top of page

Data Privacy

1. Introduction

Astra Sage Renewables Corporation, together with its affiliates, subsidiaries, and jointly controlled entities (collectively referred to as “Astra Sage”, “we”, “our”, or “us”) respects the privacy of individuals whose personal data we process.

This Privacy Notice explains how Astra Sage collects, processes, stores, uses, discloses, transfers, protects, and retains Personal Data in connection with:

  • the use of our website and digital platforms

  • communications with us

  • our commercial activities

  • supplier and buyer relationships

  • our operations involving the collection, transport, storage, processing, and export of Used Cooking Oil (UCO)

 

This policy applies to:

  • customers

  • suppliers

  • sellers of used cooking oil

  • contractors

  • vendors

  • agents

  • employees

  • consultants

  • business partners

  • website users

(collectively referred to as “you” or “your”).

 

Astra Sage processes Personal Data in accordance with:

  • Republic Act No. 10173 — Data Privacy Act of 2012

  • the Implementing Rules and Regulations (IRR)

  • guidelines issued by the National Privacy Commission (NPC)

 

2. Definition of Personal Data

For purposes of this policy:

Personal Data refers to any information from which the identity of an individual can be determined either directly or indirectly.

This includes but is not limited to:

  • name

  • contact details

  • address

  • phone number

  • email address

  • government identification numbers

  • bank account information

  • financial information

  • images or photographs

  • location information

  • device identifiers

 

3. Types of Personal Data We May Collect

Depending on the relationship with Astra Sage, we may collect:

 

3.1 Basic identity information

  • full name

  • contact details

  • residential or business address

  • email address

  • phone number

 

3.2 Business and professional information

  • company name

  • job title

  • department

  • business registration details

  • contractual information

 

3.3 Financial information

  • bank account details

  • payment details

  • invoicing and transaction records

 

3.4 Operational information

  • logistics information

  • delivery and collection records

  • UCO transaction records

  • supplier verification records

 

3.5 Technical information

When using our website or digital services we may collect:

  • IP address

  • browser type

  • device information

  • operating system

  • interaction data

  • usage logs

 

3.6 Location information

Where relevant for operational services such as UCO pickup logistics.

 

3.7 Communication data

Information contained in:

  • emails

  • phone calls

  • messages

  • chat services

  • social media interactions

 

3.8 Images and identity verification data

This may include:

  • photographs

  • identity verification documents

  • profile images

Where required for security, verification, or contractual purposes.

 

4. Sensitive Personal Data

In certain limited circumstances Astra Sage may process Sensitive Personal Data, which may include:

  • government identification numbers

  • financial information

  • background verification information

  • biometric information (where legally required)

  • health and safety related information

 

Sensitive Personal Data is processed only:

  • with explicit consent; or

  • where legally required or permitted by applicable law.

 

5. Personal Data of Minors

Astra Sage does not intentionally collect Personal Data from individuals under the age of 18.

Parents or guardians should not allow minors to submit Personal Data to Astra Sage.

If Personal Data of a minor is submitted, the parent or legal guardian is deemed to have consented to the processing of such data and accepts responsibility for the minor’s actions.

 

6. How Personal Data is Collected

We collect Personal Data through the following channels.

 

6.1 Directly from you

You may provide Personal Data when you:

  • complete forms

  • register accounts

  • contact us

  • enter into contracts

  • respond to surveys

  • participate in events or promotions

  • communicate via email or phone

  • interact on social media platforms

 

6.2 Through normal business operations

Personal Data may be generated through:

  • transaction records

  • logistics operations

  • delivery and collection services

  • safety monitoring

  • compliance procedures

  • service interactions

 

6.3 From third-party sources

We may obtain Personal Data from:

  • business partners

  • payment providers

  • logistics partners

  • insurance providers

  • financial institutions

  • credit reporting agencies

  • government registries

  • publicly available sources

  • marketing partners

  • referral programs

All such data is collected in accordance with applicable laws.

 

7. Use of Personal Data

Astra Sage may process Personal Data for the following purposes.

