We value your trust and confidence and shall exercise reasonable efforts to protect your right to privacy. Please read the following carefully to understand our views and practices regarding personal data and how it will be treated. We also encourage you to review the National Privacy Commission policy for safeguarding your data.
Personal Data Collected
Mind You collects your Personal Data and Information when you voluntarily provide it to us. For example, you may give us (a) your email address if you choose to receive newsletters, updates, or other information from us; or (b) your contact information, and any other personal data you choose to include, if you email, text, or instant message us, or contact us through our websites; and/or (c) any personal data contained in, or included with feedback, comments, photos, videos, or other information you submit via online portals, forms, surveys, or interactive portions of our websites. However, please note that certain services cannot be made available to you without submitting certain pieces of information required for us to provide you with said service, e.g., Mind You requires your phone number in order to register the same in our system so that we may provide you with access to the same. Apart from your voluntary submissions, we may be able to obtain personal data in various ways. These include instances where you:
Enter into an agreement with us, whether or not written, including an employment contract, retainer agreement or other contract to avail of our services, or supply or service contract;
Submit to us any application, form, request, notice, or some other document;
Inquire after or apply for employment;
Become an employee, officer, consultant, agent, supplier or service provider of Mind You;
Access browsers, visit, or use any of our websites, platforms, social media presence, and other online presence; or
Otherwise provide us with personal data, whether directly or through another person.
To the extent that you supply Mind You with Personal Information, Mind You shall not disclose your identity or any other personally-identifiable information, except as permitted by and in accordance with such applicable professional rules and applicable privacy laws. In any instance of such permitted disclosure, Mind You hereby agrees to maintain the confidentiality of any Personal Data and Information disclosed to it. Mind You shall only disclose your Personal Data and Information with your express consent, or otherwise in conformance with (i) any statement or policy that you provide concerning the use and disclosure of Personal Data and Information and (ii) applicable law. By way of example and not limitation, in the event that Mind You is required to provide any other person or entity with your Personal Data and Information, Mind You hereby warrants that the disclosure of Personal Data and Information conforms to all applicable legislation and regulations in force, and asserts that it has rights and authorizations necessary to provide said Personal Data and Information to such other person or entity for use within the context of the intended purpose. It is the exclusive responsibility of Mind You to complete the appropriate formalities to process and/or use any such Personal Data and Information. Mind You also agrees upon your demand to provide proof, satisfactory to you, of your consent to the disclosure and use of the Personal Data and Information. Retention and/or Destruction of Personal and Data Information Mind You warrants that your Personal Information is retained only during the duration of the use of service. In the event that your agreement with Mind You is terminated, Mind You warrants that it will use commercially reasonable efforts to (1) wipe clean the memory device on all equipment and machines on which your Personal Information is processed; (2) sanitize storage media, temporary files and back up files on which your Personal Information is stored, when the retention timeframe for archival or audit purposes expires; and (3) certify such destruction to you in writing if so required. Registration Mind You shall register with the National Privacy Commission (NPC) and ensure that its registration is up-to-date and contains all necessary compliance documentation. Registration includes, but is not limited to, all automated processing operations, annual report on documented security incidents and personal data breaches, and service providers. Mind You warrants that it is contractually bound to comply with the applicable and relevant data laws and regulations including the Data Privacy Act of the Philippines, its Implementing Rules and Regulations, and other NPC issuances. Privacy Impact Assessment In an earnest and sincere commitment to ensure compliance with applicable data privacy laws, Mind You agrees to guarantee that the highest level of security is implemented taking into account relevant factors, including but not limited to the nature of the personal information to be protected, the risks represented by processing, the size of the organization, complexity of its operation, and the cost of security implementation. Personal Information Processing Mind You shall confirm that the processing of Personal Information complies with applicable data privacy laws, statutes and regulations. Mind You shall guarantee that privacy principles of transparency, legitimate purpose, and proportionality are embedded and cascaded throughout the organization. Mind You further warrants that data processing shall meet the criteria for lawful processing prescribed under existing data privacy laws and regulations. It is the full and exclusive responsibility of Mind You to certify that privacy policies, trainings and security clearances are in place. Confidentiality, Integrity and Availability of Personal Information Mind You hereby agrees to maintain the confidentiality of any Personal Data and Information disclosed to it. Mind You shall ensure that you are apprised of your