Privacy Policy

1. Overview & Scope

This Privacy Policy applies to all services, websites, client portals, and offshore operational environments operated by BPO Made Easy Inc. ("BPO Made Easy", "we", "us", or "our"), headquartered in Carcar City, Cebu, Philippines.

As a Business Process Outsourcing (BPO) service provider, we act as both a Data Controller (for our direct client relations, job applicants, and website visitors) and a Data Processor (when handling customer or system data on behalf of our enterprise clients).

2. Information We Collect

Depending on your interaction with BPO Made Easy, we collect and process the following categories of information:

A. Client & Business Contact Information

• Full names, work email addresses, business phone numbers, job titles, and company names.
• Billing details, tax identifiers, contract terms, and official business correspondence.

B. End-User Data Processed on Behalf of Clients

• Customer interaction logs, call recordings, live chat transcripts, support tickets, and email records generated during service delivery.
• Transactional data, account lookups, and system entries made inside client-provided CRM or ERP platforms.

C. Website Visitor & Technical Log Data

• IP addresses, browser type, device operating system, referring URLs, time spent on pages, and network diagnostics.
• Security logs generated by firewalls and anti-abuse mechanisms.

D. Career Applicants

• Resumes, employment histories, educational background, reference details, contact info, and recruitment assessment records.

3. How We Use Your Information

We process personal and operational data exclusively for legitimate business purposes, including:

• Service Delivery: Providing dedicated inbound, outbound, back-office, live chat, and virtual assistant services as contracted in Master Service Agreements (MSAs).
• Quality Assurance & Training: Monitoring and evaluating team interactions to maintain high SLA benchmarks and agent performance standards.
• Security & Incident Prevention: Monitoring physical facilities and network infrastructure to detect unauthorized access, fraud, or cybersecurity threats.
• Billing & Contract Administration: Processing invoices, managing client accounts, and fulfilling statutory accounting requirements.
• Compliance & Legal Obligations: Fulfilling obligations under Philippine labor laws, tax regulations, and international data processing addenda (DPAs).

4. Offshore Security & Infrastructure Protocols

Our operations facility in Cebu is designed to deliver military-grade data protection and zero-leak environment guarantees:

• Physical Security: 24/7 manned security guards, biometric access control (fingerprint/facial scanning), zero paper inside agent workstations, and continuous HD CCTV coverage.
• Clean-Desk Policy: Workstations are strictly prohibited from holding mobile phones, personal recording devices, flash drives, notebooks, or writing utensils in client-data handling areas.
• Network Safeguards: Next-generation enterprise firewalls, isolated VLAN segregation per client pod, disabled USB ports, zero local data storage on endpoint terminals, and encrypted TLS 1.3 transmissions.
• Employee Vetting: Mandatory background checks (National Bureau of Investigation clearance, employment history verification, drug screenings) and signed non-disclosure agreements (NDAs) prior to onboarding.

5. Cross-Border Data Transfers

BPO Made Easy executes Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs) with international clients located in North America, Europe, Australia, and Asia-Pacific.

Cross-border processing complies fully with Chapter III of the Philippine Data Privacy Act of 2012 and Article 46 of the EU GDPR, ensuring an equivalent level of protection for transborder data flows.

6. Information Disclosure & Sub-Processors

We do not share your personal data with third parties except under the following controlled circumstances:

• Authorized Sub-processors: Cloud infrastructure providers (e.g., AWS, Microsoft Azure, Google Cloud) hosting our client portal and VoIP systems under strict confidentiality terms.
• Legal Compliance: When legally mandated by a binding court order, subpoena, or law enforcement agency with lawful jurisdiction.
• Corporate Reorganization: In the event of a merger, acquisition, or sale of company assets, provided the acquiring entity honors this Privacy Policy.

7. Data Retention & Destruction

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or to comply with statutory legal and accounting retention periods.

Upon contract expiration or upon written request from a Data Controller, client data stored in our environment is securely sanitized using DoD 5220.22-M compliant wipe algorithms or rendered completely unrecoverable.

8. Data Subject Rights

Under applicable privacy laws, data subjects maintain rights regarding their personal data:

• Right of Access: Request confirmation and copies of personal data held about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten"): Request deletion of personal data when legal retention periods expire.
• Right to Object & Restrict Processing: Opt-out of non-essential processing or marketing communications.

To exercise any of these rights, contact our Data Protection Officer at dpo@bpomadeeasy.com.

9. Cookies & Analytics Technologies

Our website utilizes essential session cookies and privacy-friendly analytics tools to evaluate traffic and optimize site performance. We do not track users across non-affiliated websites or serve behavioral advertising.

You can manage your cookie preferences through your browser settings at any time.

10. Data Protection Officer (DPO) Contact

If you have questions, security inquiries, or data protection requests regarding this policy, please reach out to our DPO: