Privacy Notice
Mynt, also known as Globe Fintech Innovations, Inc., takes your privacy very seriously. We work hard to protect your personal information. We do this in a way that follows international standards and the laws of the Philippines.
This privacy notice tells you how we handle your personal information. Our goal is to be clear about what we do and why we do it. We always try to do things in the right way. Here, we explain how we collect, use, share, keep, delete, and protect your information. We'll also explain how you can control what happens to your information.
Mynt is the first tech double unicorn in the Philippines, behind major fintech players G-Xchange, Inc. (GXI/GCash), a digital wallet simplifying financial and lifestyle tasks, and Fuse Financing, Inc. (FFI), offering loan products available on the GCash App. Mynt plays an important role in providing administrative and support services as well as managing the assets and income generated through GCash and Fuse.
- To provide common services for our subsidiaries
We collect and process your personal information to conduct our regular business activities, which benefit both our company and our subsidiaries. Our scope of activities extends to providing administrative and support services in essential areas including Human Resources, Corporate Affairs, Finance, Legal Services, and others.
- To manage the recruitment process and keep employment records
If you work with us, have worked with us, or are interested in joining us, we process the personal data you shared in your resume and application forms. This includes information about your education, test results, job offer, background checks, medical assessments. We also keep your personal information while you work with us and even after you leave, like details about your pension and other benefits, bank account, addresses, beneficiaries, and emergency contacts.
If you decide to open a GCash account, we will collect, process, and share various types of information. Don’t worry, we will only keep and use them for as long as needed to satisfy the purposes they were collected or to meet legal requirements.
- Subsidiary-Provided Data: To deliver our common services, we may process your personal information on behalf of our subsidiaries if you are an employee, shareholder, or a GCash user. For example, as a shareholder, we register your ownership, investment, and business details for Mynt and its subsidiaries with relevant authorities. We also manage communication efforts to keep you informed about the company's performance and key developments.
To learn more about the other information we receive from our subsidiaries and how long we retain them, please see GCash and Fuse's Privacy Notices.
- Professional or employment Information: We collect information you provided in your resume for your job application, including your work history, education, contact details, and professional licence or certifications.
We keep your professional or employment information for 5 years after you leave. If you don’t finish your "clearance" process, we may keep your records for 7 years. - Screening Questions: These include information about your employment history, as well as details about any relationships and/or affiliations that might potentially give rise to conflicts of interest or other related issues.We keep your information for 1 year after you stop using our career services page.
- Demographic, Sexual, and Ethnicity Information: On a voluntary basis, we collect information about your gender, age, sexual orientation, gender identity, and ethnicity. We keep your information for 1 year after you stop using our career services page.
- Third-Party Information: We collect information about you from other sources to improve our services. For example, we check Government databases to make sure you’re really who you say you are to prevent fraud.The length of time we keep your third-party information varies:
- Identification Information: These are kept for 5 years after the last transaction you made using your GCash account or after you close your account.
- Professional or employment information: These are kept for 5 years after your recruitment or end of employment.
- If relevant to an ongoing investigation: These are kept for up to 10 years after completion of investigation or depending on the court's order.
We collect your personal data in several ways:
- Direct Interactions: We collect information when you create an account to submit your resume or application via our career page to apply for various types of job opportunities we offer, participate in recruiting events, contact us for assistance, and others.
- From Our Subsidiaries: We access the personal information you've shared with our subsidiaries to enhance your overall experience and provide a seamless unified service. We also use the personal data we have received from our subsidiaries to offer common services across various functions, such as Human Resources, Corporate Affairs, Finance, Legal and more.
- From Our Professional Network Pages: We collect information when you include your professional network profile in your job application through the career page. We use this information to review and verify your application and profile.
- From Your Friends, Family Members, or Former Employers: For example, we collect information when your friends include you as a reference or contact person in their account.
- From Third-Party Recruitment Agencies: The recruitment agencies we work with may provide us with a copy of your resume or the personal information you've shared on job-search and professional networking websites. Then, you will then be redirected to our career page to complete your application.
- From Third-Party Background Verification Providers: We hire people to check the information you gave us in your job application and to perform a background check. This helps us see if you’re a good fit for our company.
- From Partner Health Institutions: We collect information when we endorse you to our partner health institutions for physical and clinical assessments as part of the requirements of your application prior to onboarding.
