PRIVACY NOTICE FOR ASSESSMENT TAKERS
1. OUR APPROACH TO PRIVACY
1.1 Future Perfect HK Ltd. and its affiliate entities, such as FP Philippines, Inc. (the “Company”), is committed to ensuring the confidentiality, security, and protection of personal data. This notice explains how personal information is collected, used, stored, shared, and otherwise processed in accordance with the applicable lawful bases under Republic Act No. 10173, also known as the Data Privacy Act (DPA) of 2012, its Implementing Rules and Regulations (IRR), and other relevant laws of the Philippines. These legal bases may include, as applicable, contract necessity, legitimate interests, legal obligations, and consent.
1.2 The Company operates an employee and applicant testing platform that enables prospective and current employees to take assessments through our website at https://applicant.buplas.com/ (the “Service”). The Service is provided to Employers, and personal information processed through the Service is processed on behalf of the Employer in its capacity as the Personal Information Controller (PIC).
1.3 The Company does not intentionally collect Sensitive Personal Information (SPI) during assessments unless expressly required by the Employer for lawful recruitment purposes, and only where a valid lawful basis exists, appropriate safeguards are implemented, and explicit consent is obtained where required.
1.4 Before accessing or using our service, please ensure that you have read and understood our collection, storage, use and disclosure of your personal information as described in this privacy notice.
2. IDENTITY OF THE DATA CONTROLLER
2.1 We provide you access to the Service on behalf of your employer or prospective employer (the “Employer”). As such, most of the personal information we collect about you when you use the Service is collected on behalf of the Employer. The Employer is therefore the Personal Information Controller (PIC) in respect of the personal information referred to in paragraph 3 below.
2.2 Where personal information is processed on behalf of the Employer, the Company acts as a Personal Information Processor (PIP) and processes personal information only upon instructions from the Employer, except where otherwise required by law.
2.3 We do, however, collect some personal information for our own purposes, such as where we collect certain personal information to monitor and improve our Service. The Company is the Personal Information Controller (PIC) in respect of the personal information referred to in paragraph 4 below.
3. PERSONAL INFORMATION WE COLLECT ABOUT YOU ON BEHALF OF THE EMPLOYER
The personal information we may collect;
3.1 We collect personal information on behalf of the Employer that you voluntarily submit directly to us when you use our Service. This can include information you provide to us when you fill in a form on our Service, respond to questions, take a test on our Service or upload any audio-visual file through the Service.
3.2 We will indicate to you if the provision of certain personal information is mandatory or optional. If you choose not to provide any personal information marked as mandatory, the Employer may not be able to process your application or perform some of its obligations to you.
3.3 The list below sets out the categories of personal information we collect about you on behalf of the Employer:
(a) Contact information, such as your name, mobile number and email address.
(b) Educational attainment and work experience
(c) Account log-in details.
(d) Test responses and results. Your responses to test questions and the associated score, report or other performance evaluation.
(e) Audio-visual recordings, where applicable, including webcam images, video recordings, screen recordings, audio recordings, and other proctoring-related data collected during assessment sessions to document candidate conduct, support identity verification, maintain assessment integrity, and deter impersonation, cheating, or other forms of misconduct. Such recordings may be reviewed by authorized personnel solely for these purposes.
(f) Any other personal information the Employer may request or you provide in connection with your application, such as information contained in any documents you upload to the Service.
3.4 The Employer may use this information to:
(a) create and/or send account login credentials on behalf of the Employer to enable you to access and complete assessments as part of the recruitment process;;
(b) open and maintain your candidate records (if you are an applicant) or update and maintain your employment records (if you are an existing employee of the Employer);
(c) communicate with you as part of the recruitment process;
(d) process your application or otherwise assess your suitability for a particular role;
(e) Review and evaluate your responses to test questions through manual and/or automated assessment methods and determine progression to subsequent recruitment stages based on predefined qualification criteria, where applicable.
(f) Verify your identity, monitor compliance with assessment rules, investigate suspected misconduct, and maintain the integrity and security of assessment processes;
3.5 Automated assessment processing
This Service utilizes automated processing methods to facilitate the administration of online assessments, evaluation of assessment results, monitoring of assessment activities, and generation of recruitment-related insights. Such automated processing operates based on predefined system rules, workflows, and algorithms embedded within the Service.
Automated processing activities may include:
(a) Algorithm-Based Scoring Mechanisms
For certain assessment formats, such as multiple-choice, true/false, matching, and similar objective question types, responses may be automatically scored by the system based on predefined answer keys and scoring criteria.
(b) System-Generated Status Updates
Candidate assessment statuses (such as “Completed,” “In Progress,” “Barred,” “Failed,” or similar classifications) may be automatically updated based on predefined system events or conditions, including assessment completion, inactivity thresholds, time limits, or assessment rule violations.
(c) Automated Monitoring of Assessment Activity
The Service may automatically record and process assessment-related activity logs, including login times, session duration, navigation events, assessment responses, and other relevant system activity, for purposes including assessment administration, security, fraud prevention, troubleshooting, and assessment integrity monitoring.
(d) Automated Flagging or Restriction Mechanisms
The Service may automatically identify, flag, restrict, suspend, or terminate assessment sessions when predefined conditions are met, including suspected violations of assessment rules, suspicious activity, technical anomalies, or other events that may affect assessment integrity or platform security.
(e) Automated Generation of Reports and Analytics
The Service may automatically compile assessment results, candidate performance metrics, and related information to generate reports, summaries, dashboards, and analytics for authorized recruiters, administrators, and Employer representatives.
(f) System Notifications
The Service may automatically generate and send notifications, including account credentials, assessment invitations, reminders, status updates, retake notifications, and other communications necessary for the administration of assessments and related recruitment activities.
Automated processing is used to support the efficient administration of assessments and recruitment processes. Where automated processing is used as part of decision-support mechanisms that may affect a candidate’s assessment outcome or progression, final hiring decisions remain subject to review and determination by the Employer. Candidates may request human review or raise concerns with the Employer, subject to applicable law and internal policies.
3.6 The processing of the above personal information is necessary for:
(a) the performance of a contract and to take steps prior to entering into a contract; and
(b) the Employer’s legitimate interests, namely internal administrative, team management purposes as well as managing recruiting activities and/or human resources records.
(c) the Employer’s legitimate interests in ensuring assessment integrity, identity verification, fraud prevention, and recruitment security.
3.7 The Employer might use the personal information we collect about you on its behalf for other purposes in connection with processing your application, internal administration, team management and/or maintaining human resources records. Please refer to any further privacy notices provided by the Employer for further information about how the Employer will use your personal information, including the personal information we collect through the Service on its behalf.
4. PERSONAL INFORMATION WE COLLECT ABOUT YOU FOR OUR OWN PURPOSES
Personal information we may collect
4.1 We collect personal Information that you voluntarily submit directly to us when you fill in a form or respond to questions on our Service. We may use this information to communicate with you in connection with the testing process.
4.2 The processing of this personal information is necessary for:
(a) the performance of a contract and to take steps prior to entering into a contract; and
(b) our legitimate interests, namely administering the Service and communicating with users.
We may use this information to:
(a) monitor and improve our Service; and
(b) provide additional services to the Employer, such as monitoring and improving its application processes.
Personal information we may collect automatically;
4.3 We also automatically collect the following personal information indirectly about how you access and use the Service and information about the device you use to access the Service:
(a) Information about how you access and use the Service. For example, the website from which you came and the website to which you are going when you leave our website, how frequently you access the Service, the time you access our Service and how long you use it for, the approximate location that you access the Service from, whether you access the Service from multiple devices, and other actions you take on the Service.
(b) Information about your device. We also collect information about the computer, tablet, smartphone or other electronic device you use to connect to our Service. This information can include details about the type of device, operating systems, browsers and applications connected to our Service through the device, and your IP address.
4.4 We may use the personal information we collect from you to monitor and improve our Service and business, and to help us to develop new products and services. This may also include usage analytics, billing and invoicing administration, operational and performance reporting, and the creation of de-identified or aggregated statistical insights. Where data is used for such purposes, it is handled on a need-to-know basis and, where feasible, pseudonymized or anonymized.
4.5 The processing of the personal information we collect from you automatically is necessary for our legitimate interests, namely: to tailor our Service to the user and to improve our Service generally; to monitor and resolve issues; to communicate with users; to contact users; and for the detection and prevention of fraud.
4.6 We may anonymize and aggregate any of the personal information we collect (so that it does not directly identify you). We may use anonymized information for purposes that include testing our IT systems, research, data analysis, improving our Service and developing new products and features. We may also share such anonymized information with others.
The categories of recipients to which we may transfer your personal information
4.7 As required in accordance with how we use it, we may share your personal information with the following:
(a) The Employer. We may share your Contact Information with the Employer for the purpose of providing our services to the Employer.
