Legal

Privacy Policy

How we collect, use, and protect your information.

1. Introduction

CORETECH INNOVATIONS AND SOLUTIONS, INC. ("CORETECH", "we", "us", or "our"), the operator of the CoreFare Mobility Platform, respects your privacy and is committed to protecting your personal data. This comprehensive Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of information when you use our websites, mobile applications, point-of-sale terminals, validators, and associated services (collectively, the "Services").

This policy complies with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and other relevant policies issued by the National Privacy Commission (NPC).

2. Information We Collect

To provide you with seamless transport and ticketing services, we collect several categories of information:

  • Personal Identifiable Information (PII): Full name, email address, mobile number, date of birth, and government-issued ID (for discounted fares such as Senior Citizens, PWDs, and Students).
  • Financial & Payment Data: Transaction history, top-up records, and masked credit/debit card numbers. We do not store full PAN (Primary Account Number) or CVV data; these are handled directly by our PCI-DSS compliant payment gateways.
  • Mobility & Usage Data: Boarding and alighting locations, travel times, route preferences, ticket purchases, and NFC card/QR code usage metadata.
  • Device & Technical Information: IP addresses, browser types, mobile device identifiers, operating system versions, and app crash logs.
  • Agent/Operator Data (KYC): For transport operators, inspectors, and ticketing agents, we collect business registration details, employee IDs, and shift/location logs for operational accountability.

3. How We Use Your Information

We process your data strictly for legitimate business and operational purposes, including:

  • Service Delivery: Issuing tickets, processing reservations, processing fare deductions, and maintaining passenger wallets.
  • Verification & Compliance: Validating eligibility for mandated fare discounts (e.g., Student, Senior, PWD fares) and ensuring regulatory compliance with DOTr and LTFRB guidelines.
  • Operations Optimization: Providing operators with aggregated, anonymized data on passenger volume, route density, and peak travel times to improve transport dispatching.
  • Customer Support & Dispute Resolution: Investigating missing transactions, refund requests, or ticket validation errors.
  • Security & Fraud Prevention: Detecting fraudulent top-ups, counterfeit QR tickets, or unauthorized access to operator accounts.

4. Data Sharing and Disclosure

We do not sell your personal data. Your information may be shared strictly under the following circumstances:

  • Transport Operators: We share essential passenger details (e.g., name, ticket number, seat assignment, and boarding point) with the specific transport operator facilitating your journey to generate passenger manifests and waybills.
  • Payment Providers & E-Wallets: When you top up your CoreFare account or purchase a ticket, data is shared with our secure payment partners (e.g., GCash, Maya, QR Ph, or bank gateways) to process the transaction.
  • Government & Regulatory Bodies: We may disclose data to the Department of Transportation (DOTr), Land Transportation Franchising and Regulatory Board (LTFRB), or law enforcement agencies when mandated by law, subpoena, or to assist in legitimate investigations.
  • Cloud & Technology Vendors: Data is hosted and processed via ISO-certified third-party cloud infrastructure providers (e.g., AWS or Google Cloud) under strict Data Sharing Agreements (DSAs).

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, maintain your active account, and comply with our legal and tax obligations. Transactional data is generally retained for a period of up to five (5) years in accordance with Philippine tax and corporate regulations. Once data is no longer required, it is securely anonymized or permanently deleted.

6. Your Rights under the Data Privacy Act

As a data subject, you are entitled to the following rights under RA 10173:

  • Right to be Informed: Knowing how your data is processed, as outlined here.
  • Right to Access: Requesting a copy of the personal data we hold about you.
  • Right to Rectify: Correcting inaccurate or outdated information in your profile.
  • Right to Erasure or Blocking: Requesting the deletion or suspension of your data, subject to legal retention constraints.
  • Right to Object: Opting out of automated processing, profiling, or direct marketing.
  • Right to Data Portability: Obtaining your data in a secure, machine-readable format.

7. Contacting Our Data Protection Officer (DPO)

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer at:

Data Protection Officer
CORETECH INNOVATIONS AND SOLUTIONS, INC.
4th Flr. Unit 405 Mercedes Plaza I, Mercedes Ave. cor. Luis St., Brgy. San Miguel, Pasig City
Email: dpo@coretech.com.ph
Phone: +63 (917) 891-3681

Last updated: August 2026. We may update this policy periodically; please review this page regularly.

Privacy Policy | CoreFare Philippines
Legal

Privacy Policy

How we collect, use, and protect your information.

1. Introduction

At CoreFare, a core brand of CORETECH INNOVATIONS AND SOLUTIONS, INC., your privacy is our priority. This Privacy Policy outlines the types of information we collect, how it is used, and the steps we take to protect your personal data when you use the CoreFare Mobility Platform and associated services.

2. Information We Collect

We may collect the following types of information:

  • Personal Information: Name, email address, phone number, and payment details when you create an account, purchase tickets, or use our services.
  • Usage Data: Information about how you interact with our platform, including travel routes, transaction history, device information, and IP addresses.
  • Location Data: With your consent, we may collect location data to provide real-time tracking, accurate route information, and location-based services.

3. How We Use Your Information

The information we collect is used to:

  • Process transactions, issue tickets, and manage reservations.
  • Provide real-time updates and customer support.
  • Improve and optimize our platform's functionality and security.
  • Communicate updates, promotional offers, and essential service announcements.
  • Comply with legal obligations and resolve disputes.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

  • Transport Operators: Only the necessary details required to facilitate your journey and issue waybills.
  • Service Providers: Third-party vendors who assist us with payment processing, cloud hosting, and analytics under strict confidentiality agreements.
  • Legal Authorities: If required by law, regulation, or legal process.

5. Data Security

We implement robust technical and organizational measures to safeguard your data against unauthorized access, alteration, disclosure, or destruction. We utilize industry-standard encryption for data in transit and at rest.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict the processing of your personal data. To exercise these rights, please contact us at info@coretech.com.ph.

7. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices. We will notify you of any significant updates by posting the revised policy on this page with an updated revision date.

Last updated: August 2026