us in the manner and for the purposes set out in this Privacy Policy. PesoHaus will access and collect your personal information only if you voluntarily submit the information to us or explicitly consent to us accessing that information. PesoHaus collects your personal information only where necessary and in connection with our dealings with you.This is in accordance and compliance with the rules and regulations of Republic Act No. 10173 otherwise known as the Data Privacy Act of 2012 issued by the National Privacy Commission.

Collection of Personal Data

During account creation or platform access via the PesoHaus Application/Website, you may be required to provide, and hereby consent to the collection of: information used to identify you (e.g. name and biometric information),background, profession, addresses, photograph (through camera access), contact and mobile numbers, email addresses, IP addresses, operating systems, browser types, financial data, creditworthiness information, emergency contact information (e.g. names,contact number,relationship to contact);device information(“Personal Information”) as well as your nationality, marital status, age, educational attainment, valid government ID numbers (“Sensitive Personal Information”)and other information and data generated that you provide in relation to the permissions you grant to our application and by using, accessing, or availing our products and/or services (“Personal Data”).

The collection of personal data may occur through manual or automated processes, including but not limited to: personal data submitted by you; any analysis of the way you use and manage our accounts/facilities; from publicly available sources or registries; from government authorities, regulators and/or law enforcement agencies; from third parties or other sources; and/or from any information provided and/or collected when you visit our website, including metadata, or any information collected from cookies on some of our websites. However, such data will only be collected if you consent to the disclosure of the personal data.

App Permissions

Camera

PesoHaus will need access to your mobile device's camera to take your ID photo and facial recognition image, speeding up the loan application process. Image information will be uploaded over a secure connection and stored to our server (https://pesohaus.com). We will never share your personal data with third parties without your permission.

Location

PesoHaus may request access to your device's approximate location to enhance your user experience. This permission is optional. We request access to location information to improve our services and enhance security measures to prevent fraudulent activities. You can choose to grant or deny this permission at any time in your device settings, and denying access will not affect your use of PesoHaus. If you agree to this permissions, the approximate locationinformation is uploaded to and stored over a secure connection to our servers (https://pesohaus.com). We will never share your personal data with third parties without your permission.

SMS

With your explicit consent, PesoHaus will collect only SMS data related to financial transactions for the purposes of risk management and fraud prevention. The information collected includes sender details, message dates, and content. All data will be securely transmitted to our servers (https://pesohaus.com). You have the option to decide whether this data is collected and can request its deletion at any time through the account deletion feature in the app.

Purpose of Collecting Personal Information

The information we collect will be used to contact or identify you, including but not limited to:

Verify your identity and/or other information you provide to us;

To evaluate your eligibility to use our products or services;

Repay your loan through PesoHaus;

Resolve any problems you or other customers encounter when using the PesoHaus Service;

Provide customer service or support and resolve disputes and complaints;

To administer our systems, maintain quality of service and compile general usage statistics;

Analyze and improve our services;

Detect, combat and prevent fraud, attempted fraud and/or other unlawful uses of our Services;

Comply with applicable laws, regulations and rules;

Contact a credit counseling or fraud prevention agency;

After appropriate notification, and if you do not object to the use of your information for direct marketing purposes, to send you marketing or advertising notices or other promotional offers;

How We Share, Transfer and Publicly Disclose Your Personal Information

Sharing

We will not share your personal information with companies, organizations or individuals other than the service providers of this product, except in the following circumstances:

1.Sharing with explicit consent: After obtaining your explicit consent, we will share your personal information with other parties.

2.Sharing under legal circumstances: We may share your personal information externally in accordance with laws and regulations, litigation and dispute resolution needs, or as required by administrative and judicial authorities in accordance with the law.

3.Sharing with authorized partners: Only to achieve the purposes stated in this privacy policy, some of our services will be provided jointly by us and authorized partners. We may share some of your personal information with partners to provide better customer service and user experience. We will only share your personal information for legal, legitimate, necessary, specific, and clear purposes, and we will only share personal information necessary to provide services. Our partners have no right to use the shared personal information for other purposes unrelated to products or services.

4.Third-party SDK providers that provide technical services.

Transfer

We will not transfer your personal information to any company, organization or individual, except in the following circumstances:

1.Provided in accordance with applicable laws and regulations, legal process requirements, mandatory administrative or judicial requirements;

2.Obtain your explicit consent or authorization in advance;

3.In similar transactions involving mergers, acquisitions, bankruptcy liquidations, asset transfers, etc., if personal information is transferred, we will inform you of the name and contact information of the recipient; we will require the new holder to The company or organization that holds your personal information will continue to be bound by this policy, or the company or organization will be required to seek your authorization and consent again. If it goes bankrupt and has no successor, your personal information will be deleted or anonymized.

Public Disclosure

We will only publicly disclose your personal information under the following circumstances:

1.We may publicly disclose your personal information with your explicit consent or based on your active choice; if we publicly disclose your personal information based on your explicit consent, our bank will inform you of the purpose and type of disclosure of personal information; If sensitive information is involved, in addition to the above, we will also inform you of the content of the sensitive information, the necessity of processing sensitive personal information and the impact on your personal rights, and obtain your express consent in advance.

2.Comply with the requirements of any applicable laws and regulations, court rulings or judgments, or mandatory requirements of government agencies;

3.Other situations stipulated by laws and regulations.

Storage of Personal Information

Your personal information will be stored entirely in the Philippines. If it involves cross-border transfer of personal information overseas, we will inform you of the purpose of transferring personal information abroad, the type of personal information and the data recipients in accordance with laws, regulations and relevant regulatory requirements, and obtain additional consent.

Protection of Personal Information

We promise that we will ensure that information security protection reaches a reasonable level of security. In order to ensure the security of your information, we will take reasonable and necessary measures to protect your information based on the current technical level, and adopt physical, technical and organizational management security measures to reduce the risk of loss, misuse, unauthorized access, disclosure and alteration. Risks, including but not limited to transport layer data encryption, firewalls and encrypted storage, isolated storage, physical access control and information access authorization control, setting up an information security committee or other personal information protection organization, establishing internal information security management regulations, conducting employee information Security protection awareness training, etc.

We undertake to adopt commercially feasible systems and measures to protect the security of your personal information. If our commercially feasible systems and measures fail, your information may still be compromised. We will inform you if and when such breach happens, and we undertake to remediate and prevent future breaches. We disclaim liability from breaches due to security risks that attend all internet-related communications beyond what our commercially feasible systems and measures are able to handle. When it is difficult to inform the data subjects one by one, we will issue announcements in a reasonable and effective manner. At the same time, we will also proactively report the handling of personal information security incidents in accordance with the requirements of regulatory authorities.

Your Rights As a Data Subject

You can contact us at support@pesohaus.com to exercise your rights

1.Right to notification and consent

We will provide you with certain information about how we collect your information, how we use your information (and our legal basis for doing so), with whom we share your information, where we obtain your information and Your rights as a data subject. This information is provided within the PesoHaus App and in this Privacy Policy.

2.Right of access

You may request a copy of the personal data (as defined under applicable law) that we hold about you (and the information about you to which such personal data relates), unless providing some or all of the data would be contrary to the rights and freedoms of others or Applicable law would adversely affect our failure to comply with your request.

3.Right to rectification

You can ask us to correct any information that you believe is inaccurate. We will promptly update any such information. For your request, you may be asked to provide supporting evidence or other documentation so that we can verify the accuracy of the request.

4.Right to erasure (“right to be forgotten”)

You may request that we delete your Personal Data (as defined by applicable law):

• If you consider that we no longer need to retain such personal data;

• If you believe that we do not have lawful grounds for the processing;

• If you believe that we are using such personal data unlawfully;

• If you believe that applicable law requires us to do so.

5.Right to suspend, withdraw, block, remove, restrict processing of personal information

You may ask us to stop using your Personal Data (as defined by applicable law):

• If you believe that such personal data is inaccurate;

• If you believe that our use of such personal data is unlawful;and/or

• If you do not want us to destroy such personal data because you require the personal data for legal proceedings;

• If you tell us there is no legitimate reason to use it and we are considering your request.

6.Right to indemnity

You have a right to be indemnified for any actual damages sustained due to inaccurate, incomplete, outdated, false, and unlawfully obtained or unauthorized use of information. If found liable, our liability under this provision shall be limited to the amount of the principal of the subject loan you have with us.

7.Right to data portability

If we use your information on the basis of your consent, or because we require it to perform our contractual obligations to you, you can request that we provide you with your personal data in a structured, commonly used format (in accordance with applicable law Definition): use a machine-readable format or transmit it to another data controller.

8.Right to object

You have the right to object whenever we use your personal data based on our legitimate interests (as defined by applicable law).

Deletion of Personal Data

We will retain your personal data, registration and transaction records with third-party data storage providers for the period necessary to fulfill the purposes outlined or up to five (5) years in adherence with the requirements of the National Privacy Commission and all other applicable laws and regulations; for the establishment, exercise or defense of legal claims; or for legitimate business purposes and must comply with applicable industry standards.

When retention is no longer permitted, your personal data will be destroyed in an irretrievable and unusable form in accordance with our physical and/or technical information security measures. Such information will be disposed of or discarded in a secure manner that prevents further processing, unauthorized access or disclosure of your personal information to any other party or the public, or detrimental to the interests of the data subject.

We reserve the right to take necessary action if we believe that such removal or cessation would prevent us from fulfilling our obligations under applicable law.

If we become aware or reasonably suspect that your personal data is incomplete, out of date, false, unlawfully obtained, or used for unauthorized purposes, we will suspend, withdraw or order your personal data to be blocked, deleted or destroyed from our systems ; are no longer necessary for the purposes for which they were collected, or as soon as you withdraw your consent or object to the processing, and there is no other legal basis or overriding legitimate interest for the processing.

PesoHaus may periodically update this Privacy Policy to reflect any changes in relevant laws and regulations, or any improvements in the way we handle your personal information. PesoHaus shall notify users of any significant changes by posting a notification on the app, text message or email. By continuing to use our products and services, you agree to the updated terms of this Privacy Policy.

If you have any questions about this privacy policy, you can contact us by:

App name: PesoHaus

Email: support@pesohaus.com

Working hours: Monday to Saturday 9:00 am - 6:00 pm

Address: 19A East Wing Octagon Center, San Miguel Ave., Ortigas Center, San Antonio, Pasig 1600, Philippines