1. INTRODUCTION

Operations Organised (“Ops Org,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (“DPA”), and its Implementing Rules and Regulations. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Agency Operations Health Check and Agency Operations Efficiency Calculator (the “Assessment Tools”).

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

Contact Information:

• Name and job title
• Email address
• Phone number
• Company name and address

Business Information:

• Company size (employees, revenue)
• Industry and service offerings
• Operational data and metrics
• Current systems and processes
• Team structure information
• Performance indicators and challenges

Assessment Responses:

• Answers to diagnostic questions
• Operational efficiency data
• Process maturity assessments
• Technology usage information

2.2 Information Collected Automatically

Technical Information:

• IP address and location data
• Browser type and version
• Device information
• Operating system
• Referral source
• Pages visited and time spent

Usage Data:

• Assessment completion status
• Response patterns and timing
• Feature usage and preferences
• Error logs and diagnostic information

Cookies and Tracking Technologies:

• Session cookies for functionality
• Analytics cookies for usage tracking
• Preference cookies for user experience
• Marketing cookies for remarketing (with consent)

3. HOW WE USE YOUR INFORMATION

3.1 Primary Purposes

Assessment Services:

• Process and analyze your responses
• Generate customized results and recommendations
• Provide benchmarking and comparative analysis
• Deliver assessment reports and insights

Business Development:

• Follow up on assessment results
• Provide additional information about our services
• Schedule consultation calls
• Send relevant business insights and resources

3.2 Secondary Purposes

Service Improvement:

• Analyze usage patterns to improve Assessment Tools
• Develop new features and capabilities
• Enhance user experience and interface
• Conduct research and benchmarking studies

Marketing and Communication:

• Send newsletters and industry insights (with consent)
• Provide relevant content and resources
• Conduct market research and surveys
• Promote related services and events

Legal and Administrative:

• Comply with legal obligations under Philippine law
• Protect our rights and interests
• Prevent fraud and abuse
• Maintain records for business purposes

4. LEGAL BASES FOR PROCESSING (DATA PRIVACY ACT)

We process your personal information based on the following lawful criteria under the Data Privacy Act of 2012:

4.1 Legitimate Interest

• Providing assessment services and results
• Business development and relationship building
• Service improvement and analytics
• Security and fraud prevention

4.2 Consent

• Marketing communications
• Non-essential cookies
• Market research participation
• Newsletter subscriptions

4.3 Contract Performance

• Delivering requested assessment services
• Providing follow-up consultations
• Fulfilling service agreements

4.4 Legal Compliance

• Compliance with Philippine laws and regulations
• Response to legal requests from government authorities
• Financial record keeping as required by law

5. INFORMATION SHARING AND DISCLOSURE

5.1 We Do Not Sell Personal Information

We do not sell, rent, or trade your personal information to third parties for monetary consideration.

5.2 Service Providers

We may share information with trusted service providers who assist us with:

• Cloud hosting and data storage
• Analytics and performance monitoring
• Email delivery and communication
• Customer relationship management
• Payment processing (if applicable)

All service providers are contractually bound to protect your information and use it only for specified purposes in compliance with Philippine data protection laws.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor organization with appropriate notice and compliance with Philippine law.

5.4 Legal Requirements

We may disclose information when required by Philippine law, legal process, or to:

• Comply with subpoenas, court orders, or government requests
• Protect our rights and interests
• Prevent fraud or abuse
• Ensure user safety and security
• Comply with National Privacy Commission requirements

5.5 Aggregated and Anonymized Data

We may share aggregated, anonymized data that cannot identify individuals for:

• Industry benchmarking reports
• Market research and analysis
• Service improvement and development
• Academic or business research

6. DATA RETENTION

6.1 Retention Periods

• Assessment Data: Retained for 3 years from last interaction to provide ongoing support and benchmarking
• Contact Information: Retained for 5 years for business development purposes
• Marketing Data: Retained until consent is withdrawn or 2 years of inactivity
• Technical Data: Retained for 1 year for security and analytics purposes

