Data Privacy Agreement & Policy

1 Introduction and Legal Basis

Isabela-I Electric Cooperative, Inc. (ISELCO-1) is an electric distribution utility committed to protecting the privacy, confidentiality, and security of personal and utility data collected from member-consumer-owners. This Data Privacy Agreement complies with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and all circulars and directives issued by the National Privacy Commission (NPC) and the National Electrification Administration (NEA).

2 Information We Collect

During the sign-up process and through regular use of the consumer portal, we collect the following categories of information:

• Personal Identification Data: Full name (First Name, Last Name), user credentials (username, password hash).
• Contact Information: Valid email address and active mobile/telephone number for account alerts and advisory notifications.
• Location & Address Details: Purok/Sitio/Street, Barangay, and Municipality within Isabela province.
• Electric Utility Credentials: Electric Account Number, Meter Serial Number, and Consumer Classification (Residential, Commercial, Industrial, Public Building, Street Lights, Water System, Sale for Resale).
• Transactional & Consumption Data: Kilowatt-hour (kWh) readings, billing statements, payment receipts, appointment bookings, service applications, and dispute requests.

3 Purpose and Use of Processed Information

Your personal information is collected and processed exclusively for the following lawful and operational purposes:

1. To register, verify, and administer your online electric consumer account.
2. To compute, present, and track electrical energy consumption, monthly utility bills, and payment records.
3. To send official SMS, email, and portal notifications regarding scheduled/unscheduled power interruptions, system maintenance, and bill due dates.
4. To facilitate service meter applications, net metering registrations, reconnection or technical service requests, and customer support inquiries.
5. To ensure compliance with requirements mandated by the Energy Regulatory Commission (ERC) and the National Electrification Administration (NEA).

4 Security, Storage, and Confidentiality

We employ physical, technical, and organizational security controls to protect your data from loss, unauthorized access, fraudulent manipulation, and unlawful disclosure:

• Encryption: Sensitive data such as passwords are encrypted using secure cryptographic hashing algorithms.
• Restricted Access: Only authorized ISELCO-1 personnel with strict confidentiality obligations have administrative access to consumer records.
• Infrastructure Integrity: Databases and application servers are maintained with security patches, firewalls, and regular backup mechanisms.

5 Sharing and Third-Party Disclosure

ISELCO-1 does not sell, lease, or commercially trade your personal information. Information will only be disclosed in the following specific circumstances:

• To accredited third-party payment gateways, banks, and merchant partners solely for processing utility bill payments.
• To government and regulatory bodies (such as NEA, ERC, or Philippine law enforcement) when strictly mandated by valid legal processes, court subpoenas, or statutory obligations.

6 Your Rights as a Data Subject

Under Republic Act No. 10173, as a data subject, you hold the following rights:

7 User Consent Declaration

Data Protection Contact

If you have questions, clarifications, or concerns regarding your privacy rights, please contact: