Consent to the Processing of

Customer Personal Information

By signing below, the depositor(s) authorize(s) and consent(s) to the processing, sharing and/or transferring by
Union Bank of the Philippines (the “Bank”) of his/her/their Personal Data as this term is defined under the Data
Privacy Act and its Implementing Rules and Regulations (“DPA IRR”) and all other issuances of the National Privacy
Commission (NPC), or otherwise, relating to his/her/their account(s) to any of the following for any of the specified
purposes which in all cases are in compliance with or pursuant to the Bank’s legal or contractual obligations:

a. government regulatory agencies, credit information/investigation companies, financial institutions, credit

bureaus, other banks, credit card companies, loyalty program partners, consumer reporting or reference
agencies such as Credit Card Association of the Philippines, Bankers Association of the Philippines, Credit
Information Corp. and the Trans Union Credit Bureau for the purpose of credit investigation, consumer
reporting, or for reports of his/her/their credit history and account updates;

b. third persons, correspondent banks, service providers and entities as the Bank deems necessary, to enable
the Bank to service his/her/their account/s and to provide all the existing features of his / her / their
account/s, the Bank products, services, facilities and channels, and any future enhancements thereto or
to assist the Bank in the processing of his/her/their data, including its collection, recording, organization,
storage, management, protection, updating or modification, retrieval, consultation, use, consolidation,
blocking, erasure or destruction;

c. third parties engaged by the Bank or by its subsidiaries or affiliates for the purpose of direct/indirect
marketing to offer selected products and services which may interest the depositor(s) unless specifically
instructed otherwise in writing or

d. insurers, insurance brokers, or providers of deposit or credit protection or protection against all kinds of risks;

e. regulatory authorities or such other persons or entities the Bank may deem as having authority or right to
such disclosure of information as in the case of regulatory agencies, governmental or otherwise, which have
required such disclosure from the Bank and when the circumstance so warrant.

The depositor(s) understand/s that personal information refers to any information, whether recorded in a material
form or not, from which his/her/their identity is apparent or can be reasonably and directly ascertained by the
entity holding the information, or when put together with other information would directly and certainly identify the
depositor(s).

Depositors agree that they are fully aware that the Bank collects his/her/their personal information from any of the
following sources:

a. Personal Information Sheet or other form duly accomplished by depositor(s) as requested by the Bank;

b. Information collected about depositor(s) when he/she/they contact/s the Bank or the Bank contacts the
depositor(s) through the hotline, via email, mobile applications or services, online platforms and otherwise;
and) information collected about the depositor(s) from other commercially available sources or recorded
communication.

1 The future begins with u

 Consent to the Processing of Customer Personal Information

Depositor/s authorize/s the Bank and/or its authorized representative to, when deemed necessary or relevant by the
Bank,

a. pursuant to BSP Circular No. 472 Series of 2005 as implemented by BIR Revenue Regulations RR-4-2005,
conduct random verification with the Bureau of Internal Revenue in order to establish authenticity of the
Income Tax Returns (ITR), accompanying financial statements and such other documents/information/data
submitted by the depositor(s), and/or

b. obtain or disclose such information regarding the depositor(s) or the loan/credit facilities applied for
hereunder to any party as the Bank may deem necessary or as may be required or allowed by applicable
laws, rules and regulations.

c. Depositor/s authorize/s:

a. the regular submission and disclosure of his/her/their basic credit data (as defined under Republic
Act No. 9510 and its Implementing Rules and Regulations) to the Credit Information Corporation
(CIC) as well as any updates or corrections thereof for purposes of including said basic credit data in
a centralized credit information system as mandated by law; and

b. the sharing of his/her/their basic credit data with Accessing Entities as defined in Republic Act
No. 9510 and its Implementing Rules and Regulations authorized by the CIC, and credit reporting
agencies duly accredited by the CIC.

Depositor(s) is/are aware that his/her/their personal information is collected and shared for purposes of providing
the service, product and/or facility depositor/s has/have applied for or agreed to obtain from the Bank, or for
purposes of complying with relevant government or legal mandate or requirement, Depositor/s hereby consent/s
to the disclosure required by such product, service of facility to the enumerated third parties above and further
authorize the Bank, its officers, employees or representatives and third parties as enumerated above, to obtain verify
and review the information that he/she has provided and to use and process the same in evaluating his/her/their
applications to avail of the Bank’s products and/or services, which include a broad range of credit, deposit and other
financial products.

Depositor/s likewise authorize/s the collection of his/her/their personal, use and processing, directly by the Bank or
through its authorized third party service providers, business partners, consultants or advisers, which have satisfied
the Bank’s requirements of corporate legal, information security, and data privacy, to either improve the Bank’s
product or service to me/us or the public in general or to market any other product, service or facility of the Bank
which the Bank may determine to be of interest to me/us.

Depositor/s agree/s that his/her/their authorization and consent as provided herein has been executed freely,
voluntarily and with full knowledge of its consequences. It is intended to be the consent and/or permission required
under the DPA IRR, RA 1405 or the Bank Secrecy Law and all other relevant laws for the purposes specified above.
It is valid as an agreement signed by the depositor/s and shall have continued effect throughout the duration of
depositor/s relationship with the Bank and/or existence of my account(s), and/or until the expiration of the retention
limit set by laws and regulations, and/or the period set until the destruction or disposal of records as mandated by
relevant laws, unless depositor/s withdraw/s such authorization and consent in writing.

Depositor/s agree to render the Bank, its officers, employees and representatives free and harmless from any and all
liabilities arising from the above use and disclosure of his/her/their information.

2 The future begins with u

 Consent to the Processing of Customer Personal Information

Depositor/s certify/ies that the information he/she has/have provided in the Personal Information Sheet (PIS) or
other form or document as required by the Bank is true, correct and complete and he/she agree/s to immediately
and/or periodically update the same should there be any change, mistake or inaccuracy thereon. Depositor/s fully
understand/s that said information may be used by the Bank to provide the service, product or facility the depositor
has applied for or agreed to obtain from the Bank. Depositor/s understand/s that the contact information provided
shall be used for all correspondences between depositor and the Bank unless depositor/s notify and promptly advise
the Bank in writing of any change on said contact and other personal information.

Depositor acknowledges that he/she has read, understood and fully agree with the Bank’s Privacy Policy as found in
https://www.unionbankph.com/privacy-security#0 and receipt of which he/she confirms by his/her/their signature/s
below.

Depositor/s allow/s the Bank to keep his/her/their personal information only for as long as it is necessary:

a. for the fulfilment of the declared, specified, and legitimate purposes provided above, or when the processing
relevant to the purposes has been terminated; or

b. for the establishment, exercise or defense of legal claims; or

c. for legitimate business purposes, which shall be in accordance with the standards of the banking industry.

Depositor authorize/s the Bank to dispose his/her/their personal information in a secure manner in order to prevent
further processing, unauthorized access, or disclosure to any other party.

The account holder is responsible for the electronic notification received; as such, the Bank is free and harmless
from any liability if the information contained in the electronic notification is, by any means, accessed by any person
other than the customer.

By my/our signature/s herein, I/we acknowledge that I/we have read, understood, and fully agree with the 3-page
UNIONBANK CONSENT TO THE PROCESSING OF CUSTOMER PERSONAL INFORMATION with which I/we was/were
duly provided, receipt of which I/We confirm by my/our signatures below

SIGNATURE OVER PRINTED NAME SIGNATURE OVER PRINTED NAME

DATE DATE

3 The future begins with u