- From Publicly Available Information: We may collect your personal data from publicly available sources. This includes information that is lawfully made available to the public by government records, online platforms, social media, professional networking sites, or other public sources.
- Mynt Subsidiaries: Companies operated by Mynt, such as GCash and Fuse, work together to provide services for your financial and lifestyle needs. So, we will naturally have access to your personal information to fulfill our role in facilitating common services for our subsidiaries.
- Service Providers: We also share your personal information with trusted service providers who assist us in making our services seamless and efficient. They help us in various ways, such as conducting physical and clinical assessments, engaging background screening and employment verification vendors to ensure comprehensive checks on job candidates' backgrounds, qualifications, references, and more.
- Law enforcement agencies, regulatory bodies, and courts: We may share your personal information with law enforcement agencies, regulatory bodies, courts, and other public authorities. We will only do this if required by law or to protect our rights, prevent fraud, and ensure the safety of GCash users and the public. Additionally, we will share your information with government institutions to ensure you receive mandated benefits, services, and assistance, including the documentation needed for your application process, particularly for foreign applicants.
- Changes within Mynt: If we decide to join with another company, or if another company buys us or our assets we might have to share your personal information with that company. If this happens, we will make sure to tell you ahead of time if your information will be handed over to another company or if there will be new rules about keeping your information private.
We make sure to destroy your personal information securely so it can't be retrieved or used. We do this by following security measures that are standard in our industry. Once laws or regulations no longer allow us to keep your personal information, we start to delete them.
For physical records, we destroy them by shredding. For information stored on electronic media like tapes and hard drives, we completely erase them using secure wipe solutions so they can’t be read. This makes the information unreadable and unusable without authorization.
Your trust and privacy are important to us. Hence, we aim to be transparent about how and when we share your information, all while ensuring its safety and security.
There can be risks when managing and processing personal information. We want to keep your details safe so they won't be used the wrong way, get lost, or be accessed by someone you didn't allow. That's why we've added security measures to help protect against these dangers. These security measures include:
- Restricting access: Only certain people are allowed to see your personal information.
- Encryption: We code your personal information to keep it private when it’s being stored and sent. Encryption is like turning your information into a secret code, which can only be understood by those who have the key.
- Multi-factor authentication (MFA): We use MFA in our systems. This means you need more than one factor before you can access your account. For example, when you log in to your employee email account via GMail from a new device or location, Google adds an extra layer of security. They send a special code to your registered phone for you to enter, making sure it's really you. If you ever can't use your phone, Google gives you backup codes. Keep these codes safe in case you need them.
We regularly check how information moves into and out of our computer systems to make sure it’s protected. We enforce organizational, physical, and technical security measures aligned with recognized industry standards.
If we give your personal information to another company to help us with our services, we make them sign a special agreement. This agreement makes sure they follow the same rules we do to keep your information safe.
You have several rights under the law:
- You can be told about how we handle your personal information (right to be informed).
- You can access the personal information we have about you (right to access).
- If we're processing your personal information based on consent or legitimate interest, you can object (right to object).
- You can ask us to stop, withdraw, block, delete, or destroy your personal information (right to erasure or blocking).
- If your information privacy rights have been violated and you've suffered damage, you can claim compensation (right to damages).
- If you feel that your personal information has been misused or your privacy rights have been violated, you can file a complaint with the National Privacy Commission (right to file a complaint).
- You can dispute and have any mistakes or errors in your personal information corrected (right to rectify).
- You can ask us to securely move, copy or transfer your personal information from one company to another (right to information portability).
For more information about your privacy rights, you can visit the National Privacy Commission’s website to look at resources about the Rights of Data Subjects.
We'll handle all your requests to access, correct, or move your personal information unless there are legal reasons we can't. You can ask for a copy of any personal information we have about you. If you find a mistake, you can ask us to correct it
We value your thoughts, feedback, and requests. If you need to talk to us, you can email us at gfi.dataprivacy@mynt.xyz (Data Protection Officer) or call us at 2882 (Customer Care).
We periodically update this notice to provide you with the most recent information on how we protect your personal information. Our goal is to keep up with the latest rules about data privacy and advancements in security technologies. We recommend that you visit this page often to stay informed of any updates we make.
Last updated: 01 January 2024