 

7.1 Providing services

  • delivering services and products

  • executing contracts

  • managing customer or supplier accounts

  • facilitating UCO collection logistics

  • verifying identity

  • processing payments

 

7.2 Safety and security

Personal Data may be used to:

  • verify identity

  • detect fraud

  • prevent illegal activities

  • protect facilities and personnel

  • investigate incidents

 

7.3 Customer and supplier support

We may use Personal Data to:

  • respond to inquiries

  • investigate complaints

  • provide assistance

  • improve customer service

 

7.4 Research and development

Personal Data may be used to:

  • improve services

  • develop new products

  • analyze usage trends

  • enhance operational efficiency

 

7.5 Legal compliance

Personal Data may be processed in order to:

  • comply with laws

  • respond to regulatory authorities

  • meet tax or reporting obligations

  • enforce contractual rights

 

7.6 Marketing and communications

With your consent where required, Astra Sage may send:

  • newsletters

  • updates

  • promotional information

  • event invitations

  • service announcements

 

Marketing communications may be sent through:

  • email

  • telephone

  • SMS

  • messaging platforms

You may opt out of such communications at any time.

 

8. Disclosure of Personal Data

Personal Data may be shared with the following parties where necessary.

 

8.1 Affiliates and subsidiaries

We may share Personal Data with Astra Sage group entities.

 

8.2 Service providers

Including:

  • IT service providers

  • cloud hosting providers

  • payment processors

  • logistics partners

  • data analytics providers

  • marketing platforms

  • research firms

 

8.3 Professional advisors

Including:

  • lawyers

  • auditors

  • consultants

  • insurers

 

8.4 Government authorities

Where required by law or regulatory obligation.

 

8.5 Business transactions

Personal Data may be transferred in connection with:

  • mergers

  • acquisitions

  • restructuring

  • asset transfers

  • financing transactions

 

9. International Data Transfers

Personal Data may be transferred outside the Philippines where required for:

  • cloud infrastructure

  • international business operations

  • buyer or regulatory requirements

When transferring Personal Data internationally, Astra Sage ensures appropriate safeguards are in place to maintain data protection standards.

 

10. Data Retention

Astra Sage retains Personal Data only for as long as necessary to fulfill the purposes described in this policy or as required by law.

Retention may be extended for purposes including:

  • regulatory compliance

  • legal claims

  • fraud prevention

  • safety investigations

  • financial auditing

After the retention period expires, Personal Data will be securely deleted or anonymized.

 

11. Data Security

Astra Sage implements reasonable technical, physical, and organizational safeguards including:

  • access control systems

  • encrypted communications

  • secure servers

  • restricted employee access

  • staff confidentiality obligations

While we take reasonable steps to protect Personal Data, no system can guarantee complete security.

 

12. Cookies and Website Tracking Technologies

Astra Sage and third-party partners may use:

  • cookies

  • tracking pixels

  • analytics tools

  • advertising identifiers

 

These technologies help us:

  • understand website usage

  • improve user experience

  • analyze website traffic

  • deliver relevant content

Users may disable cookies through browser settings.

 

13. Your Rights

Subject to applicable laws, individuals may have the right to:

  • access their Personal Data

  • correct inaccurate data

  • request deletion of Personal Data

  • withdraw consent

  • object to processing

  • request data portability

  • file complaints with the National Privacy Commission

Requests must be verified before processing.

 

14. Withdrawal of Consent

You may withdraw consent for processing Personal Data by contacting Astra Sage.

However, withdrawal of consent may prevent Astra Sage from continuing certain services or contractual relationships.

 

15. Verification of Requests

Before responding to any privacy request, Astra Sage may require:

  • identity verification

  • supporting documentation

  • confirmation of authority to make the request

This helps prevent unauthorized disclosure of Personal Data.

 

16. Updates to This Privacy Notice

Astra Sage may modify this Privacy Notice from time to time.

The latest version will always be available on our Website.

Continued use of our services after updates constitutes acceptance of the revised policy.

 

17. Language

This Privacy Notice is written in the English language.

If translated versions exist, the English version shall prevail in the event of any inconsistency.

 

18. Contact Information

For questions, requests, or concerns regarding Personal Data, please contact:

Astra Sage Renewables Corporation

Email:
lochan.dadhich@astra-sage.com

bottom of page