NCS PHILIPPINES PRIVACY NOTICE
Introduction
NCS Philippines is a leading IT solutions provider in the Philippines, dedicated to empowering businesses with innovative technology. We provide IT solutions such as Custom Software Development, Managed Services, Cloud Services, Managed Security Services, and Ready-to-Use Business and Productivity Software.
We are committed to protecting your privacy and ensuring the security of your personal information. This privacy notice outlines how we collect, use, disclose, and protect your data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.
Personal information we collect
We may collect the following personal information:
- First Name
- Last Name
- Email Address
- Mobile Number
- Job Title
- Company Name
- Industry
- Business Scale
- Years of job experience
- Any other information you provide to us
How we protect your data
NCS Philippines maintains a secure environment through the implementation of a Data Protection Policy, for the protection of personal information processed electronically. The NCS Philippines Data Protection Policy is in accordance with the Data Privacy Act of 2012 and provides for the appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction.
NCS Philippines uses reasonable security safeguards such as data encryptions, network firewalls, and other security standards, to protect the information from loss, unauthorized access, use, or disclosure.
Furthermore, in accordance with the Data Privacy Act of 2012, a Data Protection Officer has been appointed to manage and protect your Personal Data, which is being supported by Compliance Officers for Privacy. Breaches shall be reported with dispatch, and NCS Philippines will endeavor to always ensure that its Privacy Management Programs are always monitored and updated to be at par with future developments.
Purpose of data collection
Generally, NCS Philippines collects, uses and discloses your Personal Data for the following purposes:
- responding to your queries and requests;
- managing the administrative and business operations of NCS Philippines and complying with internal policies and procedures;
- facilitating business asset transactions (which may extend to any mergers, acquisitions or asset sales) involving any of the Companies;
- matching any Personal Data held which relates to you for any of the purposes listed herein;
- resolving complaints and handling requests and inquiries;
- preventing, detecting and investigating crime and analyzing and managing commercial risks;
- providing media announcements and responses;
- monitoring or recording phone calls and customer-facing interactions for quality assurance, employee training and performance evaluation and identity verification purposes;
- legal purposes (including but not limited to obtaining legal advice and dispute resolution);
- conducting investigations relating to disputes, billing, suspected illegal activities or fraud;
- meeting or complying with any applicable rules, laws, regulations, circulars or guidelines issued by any legal or regulatory bodies which are binding on NCS Philippines (including but not limited to responding to regulatory complaints, disclosing to regulatory bodies and conducting audit checks, due diligence and investigations);
- processing your job application;
- administering benefits and payroll processing;
- organizing training and development of employees, and assessing their performance; and
- purposes which are reasonably related to the aforesaid.
Furthermore, NCS Philippines may also collect, use and disclose your Personal Data for the following “NCS Philippines Additional Purposes,” such as:
- analytics and tracking, including facilitating the sale of analytical data;
- conducting market research and surveys to enable us to understand and determine customer location, preferences and demographics to develop special offers and marketing programs in relation to NCS Philippines’s Products and Services, and to improve our service delivery and your customer experience at our touchpoints;
- providing additional Products and Services and benefits to you, including promotions, loyalty and reward programs from NCS Philippines;
- matching Personal Data with other data collected for other purposes and from other sources (including third parties) in connection with the provision, marketing or offering of Products and Services by NCS Philippines;
- leads generation and management for marketing NCS Philippines’s Products and Services;
- administering contests, competitions and marketing campaigns, and personalizing your experience at NCS Philippines’s touchpoints;
- communicating to you advertisements involving details of our Products and Services, special offers and rewards, either to our customers generally, or which we have identified may be of interest to you (including but not limited to upselling, cross selling and telemarketing);
- organizing promotional events and corporate social responsibility projects; and
- purposes which are reasonably related to the aforesaid.
In addition, where permitted under the Data Privacy Act and subject to the provisions of any applicable law, your Personal Data may be disclosed, for NCS Philippines’s Additional Purposes, to the vendors or other third party service providers in connection with promotions and services offered by NCS Philippines. In line with this, NCS Philippines may also collect, use and disclose your Personal Data for the following “Preferred Partners Additional Purposes”:
- conducting market research and surveys to enable us to understand and determine customer location, preferences and demographics to develop special offers and marketing programs with our preferred partners;
- matching Personal Data with other data collected for other purposes and from other sources (including third parties) in connection with the provision, marketing or offering of products and services (including promotions) by our preferred partners;
- leads generation and management for marketing the products and services offered by our preferred partners;
- administering contests, competitions and marketing campaigns in connection with the products and services offered by our preferred partners;
- sending you informational, recruitment and other notification messages communicated by our preferred partners;
- communicating to you advertisements involving details of the products, services, special offers and rewards offered by our preferred partners, either to our customers generally, or which we or our preferred partners have identified may be of interest to you (including but not limited to upselling, cross selling and telemarketing); and
- purposes which are reasonably related to the aforesaid.
Disclosure of personal information
We may share your personal information with:
- Service providers and partners who assist us in our operations
- Regulatory authorities as required by law
- Other third parties with your consent
Whenever it shall be necessary to share your Personal Data with NCS Philippines’s partners or to any other party as indicated in this Policy, NCS Philippines ensures that it shall execute a Data Sharing Agreement with its partner in accordance with the Data Privacy Act and shall be done through secured means. These partners or companies shall also be required to comply with the confidentiality standards no less than what is set-forth in this Policy, and use these Personal Data only for our purposes and as instructed by NCS Philippines.
Storage of personal data
Data collected by NCS Philippines shall be stored securely and managed in accordance with the Data Privacy Act of 2012 and its implementing rules and regulations, as well as applicable industry standards and best practices. Appropriate administrative, physical, and technical safeguards shall be implemented to control access and protect information from unauthorized access, use, disclosure, alteration, or destruction.
Classification of information assets shall determine the level and type of protection required. Based on this classification, appropriate storage protection measures shall be applied to ensure the confidentiality, integrity, and availability of such information. These measures may include, but are not limited to:
- Access Controls – Role-based and need-to-know restrictions, strong authentication mechanisms, and periodic review of access rights.
- Encryption – Use of strong cryptographic methods for data at rest and in transit, where appropriate.
- Secure Storage Infrastructure – Protection through secure servers, secure cloud services, and industry-standard data centers with monitoring.
- Backup and Recovery – Regular backups and tested recovery procedures to maintain availability and resilience against data loss.
- Monitoring and Logging – Audit trails and real-time monitoring to detect and respond to unauthorized or suspicious activity.
NCS Philippines shall periodically assess and update its data storage and protection practices to address emerging threats, comply with applicable laws and regulations, and align with recognized information security frameworks.
Retention and disposal of your personal data
NCS Philippines shall retain Personal Data (including, but not limited to, data contained in electronic documents) only for as long as necessary and in accordance with applicable law and the NCS Philippines’s Information Security and Data Protection Policy. Personal Data shall not be retained indefinitely in contemplation of any possible future use that has not been determined.
Personal Data shall be retained strictly for the following purposes:
- for the fulfillment of the declared, specified, and legitimate purpose;
- for the establishment, exercise, or defense of legal claims; or
- for legitimate business purposes, provided such purposes are consistent with applicable industry standards or approved by the appropriate government authority.
NCS Philippines’s default retention period is five (5) years, unless a longer period is required or permitted by law. If NCS Philippines determines that further retention is necessary beyond the applicable retention period, such data may only be retained if it has been anonymized such that it can no longer be linked to an identifiable data subject, or if it is retained solely for historical, statistical, or scientific purposes in accordance with applicable laws.
Upon expiration of the applicable retention period, NCS Philippines shall securely dispose of Personal Data in accordance with Data Privacy Laws and shall ensure that such disposal prevents any further unauthorized disclosure, sharing, or processing.
Your rights
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations (IRR), you have the following rights with respect to your Personal Data:
- Right to Be Informed – You have the right to know whether your Personal Data is being processed, the purpose of the processing, the scope and method of processing, and the entities with whom your data may be shared.
- Right to Access – You have the right to request access to your Personal Data that the Company holds, including information on how it is being used, shared, or retained.
- Right to Rectification – You may request correction or completion of your Personal Data if it is inaccurate, outdated, incomplete, or misleading.
- Right to Erasure or Blocking – You may request the deletion, removal, or blocking of your Personal Data from the Company’s systems when data is unlawfully obtained, retained beyond the necessary period, or when consent has been validly withdrawn and no other legal basis to retain exists.
- Right to Data Portability – You may request a copy of your Personal Data in a structured, commonly used, and machine-readable format, and to have the data transmitted to another entity, where technically feasible and applicable.
- Right to Object – You have the right to object to the processing of your Personal Data on legitimate grounds, including profiling or automated decision-making that produces legal or similarly significant effects, unless such processing is necessary under law.
- Right to Withdraw Consent – You may withdraw consent previously given for processing of your Personal Data at any time, subject to legal or contractual restrictions and reasonable notice, without affecting the lawfulness of processing before the withdrawal.
- Right to File Complaints with the National Privacy Commission (NPC) – You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your rights under the Data Privacy Act have been violated.
How to Exercise Your Rights:
To exercise any of the rights listed above, please submit a written request to NCS Philippines's Data Protection Officer (DPO) through the contact details provided below. Your request should include:
- Your full name and contact information;
- A clear description of the request and the specific right you wish to exercise; and
- Supporting documents, as may be necessary to verify your identity and process the request.
The Company will respond to your request within the timeframes provided under the Data Privacy Act and IRR, subject to applicable exceptions and limitations allowed by law.
Contact us
If you:
- would like to have a copy of our Information Security and Data Protection Policy
- have any questions or feedback relating to your Personal Data or our Data Privacy Policy;
- would like to withdraw your consent to any use of your Personal Data as set out in this Data Privacy Policy; or
- would like to obtain access and make corrections to your Personal Data records
Please contact NCS Philippines as follows:
Email: dpo@ph.ncs.co
Write in: Data Protection Office, NCS Philippines, Inc
7th Floor, Panorama Tower, 34th Street corner Lane A, Bonifacio Global City, Taguig City 1634, Philippines
Contact: +63 2 847 2732