6.2 Deletion

We will delete your information when:

• Retention periods expire
• You request deletion (subject to legal obligations)
• Your account is closed
• Legal obligations no longer apply

7. DATA SECURITY

7.1 Security Measures

We implement appropriate technical and organizational measures in compliance with the Data Privacy Act including:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and audits
• Employee training on data protection
• Incident response procedures
• Physical security of data storage facilities

7.2 Data Breaches

In the event of a personal data breach, we will:

• Contain and assess the breach within 24 hours
• Notify the National Privacy Commission within 72 hours (where required)
• Notify affected individuals without undue delay if the breach poses high risk
• Take steps to prevent future breaches
• Maintain documentation of all breaches

8. YOUR RIGHTS AND CHOICES

8.1 Rights Under the Data Privacy Act

As a data subject under Philippine law, you have the right to:

• Access: Request information about your personal data being processed
• Rectification: Correct inaccurate or incomplete personal data
• Erasure/Right to be Forgotten: Request deletion of your personal data
• Restriction: Object to or restrict processing of your personal data
• Data Portability: Receive your personal data in a structured, commonly used format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

8.2 How to Exercise Rights

To exercise your rights, contact our Data Protection Officer at privacy@opsorganised.com with:

• Your full name and contact information
• Specific request details
• Valid identification for verification
• Preferred response method

We will respond within fifteen (15) days of receiving a valid request, or as required by the National Privacy Commission.

8.3 Communication Preferences

You can:

• Unsubscribe from marketing emails using the link provided
• Update communication preferences by contacting us
• Withdraw consent for processing at any time
• Opt out of non-essential cookies through browser settings

9. INTERNATIONAL DATA TRANSFERS

9.1 Cross-Border Transfer Safeguards

When transferring personal data outside the Philippines, we ensure compliance with the Data Privacy Act by implementing:

• Adequacy decisions by the National Privacy Commission
• Standard contractual clauses approved by the NPC
• Binding corporate rules
• Other appropriate safeguards as required by law

9.2 Third Country Processing

Some of our service providers may process data in countries outside the Philippines. We ensure these transfers comply with the Data Privacy Act and obtain necessary approvals from the National Privacy Commission when required.

10. CHILDREN’S PRIVACY

Our Assessment Tools are not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately so we can delete such information.

11. COOKIES AND TRACKING

11.1 Cookie Types

• Essential Cookies: Required for assessment functionality
• Analytics Cookies: Help us understand usage patterns
• Marketing Cookies: Enable remarketing and advertising (with consent)
• Preference Cookies: Remember your settings and choices

11.2 Cookie Management

You can control cookies through:

• Browser settings and preferences
• Our cookie banner and preference center
• Third-party opt-out tools
• Browser privacy extensions

Disabling certain cookies may affect Assessment Tool functionality.

12. THIRD-PARTY LINKS AND SERVICES

Our Assessment Tools may contain links to third-party websites or services. This Privacy Policy does not apply to third-party practices. We encourage you to review the privacy policies of any third-party services you access.

13. NATIONAL PRIVACY COMMISSION COMPLIANCE

We are committed to complying with all National Privacy Commission regulations and guidelines. You have the right to file a complaint with the NPC if you believe your data protection rights have been violated.

National Privacy Commission Contact:

• Website: privacy.gov.ph
• Email: info@privacy.gov.ph
• Address: 5/F Philippine International Convention Center, Vicente Sotto Avenue, Pasay City 1308

14. UPDATES TO THIS POLICY

We may update this Privacy Policy periodically to reflect changes in our practices or applicable Philippine laws. We will:

• Post the updated policy with the effective date
• Notify users of material changes via email or prominent notice
• Obtain consent for changes that materially affect your rights
• Comply with National Privacy Commission notification requirements

15. CONTACT INFORMATION

Data Protection Officer

For privacy-related questions, concerns, or to exercise your rights: