1. Introduction

CTPLExpress ("we," "us," or "our") is a digital platform that facilitates CTPL insurance applications. All CTPL insurance policies are issued and underwritten by Travellers Insurance & Surety Corporation (TRISCO), a licensed non-life insurance company regulated by the Insurance Commission of the Philippines.

We are committed to protecting your personal data in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and applicable National Privacy Commission (NPC) issuances.

This Privacy Policy explains how we collect, use, store, and share your personal data when you use our platform.

2. Personal Data We Collect

We may collect the following information necessary for CTPL insurance processing:

• Personal information: Full name
• Contact information: Mobile number, email address, residential address
• Vehicle information: Plate number, MV file number, engine number, chassis number, make, model, and year
• Transaction information: Payment references and application identifiers (we do not store full payment card details)

We only collect data necessary for insurance facilitation, underwriting, and regulatory compliance.

3. Purpose of Data Processing

We process your personal data for the following purposes:

• To facilitate and process your CTPL insurance application
• To transmit application data to TRISCO for underwriting and policy issuance
• To generate and deliver policy documents, confirmations, and notifications
• To comply with requirements of the Insurance Commission and Land Transportation Office (LTO)
• To provide customer support and transaction verification

4. Data Sharing

Your personal data may be shared only as necessary with the following:

• Travellers Insurance & Surety Corporation (TRISCO) — for underwriting and issuance of CTPL insurance policies
• Government agencies — such as the Insurance Commission and LTO, when required by law
• Service providers — such as SMS, email, and system processing providers for communication and delivery purposes

We do not sell or disclose personal data for marketing purposes.

5. Legal Basis for Processing

We process your personal data under the following lawful bases:

• Contractual necessity — to process and facilitate your CTPL insurance application
• Legal obligation — to comply with insurance regulations and government requirements
• Legitimate interest — to ensure system security, prevent fraud, and improve services, provided such interests do not override your fundamental rights

6. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes stated in this Policy and to comply with legal and regulatory obligations.

Insurance-related records may be retained for at least five (5) years or longer if required by applicable laws or insurance regulations. After the retention period, data is securely deleted or anonymized.

7. Data Security

We implement reasonable and appropriate security measures to protect your personal data, including:

• Encrypted transmission (HTTPS/TLS)
• Secure storage systems
• Access controls and authentication safeguards

While we apply industry-standard security practices, no method of transmission or storage is completely secure.

8. Your Rights

Under the Data Privacy Act of 2012, you have the following rights:

• Right to be informed
• Right to access your personal data
• Right to correct inaccurate or incomplete data
• Right to object to certain processing activities
• Right to data portability (where applicable)
• Right to erasure or blocking, subject to legal and regulatory retention requirements

9. Data Protection Officer

For privacy concerns or requests, you may contact:

We may require identity verification before processing requests and will respond within a reasonable period in accordance with NPC guidelines.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in laws, regulations, or operational requirements. Updates will be posted on this page with a revised effective date.