Cebuana Lhuillier in Baguio, Cordillera Administrative Region
Summer capital of the Philippines. Tourist-dependent economy; pawnshop and online-lending activity peaks in lean months. M Lhuillier and Cebuana Lhuillier both operate central branches.
About Cebuana Lhuillier
Pawnshop and remittance network operated by PJ Lhuillier, Inc. Services: pawnshop, microinsurance, micro-savings, remittance, bills payment, business loans. Separate company from M Lhuillier Financial Services (operated by the Michel branch of the Lhuillier family). Disclosed a data breach in 2019 affecting approximately 900,000 customers, addressed by NPC Resolution NPC-BN-19-002 in 2024.
National coverage caveat: Cebuana Lhuillier's presence in Baguio is documented at the national / multi-branch level. Branch-specific addresses should be verified on the company's directory before transacting.
Public record for Cebuana Lhuillier
NPC Resolution NPC-BN-19-002 — In re PJ Lhuillier Incorporated
2024-05-16The National Privacy Commission issued its formal resolution on the 2019 Cebuana Lhuillier data breach (NPC-BN-19-002). The resolution was published in May 2024 after an extended investigation. The full text and dispositive findings are available in the linked NPC PDF.
Cebuana Lhuillier reports data breach affecting approximately 900,000 customers
2019-08-19Cebuana Lhuillier (PJ Lhuillier Inc.) disclosed a data breach affecting an estimated 900,000 customers after one of its email servers was compromised. The company notified the National Privacy Commission and affected customers. Names, dates of birth, addresses, sources of income, and other personal data were potentially exposed.
Escalation routing — Cordillera Administrative Region
Cordillera complaints route via BSP NCR intake; SEC PH has no permanent regional satellite office.
Recommended actions
Naranasan mo ba ito sa Baguio?
Magsumite ng reklamo at bubuo kami ng pormal na liham para sa BSP, SEC, at DTI.
Frequently asked — Cebuana Lhuillier in Baguio
Is Cebuana Lhuillier registered with the BSP?
Cebuana Lhuillier (operated by PJ Lhuillier, Inc.) is SEC-registered and its pawnshop, remittance, and microinsurance lines are supervised by the BSP under MORNBFI Sec. 4292P (pawnshops) and BSP remittance rules. It is not a BSP-supervised bank.
- Source:BSP — MORNBFI
- Source:PD 114 — Pawnshop Regulation Act
What was the 2019 Cebuana Lhuillier data breach?
Cebuana Lhuillier disclosed in 2019 a breach affecting approximately 900,000 customers. The matter was addressed by the National Privacy Commission and reflected in NPC Resolution NPC-BN-19-002 (issued 2024).
How do I file a complaint against Cebuana Lhuillier?
Submit a written complaint to the branch and the company's customer service first. If unresolved within 15 business days under RA 11765, escalate to BSP (CAM) for pawnshop or remittance issues and to NPC for any data-privacy element.
- Source:RA 11765 (FCPA, 2022)
- Source:BSP Consumer Assistance Mechanism
- Source:NPC complaint portal
Can I redeem a pawned item after the maturity date at Cebuana?
Yes. PD 114 §13 grants a 90-day grace period after maturity, during which the pawner may redeem upon payment of principal, interest, and service charge. Public auction is permitted only after this period.
What interest can a Cebuana pawnshop charge?
BSP pawnshop rules (MORNBFI Sec. 4292P) require the rate to be posted at the branch; Central Bank Circular 905 lifted statutory ceilings, but courts have struck unconscionable rates under Article 1306 of the Civil Code (Medel v. CA, 1998).
- Source:BSP — MORNBFI
- Source:Central Bank Circular 905, s. 1982
- Source:Medel v. CA, G.R. 131622 (1998)
Pwede bang mag-claim ng damages sa breach ng data?
Oo. Under RA 10173 §16, may karapatang mag-file ng administrative complaint sa NPC at humingi ng moral damages sa civil action. Ang NPC ay maaaring magpataw ng administrative fines hanggang ₱5M per offence sa NPC Circular 2022-01.
- Source:RA 10173 — Data Privacy Act
How long does Cebuana have to respond to a complaint?
RA 11765 §6 sets a 15 business-day default response window for financial service providers. Failure to respond is itself a documentable violation under the FCPA and BSP Circular 1160.
- Source:RA 11765 (FCPA, 2022)
- Source:BSP Circular 1160 — IRR of RA 11765
What evidence do I need for a Cebuana Lhuillier complaint?
Pawn ticket or remittance receipt, screenshot of advertised rate, and any written reply from the branch or call-center. RA 3765 requires a written disclosure of all charges; request a copy if missing.
Saan magfa-file kung mali ang valuation ng pawn?
Mag-demand muna sa branch in writing. Kung hindi ayos, mag-file sa BSP Consumer Assistance Mechanism (RA 11765) at sa MTC small claims kung ₱1,000,000 pababa ang halaga ng dispute.
Can NPC order Cebuana Lhuillier to delete my data?
Yes. RA 10173 grants the NPC authority to order data deletion, issue cease-and-desist orders, and impose administrative fines. NPC Circular 16-04 sets a 1-year prescriptive period from the date of discovery.