Privacy Policy

InnovateHub Inc. (“InnovateHub,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we handle personal information collected through our website (innovatehub.ph), our products and services — including the PlataPay digital wallet and agent platform — and any related channels, in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

1. Who we are

InnovateHub Inc. is a Philippine corporation providing fintech, artificial intelligence, e-commerce, and digital transformation solutions, and is the company behind the PlataPay digital finance platform.

2. Scope

This Policy applies to all individuals whose personal data we process, including website visitors, customers, PlataPay users and agents, business partners, job applicants, and representatives of organizations we deal with. Where a specific product (such as PlataPay) has its own supplemental privacy notice, that notice applies together with this Policy.

3. Information we collect

We collect personal data that you provide directly, data generated through your use of our services, and data obtained from third parties where lawful. This may include:

Personal information

• Full name, date of birth, gender, and other identifiers;
• Contact details such as address, email address, and mobile number;
• Account credentials and profile information;
• Government-issued identification details where required for verification (KYC).

Sensitive personal information

• Information used to verify your identity for regulated financial services, as required by applicable law.

Transaction and service data

• Records of payments, transfers, e-loading, remittance, bills payment, and other transactions you perform;
• Communications with us, including inquiries, support tickets, and chatbot conversations.

Automatically collected data

• Device, browser, IP address, and operating-system information;
• Usage data, pages visited, and referring links;
• Cookies and similar technologies (see Section 8).

4. How we use your data

We process personal data for legitimate business purposes, including to:

• Provide, operate, and maintain our website, products, and services;
• Create and manage accounts and verify identity (KYC/AML compliance);
• Process and record transactions and provide customer support;
• Communicate with you about your account, inquiries, and service updates;
• Improve, personalize, and secure our services and prevent fraud;
• Send marketing or promotional materials where you have consented (you may opt out at any time);
• Comply with legal, regulatory, and reporting obligations.

5. Legal bases for processing

We process personal data only when there is a lawful basis under the Data Privacy Act, which may include: your consent; the performance of a contract with you; compliance with a legal obligation; protection of vital interests; or our legitimate interests (or those of a third party), balanced against your rights and freedoms.

6. Sharing and disclosure

We do not sell your personal data. We may share it only as necessary with:

• Affiliates and the PlataPay platform operated under InnovateHub Inc.;
• Service providers and processors (e.g., hosting, payment, identity-verification, analytics, and customer-support providers) bound by confidentiality and data-protection obligations;
• Financial institutions, partners, and merchants where required to complete a transaction you request;
• Government agencies, regulators, law-enforcement, or courts when required by law or valid legal process.

7. Storage, retention & security

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy or as required by applicable laws (including financial record-keeping and AML requirements), after which it is securely deleted or anonymized.

In accordance with Section 20 of the Data Privacy Act, we implement reasonable and appropriate organizational, physical, and technical security measures — including access controls, encryption in transit, and staff confidentiality obligations — to protect personal data against accidental or unlawful destruction, alteration, disclosure, or unauthorized access. In the event of a personal data breach that meets the notification threshold, we will notify the NPC and affected data subjects as required by law.

8. Cookies and tracking

Our website uses cookies and similar technologies to enable core functionality, remember preferences, analyze traffic, and improve your experience. You can manage or disable cookies through your browser settings; some features may not function properly if cookies are disabled. Our site may also load third-party tools (such as embedded chat and form services), which process limited data under their own privacy policies.

9. Your rights as a data subject

Under the Data Privacy Act, you have the right to:

• Be informed whether your personal data is being processed;
• Access your personal data held by us;
• Object to or withdraw consent for processing;
• Rectify inaccurate or incomplete personal data;
• Erasure or blocking of your personal data under certain conditions;
• Data portability — obtain a copy of your data in a commonly used format;
• Damages — be indemnified for violations of your rights;
• Lodge a complaint with the National Privacy Commission.

To exercise any of these rights, contact our Data Protection Officer using the details below. We may need to verify your identity before acting on a request.

10. Data Protection Officer

InnovateHub Inc. has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and addressing privacy-related concerns.

11. NPC registration & complaints

Registered with the National Privacy Commission

Our data processing systems are registered with the National Privacy Commission of the Philippines. View our NPC Registration Certificate →

If you believe your data privacy rights have been violated, you may file a complaint with the National Privacy Commission, 5th Floor, Philippine International Convention Center, Vicente Sotto St., Pasay City, Metro Manila, or visit privacy.gov.ph. We encourage you to contact our DPO first so we can address your concern.

12. Children's privacy

Our services are not directed to children under the age of majority without the consent of a parent or legal guardian. We do not knowingly collect personal data from minors without appropriate consent. If you believe a minor has provided us personal data, please contact our DPO so we can take appropriate action.

13. International transfers

As InnovateHub expands internationally (including operations connected to Dubai, UAE), your personal data may be transferred to or processed in jurisdictions outside the Philippines. Where this occurs, we take steps to ensure your data continues to receive a level of protection consistent with the Data Privacy Act.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be posted on this page with an updated effective date. Material changes will be communicated through appropriate channels.

15. Contact us

For questions about this Policy or how we handle your personal data: