1. Who We Are
EWS Telecommunications Services ("EWS Fiber," "we," "us," "our") is a Personal Information Controller (PIC) duly registered with the National Privacy Commission of the Philippines under Registration No. PIC-005-549-2026, valid until 05 May 2027.
We provide fiber-to-the-home (FTTH) internet services to residents and businesses in Rodriguez and San Mateo, Rizal, under our NTC Certificate of Public Convenience.
2. What We Collect
To deliver our service, we collect the following categories of personal data:
Identity & Contact Information
- Full name, date of birth, civil status
- Government-issued ID (presented during application)
- Residential or service address
- Mobile and landline numbers
- Email address
Service & Account Data
- Account number, plan tier, installation details
- Billing history, payment records, payment methods used
- Customer service interactions (calls, emails, chat)
Network Usage & Technical Data
- IP address assignment, session start/stop times
- Bandwidth usage aggregates (no content inspection)
- Device identifiers from CPE/ONT for support purposes
- Network event logs (for troubleshooting and security)
Website & Application Data
- Cookies, browser type, device type, IP, referrer (see Section 9)
- Application form submissions
We do not inspect, read, or store the content of your internet traffic.
3. Why We Collect It
The lawful bases for processing under Section 12 of the DPA are:
- Contract performance — to deliver the fiber service you applied for
- Legal obligation — NTC, BIR, AMLC, NPC, and law-enforcement compliance
- Legitimate interests — fraud prevention, network security, service improvement
- Consent — for marketing communications and optional analytics
4. How We Use It
- Provision, install, and maintain your fiber connection
- Issue invoices and process payments
- Provide technical and customer support
- Detect, prevent, and respond to fraud, abuse, and DDoS attacks
- Comply with regulatory reporting (NTC, BIR, NPC, AMLC, PNP if subpoenaed)
- Send service notices (outages, maintenance, billing reminders)
- With your consent, send marketing about new plans, promos, and upgrades
6. Storage & Retention
Your data is stored in secure servers located in the Philippines. Retention periods:
- Active customer records: for the duration of your service plus 5 years (BIR / accounting requirement)
- Billing and payment records: 10 years (BIR Tax Code requirement)
- Network session logs: 6 months (for troubleshooting and security)
- Customer service recordings: 1 year, unless required for active dispute
- Application forms (declined or unsigned): 90 days, then deleted
After the retention period, data is securely deleted or anonymized.
7. Security Measures
We implement organizational, physical, and technical safeguards aligned with NPC Circular 16-01 and 2022-04:
Organizational
- Designated Data Protection Officer (DPO)
- Privacy Manual and incident response procedures
- Annual Privacy Impact Assessments (PIA)
- Staff confidentiality agreements and DPA training
Physical
- Restricted access to data center and network operations room
- CCTV-monitored office and equipment areas
- Locked storage for any printed records
Technical
- Encryption-in-transit (TLS) on all customer-facing systems
- Encrypted database backups, off-site retention
- Multi-factor authentication on admin/staff systems
- Role-based access control (RBAC) and audit logs
- 24/7 NOC monitoring with intrusion detection and DDoS mitigation
- Regular vulnerability scans and security patching
In the event of a personal data breach affecting your rights, we will notify you and the NPC within 72 hours in accordance with NPC Circular 16-03.
8. Your Rights as Data Subject
Under Sections 16–19 of the Data Privacy Act, you have the right to:
- Be informed — about the collection and processing of your data
- Access — request a copy of the personal data we hold about you
- Object — to processing for marketing or profiling
- Rectification — correct inaccurate or outdated data
- Erasure or blocking — request deletion (subject to retention obligations)
- Data portability — receive your data in a structured, machine-readable format
- File a complaint — with our DPO or directly with the NPC
- Damages — be indemnified for damages from inaccurate, false, unlawfully obtained, or unauthorized use of your data
To exercise any of these rights, email our DPO at dpo@ewstelcoserv.net. We respond to all valid requests within 15 business days.
9. Cookies
Our website uses cookies and similar technologies for:
- Essential — session management, security, load balancing (cannot be disabled)
- Analytics — anonymous traffic measurement (e.g., page views, device type)
- Functional — remembering your preferences (e.g., cookie consent)
We do not use advertising or third-party tracking cookies. You can disable analytics via the cookie banner on first visit, or clear cookies in your browser settings at any time.
10. Changes to This Policy
We review this Privacy Policy at least annually. Material changes will be announced via email and/or a banner on our website at least 15 days before they take effect. Continued use of our service after the effective date constitutes acceptance of the updated policy.
11. Contact & Complaints
Data Protection Officer
EWS Telecommunications Services
Email: dpo@ewstelcoserv.net
Mailing: Rodriguez, Rizal, Philippines
NPC Registration: PIC-005-549-2026 · valid until 05 May 2027
If we cannot resolve your concern, you may file a complaint with the National Privacy Commission:
- Website: privacy.gov.ph
- Email: complaints@privacy.gov.ph
- Address: 5th Floor, Delegation Building, PICC Complex, Pasay City