PeraLumo Back to home

Privacy Policy

Last updated: September 9, 2026

This notice explains what PeraLumo collects, why we use it, who may receive it, and the choices available to you.

Overview

PeraLumo is a loan marketplace. It helps users compare offers and connect with independent lending providers. PeraLumo is not a lender and does not make the final decision on a loan application unless we clearly tell you otherwise for a specific product.

This Privacy Notice is intended to follow Republic Act No. 10173, the Data Privacy Act of 2012, its Implementing Rules and Regulations, and applicable issuances of the Philippine National Privacy Commission.

A privacy notice is not blanket consent.

Where consent is required, PeraLumo will ask for it separately and explain the specific processing involved.

Who is responsible for your data

PeraLumo operates this website and mobile application and is responsible for the personal data it determines how and why to process.

A lending provider may become a separate Personal Information Controller when you choose to continue to that provider, submit an application, or accept its terms. Its own privacy notice will govern the information it collects and the credit decision it makes.

When this notice applies

This notice applies when you:

  • visit the PeraLumo website or open a campaign link;
  • install, register for, or use the PeraLumo application;
  • compare loan offers or ask to be connected with a lending provider;
  • contact customer support or submit a privacy request; or
  • choose to receive messages from PeraLumo, including through Viber, SMS, email, or in-app notifications.

This notice does not replace the privacy notice of a lending provider, app store, Viber, device manufacturer, analytics provider, or third-party website.

Personal data we may collect

We collect only information reasonably necessary for a declared and lawful purpose. Depending on the features you use, this may include:

Account and contact data

Name, mobile number, email address, date of birth, address, account credentials, and communication preferences.

Identity and eligibility data

Government ID details, photograph or selfie, nationality, employment or income information, and other information required to verify identity or basic eligibility.

Loan matching data

Requested amount, preferred term, stated purpose, affordability information, selected offer, application status, and interactions with available offers.

Financial data

Income range, payment account details, transaction references, or other financial information you choose to submit for an application or provider connection.

Device and usage data

IP address, device model, operating system, language, browser type, app version, device identifiers, event logs, crash records, and approximate location derived from IP.

Support and communication data

Messages, call or chat records, attachments, complaints, survey responses, and your interactions with service or campaign communications.

Campaign and cookie data

Referral URL, Viber campaign source, advertising identifiers, cookie identifiers, consent status, and website interaction information.

Partner and verification data

Information lawfully received from selected lending providers, identity verification services, fraud prevention services, or public sources.

Important product limitation

This draft does not authorize PeraLumo to access phone contact lists, private messages, call logs, microphone recordings, or precise GPS location. If the live product uses any of these, this notice and the relevant permission screen must be revised before collection begins.

How we obtain information

We may obtain personal data:

  • directly from you when you register, compare offers, submit information, or contact us;
  • automatically from your browser, device, and use of the website or app;
  • from a lending provider when necessary to display or update an application status;
  • from verification, fraud prevention, analytics, hosting, and communication service providers; and
  • from public records or authorities where collection is lawful and relevant.

If you provide information about another person, you must have a lawful basis to do so and must tell that person how the information will be used.

Why and how we use personal data

Provide the marketplace

Create and maintain your account, show potentially relevant offers, connect you with a selected provider, and display application updates.

Verify and protect

Confirm identity, detect duplicate or suspicious activity, prevent fraud, secure accounts, and investigate misuse.

Support users

Answer questions, resolve complaints, send service notices, and maintain records of requests.

Improve PeraLumo

Measure performance, understand feature use, diagnose errors, test improvements, and produce aggregated statistics.

Send optional marketing

Send promotions and reminders through channels you selected, measure campaign performance, and manage opt-out requests.

Meet legal duties

Maintain required records, respond to lawful orders, exercise or defend legal claims, and comply with regulators.

Depending on the activity, processing may be based on your consent, the performance of a service you requested, a legal obligation, or a legitimate interest that does not override your fundamental rights and freedoms.

Offer matching, profiling, and lending decisions

PeraLumo may use information you provide, device signals, and marketplace activity to filter, rank, or recommend offers. Matching may involve automated rules or models. A match is not a guarantee of eligibility, approval, amount, rate, or disbursement.

The selected lending provider independently reviews an application under its own criteria. Where automated processing is used as the sole basis for a decision that significantly affects you, you may request meaningful information about the process and exercise applicable rights under Philippine law.

Who may receive personal data

We may disclose only the information necessary for the stated purpose to:

  • lending providers you select, so they can assess or service your application under their own terms;
  • identity, fraud, and risk service providers, where necessary and lawfully authorized;
  • hosting, analytics, customer support, and communication providers acting under contract and confidentiality obligations;
  • professional advisers, auditors, insurers, and corporate transaction parties where access is necessary and protected;
  • regulators, courts, law enforcement, and government bodies when disclosure is legally required; and
  • another business entity involved in a merger, financing, reorganization, or transfer, subject to appropriate safeguards and notice where required.

PeraLumo does not sell personal data for money. We do not share a completed application with a lending provider unless you choose to continue with that provider or another lawful basis clearly applies.

Viber, SMS, email, and marketing choices

PeraLumo may use your mobile number, email address, campaign source, and communication preference to send marketing only where permitted by law and, when required, after you have opted in. Marketing consent is separate from consent needed to provide the marketplace service.

Messages may be sent through Viber, SMS, email, push notification, or another channel you select. You can opt out using the instruction in the message, changing an available in-app preference, or contacting PeraLumo support. Opting out of marketing will not stop essential account, security, application, or legal notices.

Cookies and similar technologies

The website may use necessary cookies to operate and secure the service. With your choice where required, it may also use analytics or campaign technologies to understand visits, remember preferences, and measure Viber or other marketing traffic.

You can control cookies through your browser. Blocking necessary cookies may prevent parts of the website from working. A separate cookie banner or settings panel should identify the technologies active on the published website.

Storage and transfers outside the Philippines

Some service providers may store or process information outside the Philippines. Before a transfer, PeraLumo will assess the recipient and use contractual, organizational, and technical safeguards designed to provide a level of protection consistent with the Data Privacy Act and applicable NPC rules.

How long we retain information

We keep personal data only for as long as necessary for the declared purpose, subject to legal, regulatory, security, dispute, and recordkeeping requirements. The proposed product schedule is:

Data categoryProposed period
Account, profile, matching, and application connection recordsWhile the account is active, then up to 5 years where required for claims, fraud prevention, or legal compliance
Customer support and complaint recordsUp to 2 years after the matter is closed, unless a longer period is required
Security, device, website, and app event logsUp to 12 months, unless needed for an investigation
Marketing preferences and consent recordsUntil opt-out, plus the period needed to record and honor that choice

These periods must be checked against the operator's actual systems and legal obligations before publication. When retention ends, information will be securely deleted, anonymized, or blocked from further use.

How we protect information

PeraLumo will maintain reasonable organizational, physical, and technical safeguards appropriate to the nature of the information and the risks involved. Measures may include access controls, encryption in transit and at rest where appropriate, secure software development, logging, vendor review, staff confidentiality obligations, backups, and incident response procedures.

No system is completely secure. If a personal data breach creates a legal notification duty, affected users and the National Privacy Commission will be notified as required.

Your rights under Philippine privacy law

Subject to applicable conditions and lawful limitations, you may exercise the right to:

  • be informed about the processing of your personal data;
  • object to processing based on consent or legitimate interest;
  • access personal data and information about how it was processed;
  • correct inaccurate, incomplete, or outdated information;
  • request erasure or blocking where legally justified;
  • exercise your right to data portability by obtaining applicable electronic data in a structured, commonly used format;
  • claim damages where allowed by law; and
  • file a complaint with the Philippine National Privacy Commission.

To protect your information, we may verify your identity before completing a request. We will explain if a request cannot be fulfilled because of a lawful exception.

Children's privacy

PeraLumo is intended for adults who are at least 18 years old and legally capable of applying for financial products. We do not knowingly collect personal data from children for loan matching. If you believe a child submitted information, contact PeraLumo support so it can be reviewed and removed where appropriate.

Third-party services and links

An offer or link may take you to a lending provider or another third party. PeraLumo does not control that party's privacy practices. Review its identity, license information, privacy notice, loan disclosure, rates, fees, and terms before submitting data or accepting an offer.

Changes to this notice

We may update this notice when processing practices, partners, technology, or legal requirements change. Material changes will be highlighted through the website, app, or another appropriate channel before they take effect where required. The effective date at the top identifies the current version.

Contact PeraLumo

For privacy questions, objections, access requests, corrections, deletion requests, or complaints, please use the customer support channel provided by PeraLumo.

You may also contact or file a complaint with the Philippine National Privacy Commission.

Official resources