VIII. Sharing of Personal and Sensitive Personal Information

W Express generally does not allow the sharing of personal and sensitive personal information to third party/ies, except under the following circumstances below.

By giving consent, the data subject authorizes W Express to disclose personal and sensitive personal information to accredited/affiliated third parties or independent/non-affiliated third parties, whether local or foreign on any of the following circumstances:

1. As necessary for the proper execution of processes in relation to the purposes declared in this Policy; and/or;
2. The use or disclosure is reasonably necessary, required or as authorized by or under law, i.e. civil, criminal or administrative court action, subpoena and/or order issued by judicial or quasi-judicial body, etc.

Whenever the above scenario/s is/are present, W Express may provide personal and sensitive personal information to the following:

1. W Express’ affiliates, subsidiaries, partner companies, organizations, or agencies including their sub-contractors or prospective business partners that act as the company’s service providers and contractors;
2. Law enforcement and government agencies;
3. All third parties, a list of which is available upon request with the Data Protection Officer at the contact details below, with which the company shares the personal and sensitive personal information that are required to use the same in a manner that is consistent with this Policy.

However, these companies may only use such personal data for the purposes disclosed in this Policy and may not use it for any other purpose.

W Express undertakes to ensure that any personal and sensitive personal information it has collected, used and/or disclosed are accurate, complete, and up-to-date. As such, the company has implemented the required technological, organizational and physical security measures to protect any personal and sensitive personal information it has come across from loss, misuse, modification, unauthorized or accidental access or disclosure, alteration or destruction. In addition, the following are the safeguards that are being implemented:

1. The company keeps and protects personal and sensitive personal information by using a secured server behind a firewall, deploying encryption on devices and physical security controls;
2. The company restricts and/or limits access to personal and sensitive personal information only to qualified and/or authorized personnel under strict confidentiality.
3. Any personal and sensitive personal information that are passed on in W Express’ website is initially processed and stored in such website. Only authorized personnel can access and download such personal and sensitive personal information from its system.
4. If the manner of payment to avail of the services of W Express is through a credit or any other access device issued by an authorized credit and/or debit card issuer, W Express will not reveal the entire access device number except if needed by the appropriate issuing card company during order processing or as required under regulations imposed by the Bangko Sentral ng Pilipinas or by law.