Privacy Policy
For access and use of ISELCO I Website and Mobile App
The Isabela-I Electric Cooperative, Inc. (ISELCO-I) is committed to safeguarding your data privacy rights and ensuring transparency in the collection, use, and protection of your personal information, in accordance with Republic Act No. 10173 or the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and other relevant policies, including various issuances of the National Privacy Commission (NPC).
This Privacy Policy sets forth the categories of personal data we may collect, the purposes for which such data is processed, and the measures implemented to maintain its security. By accessing or using our services, you acknowledge and agree to the terms and practices described herein.
Personal data we collect
To provide and enhance your experience with our Services, we may require you to submit certain personal data. Such personal data will be collected, stored, and processed in accordance with this Privacy Policy.
The types of personal data we collect vary depending on your transaction with us. These generally consist of the following information:
- Data you provide through our website, including when you contact us to raise concerns, use our online applications, or access billing information. This may include, but is not limited to, your name, postal address, e-mail address, and mobile number.
- Information obtained when you sign in via third-party login providers (e.g., Facebook or Google), which may include your name, e-mail address, and profile picture. These data may be used to create and maintain your account, deliver our services, and personalize your user experience.
Purposes of Collected Personal Data
We process your personal data for the purpose of delivering and improving our services and for maintaining effective communication regarding your account. In particular, your name, e-mail address, and other related details may be utilized for the following purposes:
- Provision, enhancement, and management of our electric services, including the creation and administration of your account;
- Delivery of customer support services;
- Response to inquiries, concerns, or complaints; and
- Distribution of service-related communications.
Data Access, Disclosure, and Sharing
Access to your personal data is restricted only to authorized ISELCO I personnel who require such access to perform their official duties in relation to the personal data involved, including meter reading, field inspections, energization, and service restoration.
Your personal data may also be shared or disclosed based on your consent, legitimate business interest, and lawful processing, to persons you have authorized in writing, as well as to government authorities or agencies as required by applicable laws, rules, and regulations, or in response to a valid subpoena or court order.
Retention, Disposal, and Destruction/Deletion of Personal Data
We keep your personal data only for the duration required to serve its intended purpose. In certain cases, pertinent laws, rules, and regulations may require us to hold it longer. Personal data may be retained in order to:
- Provide you with our services;
- Meet our legal responsibilities;
- Help settle disputes or complaints;
- Make sure agreements are followed and our rights are protected; and
- When your personal data is no longer needed, we dispose of and destroy it in such a way that it can no longer be accessed or used again.
Depending on the type of data, this may involve:
- Shredding paper records;
- Permanently deleting electronic files; and
- Wiping or overwriting hard drives and storage devices.
This way, your data is always handled responsibly and in line with the law. Users have the right to request the deletion of their personal data collected upon request and approval.
To keep your information safe, we may ask you to confirm your identity before we can process a deletion request. This could mean providing a bit more information or verifying some details on your account.
When you send us a valid request to delete your data, we’ll do our best to respond within seven (7) days. After we receive your request, we’ll stop collecting your information and securely erase or delete your data we have on file.
We may retain some personal data in backup systems for a limited period of time to ensure the integrity of our systems and to comply with legal or regulatory requirements. After the retention period has expired, we will securely dispose of the personal data.
Data Security
We take the protection of your personal data seriously and have implemented appropriate physical, technical, and organizational safeguards to prevent its unauthorized access, disclosure, alteration, or destruction. Relative thereto, industry-standard encryption technologies have been employed to protect personal data both in transit and at rest.
It is important to note, however, that no method of electronic transmission or storage is entirely secure, and therefore, absolute protection of personal data cannot be guaranteed.
To further mitigate risks, we encourage users to adopt the following security practices with respect to their ISELCO I Online accounts:
- Use robust login credentials: Create unique usernames and strong passwords with at least fifteen (15) characters, including uppercase and lowercase letters, numbers, and special symbols;
- Avoid password reuse: Maintain separate passwords for different accounts so that a compromise of one does not endanger others;
- Remain vigilant against phishing attempts: Exercise caution with unsolicited messages or emails requesting sensitive information, even if they appear to come from trusted sources;
- Limit public sharing of personal details: Refrain from posting personal data on social networks or forums, as it may be exploited to compromise your accounts; and
- Keep your information up to date: Ensure your contact details are current so we can notify you promptly if an issue arises.
Your Rights as Data Subjects
You’re in control of your personal information. You have the right to:
- Be informed. You have the right to be informed whether your personal data shall be, is being, or has been processed, including the existence of automated decision-making and profiling.
- Access. You have the right to reasonable access, upon written request, the contents of your personal data that were processed and the manner by which these were processed; the sources from which these were obtained; the recipients and reasons for disclosure, if any; date when your information was last modified; and information on automated processes where your information will or is likely to be made as the sole basis for any decision that significantly affects or will affect you.
- Object. You have the right to object to the processing of your personal data, including processing for direct marketing, automated processing or profiling. You shall also be notified and given an opportunity to withhold consent to the processing if there is any significant change or amendment to the information provided to you in a consent form, privacy notice, or similar communication. In case of the exercise of this right, ISELCO I shall no longer process the data unless the processing of the same falls under the exceptions enumerated by the law.
- Rectify incorrect data. You have the right to dispute the inaccuracy or error in your personal data and have the same rectified or corrected within a reasonable period of time.
- Erase or block. You have the right to request the suspension, withdrawal, blocking, removal, or destruction of your personal data from ISELCO I’s filing system upon discovery and substantial proof that the personal information is/are incomplete, outdated, false, unlawfully obtained, used for unauthorized purposes or is/are no longer necessary for the purposes for which they were collected.
- Secure data portability. Where your personal data is processed by electronic means and in a structured and commonly used format, you have the right to obtain a copy of it from ISELCO I for your further use.
- Be compensated for damages. You have the right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data, taking into account any violation of your rights and freedoms as a data subject.
- File a complaint. You have the right to file a complaint in the event your personal information has been misused, maliciously disclosed, or improperly disposed of, or if any of your data privacy rights have been violated.
Log Data
If the app or website runs into an error, we may collect what’s called “Log Data” through third-party tools to help us identify and resolve errors or performance bottlenecks in our systems and applications, as well as in detecting security threats. These can include things like your device’s IP address, name, operating system version, app settings at the time of the error, the date and time you used the service, and other technical details.
Cookies
Cookies are small files stored on your device that help websites and apps work better. While our Service doesn’t use cookies directly, some third-party tools built into the app might. You can choose to accept or reject cookies — and even get notified when one is being sent. Just know that if you reject cookies, some features of the Service may not work as expected.
Links to Other Websites
Sometimes, our Service may link you to other websites. Please remember that these sites are not managed by us, and we’re not responsible for their privacy practices. We recommend checking their Privacy Policies so you know how your data is handled.
Updates to this Policy
From time to time, we may update this Privacy Policy. If we make changes, we’ll post the new version here so you can stay informed. This version took effect in September 2025.