Privacy Notice

Wilcon Depot, Inc., (WDI) a publicly listed corporation and in furtherance of the principles of corporate responsibility and good governance, respects and values your personal data privacy. WDI commits to safeguard the integrity, confidentiality and security of the personal data that it collects, processes, uses and stores in accordance with the Data Privacy Act of 2012 (DPA) and its Implementing Rules and Regulations (IRR). For this purpose, WDI implements technological, organizational and physical security measures that are designed to secure and protect your personal data.

In the ordinary course of business, WDI may collect your personal data when you physically visit WDI stores through CCTV cameras or manually during your purchase, deliveries and inquiries and electronically through the use of WDI’s e-commerce platform, website and social media accounts. Such data may include the following:

• Complete Name
• Date of Birth
• Age
• Gender
• Home Address
• Email Address
• Contact Number
• Photo
• Loyalty Membership
• Valid ID

WDI collects personal data when you manually or electronically submit to us your orders, inquiries, requests or concerns (collectively “services”). Should you choose not to provide any of the above personal data, WDI may not be able to accommodate and respond to your request or perform the services.

WDI collects, processes, uses and stores your personal data to give you better services in processing your orders, purchases, payments, deliveries, to accommodate and respond to your inquiries or concerns, to inform you of WDI’s products, services, promotions, raffles and events, for your safety and security and for other legitimate business purposes.

WDI utilizes the collected personal data only for the abovementioned services and purposes.

Should you choose not to provide any of the above personal data, WDI may not be able to accommodate and respond to your request or perform the services.

 Only authorized WDI personnel has access to your personal data, duly informed of their obligation to hold this information with utmost confidentiality. The exchange of this information may be facilitated through email or hard copy. Personal data collected via electronic means are stored in a well-maintained database managed by our system expert while physical data are stored in locked filing cabinets monitored by CCTV cameras.

WDI stores and processes personal data within the Philippines only. Should there be a need to transfer personal data in another country, WDI shall comply with relevant laws and regulations and shall ensure that personal data are protected and covered by a data sharing or outsourcing agreement in accordance with relevant laws and regulations including the DPA and its IRR. WDI is implementing a combination of organizational protection measures such as policies on access control for both digital and physical data. Physical protection measures such as storage in a vault or steel cabinet and against natural disasters and technical security measures based on accepted data privacy and information security standards on access control, acceptable use, firewall and end-to-end encryption. 

As a general rule, WDI is not allowed to share your personal data with third parties except if imperative and necessary to perform the services and purposes and unless with your consent. Third parties may include WDI’s business partners, contractors, subcontractors and service providers. Any personal data shared with such third parties will be safeguarded by a data sharing or outsourcing agreement in accordance with relevant laws and regulations including the DPA and its IRR.

The accuracy and correctness of any personal data provided shall be your responsibility as well as the consequences of your failure to disclose your correct and updated personal data to WDI.

In accordance with the DPA and its IRR, you have the right to access or ask for a copy of any personal data we hold about you as well as to ask for it to be corrected and/or updated. Should you wish to obtain a hard copy or printout of your personal data, any expenses in relation thereto shall be for your account.

To correct and/or update your personal data, you may contact WDI’s customer service inside our stores or via Contact Us menu stating the personal data you wish to access or be corrected and/or updated. WDI shall provide to you the data you want to access as well as process the correction and/or update of your personal data within the time allowed by law and regulations.

In the event that correcting or updating of personal data is not possible due to legal and technical reasons, WDI will contact you and explain the reason/s thereof.

WDI reserves the right to retain and keep your personal data, for Loyalty Program members, while they are actively using the program and shall be disposed of after five (5) years from inactivity or failure to use and for one (1) month from the receipt of request to withdraw to ensure that all the privileges granted such as loyalty points had been consumed. While for inquiries, promotions and events, personal data collected shall be stored for six (6) months and shall be retained as long as you have agreed to receive promotional messages. You may also elect to opt out or unsubscribe to any marketing or promotional messages by selecting the opt out or unsubscribe option. Period of retention may be extended as the need arises due to pendency of a case or any other legal ground.

WDI shall dispose of your physical records through shredding while digital files shall be anonymized. In all instances, the manner of disposal shall ensure that the personal data shall no longer be retrieved, processed, or accessed by unauthorized persons. 

WDI may also delete or remove your personal data in the event that such personal data is not or no longer necessary for the services or purposes.

WDI recognizes the risks involved in the processing of personal data such as when systems are exposed to computer viruses, malware, ransomware, or when manual records are accessed without authority. However, WDI undertakes to collect and process adequate, and not excessive, personal data in relation to the declared purposes. Adequate policies and procedures are also in place to ensure appropriate security incident prevention and management.

In accordance with the Data Privacy Act of 2012 and its IRR, you have the right to be informed of how WDI processes your personal data, you also have the right to access, dispute, correct, update, object, obtain a copy and request to remove your personal data by sending a request to our DPO or customer service of the respective branch or file a complaint in case of breach or violation of your privacy.

WDI reserves the right to update or revise this Privacy Notice at any time and shall provide a new Privacy Notice whenever substantial changes are made. Previous versions of the Privacy Notice are retained by the WDI and shall be provided to data subjects upon request. 

Please visit our site to stay informed of any changes.

For any concerns, inquiries or complaints, please contact WDI’s Data Protection Officer (DPO):

Data Protection Officer
Wilcon Depot, Inc.
90 E. Rodriguez Jr. Ave.,
Ugong Norte, Quezon City
Contact no. (02) 8634-8387
Email address: DPO@wilcon.com.ph

Date of effectivity: 09/25/25