Privacy Policy

Future Perfect Inc. Comprehensive Data Privacy Policy

1. Introduction Future Perfect Inc. (“the Company”) is dedicated to ensuring the confidentiality, security, and protection of personal data processed through our Business Performance Language Assessment System (BUPLAS). This policy outlines the principles, policies, and procedures regarding the collection, processing, sharing, storage, and disposal of personal data in compliance with international standards and local data privacy laws, including GDPR, CCPA, and RA 10173 (Philippines).

2. Scope and Applicability This policy applies to all users interacting with BUPLAS, including employees, job applicants, third-party vendors, and authorized individuals engaged in recruitment, assessment, and related HR processes.

3. Identity of the Data Controller The Company provides access to BUPLAS on behalf of the employer or prospective employer (“Employer”). Most personal data collected through BUPLAS is on behalf of the Employer, making them the primary data controller. The Company also collects some personal data for its own purposes to monitor and enhance the service, in which case the Company acts as the data controller.

4. Data Collection and Processing The Company collects the following categories of personal data:

• Personal identification details (name, email, mobile number)
• Employment and professional information (resumes, qualifications)
• Assessment responses, results, and associated evaluation metrics
• Technical and usage data (IP addresses, device details, access logs, cookies)

All data is collected lawfully and transparently, strictly for recruitment assessment purposes, optimization of assessment tools, compliance, and internal administrative use.

5. Data Privacy Program Implementation Future Perfect Inc. maintains an established and continuously implemented Data Privacy Program, including:

• Mandatory data privacy training for all employees and third-party personnel processing personal data.
• Privacy by design embedded in all processes and systems.
• A comprehensive confidentiality policy and global privacy policy.
• Detailed procedures for data breach incident management, data subject right request handling, and data protection impact assessments (DPIAs).

Relevant documentation and evidence of implementation are available upon request via email.

6. Data Sharing and Third-Party Disclosure The Company shares personal data with authorized subprocessors/vendors only to provide BUPLAS services, under strict confidentiality agreements. Third-party processors must adhere to equal or higher data protection standards.

7. Data Deletion and Notification Upon completion of the retention period or upon explicit request, data is securely deleted or anonymized. This process includes notifying all subprocessors and vendors involved to destroy the data accordingly.

8. Storing and Transferring Your Personal Information Personal information collected is stored securely, protected by encryption technology (TLS). Appropriate technical and organizational measures ensure data security against accidental loss, unauthorized access, or unlawful processing.

9. User Rights and Control Data subjects have the following rights under applicable privacy laws, including RA 10173:

• Right to be informed
• Access to personal data
• Rectification of inaccuracies
• Erasure (subject to conditions)
• Restriction of data processing
• Data portability
• Objection to data processing
• Right to indemnify for damages
• Filing complaints with regulatory authorities

Requests can be submitted to our Data Privacy Officer (DPO).

10. Data Retention and Deletion Personal data is retained strictly for the duration necessary to fulfill contractual, business, and legal obligations. Upon expiry of the retention period or upon request, data is securely deleted or anonymized. Sub-processors and vendors are instructed accordingly.

11. Record of Processing Activities (ROPA) Future Perfect maintains a detailed Record of Processing Activities (ROPA), documenting all data handling operations, including purpose, categories of data subjects, data retention timelines, security measures, and responsible personnel. This record is available for regulatory inspection.

12. Data Security Measures The Company employs stringent security protocols, including:

• Encryption of data at rest and in transit (TLS/SSL)
• Robust authentication mechanisms
• Regular security audits and vulnerability assessments
• Compliance with ISO 27001 and SOC2 Type 2 frameworks

13. International Data Transfers Any cross-border data transfer is performed in compliance with applicable data protection laws, employing appropriate safeguards such as standard contractual clauses and adherence to international data privacy frameworks.

14. Minors’ Privacy BUPLAS does not target or knowingly collect data from individuals under 18 years of age.

15. Links to Third-Party Sites BUPLAS may include links to external websites. Users should review third-party privacy policies as the Company does not assume liability for external content or privacy practices.

16. Changes to this Privacy Policy Future Perfect reserves the right to modify this privacy policy. Updates will be communicated via email or the BUPLAS platform.

17. Notice to You The Company will communicate necessary information to you primarily via email or by placing notices on the BUPLAS platform.

18. Contact Information For questions or requests regarding personal data, please contact:

• Future Perfect Data Privacy Officer 
  
  • Email: dpo@futureperfect.com
  • Address HK: Suite A, 6/F, Ritz Plaza, 122 Austin Road, Tsimshatsui, Kowloon, Hong Kong
  • Address PH: Unit 1407-B, 88 Corporate Center, Sedeño cor. Valero St. Makati City, Philippines

By accessing and utilizing BUPLAS, users acknowledge acceptance of the terms outlined in this Data Privacy Policy.