(b) Service providers and advisors. We may share your personal information with third party vendors and other service providers that perform services for us or on our behalf, which may include providing mailing, email or chat services, web hosting, or providing analytic services. These third parties are listed on our subprocessor listing (updated from time to time) and available from us upon request.
(c) Law enforcement, regulators and other parties for legal reasons. We may share your personal information with third parties as required by law or if we reasonably believe that such action is necessary to (i) comply with the law and the reasonable requests of law enforcement; (ii) detect and investigate illegal activities and breaches of agreements; and/or (iii) exercise or protect the rights, property, or personal safety of Company, its users or others.
(d) With other companies and brands owned or controlled by Company, and other companies owned by or under the common ownership as Company, which also includes our subsidiaries (i.e., any organization we own or control) or our ultimate holding company (i.e., any organization that owns or controls us) and any subsidiaries it owns. These companies will use your personal information in the same way as we can under this policy.
5. STORING AND TRANSFERRING YOUR PERSONAL INFORMATION
5.1 Security. We implement appropriate technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, change or damage. All personal information we collect will be stored on our secure servers and all transfers of personal information are protected by TLS encryption technology. We will never send you unsolicited emails or contact you by phone requesting your account ID, password, credit or debit card information or national identification numbers.
5.2 Retention Periods. We will retain personal information that we process for our own purposes only for as long as necessary to fulfill the purposes described in this Privacy Notice and to comply with our legal obligations and legitimate business interests.
Where personal information is processed on behalf of the Employer, retention periods are determined by the Employer. The Employer may have its own policies regarding how long it retains personal information collected through the Service. Please refer to any privacy notices provided by the Employer or contact the Employer directly for further information regarding its retention practices.
Upon termination or expiry of the agreement between the Employer and Company, personal information processed on behalf of the Employer will be retained in a secure archive for up to thirty (30) days for operational, audit, backup, and transition purposes. After this period, the personal information will be securely deleted, anonymized, or otherwise disposed of, unless a longer retention period is required or permitted by applicable law, regulatory requirements, legal proceedings, or contractual obligations.
6. YOUR RIGHTS IN RESPECT OF YOUR PERSONAL INFORMATION
As a data subject you have the following rights under Philippine Data Privacy Act of 2012:
· Right to be informed
· Right to object
· Right to access
· Right to rectify or correct erroneous data
· Right for erasure or blocking
· Right to secure data portability
· Right to be indemnified for damages
· Right to file a complaint.
7. INTERNATIONAL DATA TRANSFERS
Where personal information is transferred outside the Philippines, we will implement appropriate safeguards, including contractual protections, data processing agreements, and other lawful transfer mechanisms required under applicable data protection laws.
8. LINKS TO THIRD PARTY SITES
Our Service may, from time to time, contain links to and from third party websites, including those of other users, our partner networks, advertisers, partner merchants, news publications, retailers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check the individual policies before you submit any information to those websites.
9. OUR POLICY TOWARDS CHILDREN
Our Service is not directed at persons under 18 and we do not knowingly collect personal information from children under 18. If you become aware that your child has provided us with personal information, without your consent, then please contact us using the details below so that we can take steps to remove such information and terminate any account your child has created with us.
10. CHANGES TO THIS POLICY
We may update this privacy policy from time to time and so you should review this page periodically. When we change this privacy policy in a material way, we will update the “last modified” date at the end of this privacy policy. Changes to this privacy policy are effective when they are posted on this page.
11. NOTICE TO YOU
If we need to provide you with information about something, whether for legal, marketing or other business-related purposes, we will select what we believe is the best way to get in contact with you. We will usually do this through email or by placing a notice on our Service.
12. CONTACTING THE EMPLOYER
If you have any questions, comments and requests regarding your personal information collected by us on behalf of the Employer as set out in paragraph 3, please contact the Employer directly.
Where necessary, we may assist in forwarding requests to the Employer as the personal information controller.
13. CONTACTING US
For questions or requests regarding personal data, please contact:
Future Perfect Data Privacy Officer
Email: dpo@futureperfect.com
Address HK: Suite A, 6/F, Ritz Plaza, 122 Austin Road, Tsimshatsui, Kowloon, Hong Kong
Address PH: Unit 1407-B, 88 Corporate Center, Sedeño cor. Valero St. Makati City, Philippines
Last modified : June 5, 2026