rights through privacy notices, and obtain and/or secure informed consent of the data subjects prior to its data collection and processing. Mind You hereby assumes responsibility to update data protection policies, and that regular drills for business continuity and security vulnerability scanning are in place. Data Breach Reporting In any instance of data breach, Mind You assumes responsibility to ensure that the designated Data Protection Officer (DPO) shall promptly notify you and NPC when sensitive personal information may be used to enable identity fraud and are reasonably believed to have been acquired by an unauthorized person, which the DPO believes may pose a real and/or potential risk or serious harm to any data subject. Mind You warrants that the notification shall be prompt and descriptive of the nature of the breach, the possible sensitive personal information involved, and the measures taken by the DPO to address the breach. Notification shall in no case exceed seventy (72) hours from discovery of breach. Transparency Mind You warrants that you will be made aware of the nature, purpose, and extent of the processing of your personal data, including the risks and safeguards involved, the identity of personal information controller, your rights as a data subject, and how these can be exercised. Any information and communication relating to the processing of personal data will be made accessible, using clear and plain language. Personal Data Users For purposes of this Policy, Mind You is the Personal Information Controller (PIC) for the information that we collect when you visit our website. This means that Mind You decides how your data is used and are responsible for looking after it in accordance with the Republic Act No. 10173 otherwise known as the Data Privacy Act of 2012 and its Implementing Rules and Regulations. Access to your personal data within Mind You’s platform will be provided only to authorized staff members, or third parties on a need to know basis as part of their work in connection with the operation of the website/service. Third Party Data Sharing Mind You may employ professional services from companies and independent contractors to facilitate or compliment the operations of our platform by performance of certain tasks, such as, but not limited to, legal services, customer service, technical maintenance, monitoring, email management and communication, database management, billing and payment processing, reporting and analytics. All professional service providers are required by Mind You to take appropriate security measures to protect your Personal Information in line with our policies. Service providers are not permitted to use your data for their own purposes. We permit them to process your data only for specified purposes and in accordance with our instructions. Where there is a need to share your Personal Information with third parties, we will seek to share only the minimum amount necessary for carrying out the outsourced process. Third-Party Tools Mind You employs third-party tools to monitor and analyze the use of our platform and services, and to automate certain processes related to the development and operation of the platform. Analytics Mind You uses Google Analytics, HotJar, Facebook Pixel and other tracking platforms to track platform use and traffic. Google Analytics, HotJar, Facebook Pixel and other tracking platforms make up our web analytics service offered to Mind You. Mind You uses the data collected to track and monitor the use of our websites. This data is shared with other online services that require the data to perform their operations. Mind You may use the collected data to contextualize and personalize the ads of its own advertising network. For more information on the privacy practices of Mind You, please visit the Privacy Terms web page: www.mindyou.com.au/privacy-policy. Records Mind You employs data specialists and Proxy.me for recording your interactions or use of our platform which helps us deliver a better user experience by understanding end user behavior. Data acquired by data specialists and Proxy.me is anonymous. Data specialists and doxy.me will be used in the development of the user interface and streamlining of the platform’s programming and operational pipeline to optimize the platform and refine the overall service with the end goal of improving end user experience. For more information on the privacy practices of data specialists and doxy.me, please visit https://doxy.me/en/privacy-policy/ for safeguarding your data.
Data and Information Use
Your Personal Information may be used for the following purposes:
Mind You will only retain your Personal Information for as long as we need it to fulfil our purposes, including any relating to legal, accounting, or reporting requirements.
While using any Internet-based service carries inherent security risks that cannot be 100% prevented, our systems, infrastructure, encryption technology, operation and processes are all designed, built and maintained with your security and privacy in mind. We apply industry standards and best practices to prevent any unauthorized access, use, and disclosure, and strive to be more than compliant with all applicable data privacy regulations.
Right to ObjectAs a Data Subject, you have the right to indicate your refusal to the collection and processing of your Personal Information, including processing for direct marketing, automated processing, or profiling. You also have the right to be informed and to withhold your consent to further processing in case there are any changes or amendment to information given to you. Once you have notified us of the withholding of your consent, further processing of your Personal Information will no longer be allowed, unless collection and processing is undertaken pursuant to any lawful basis or criteria.
The rights mentioned herein are not applicable if Personal Information is processed only for scientific and statistical research purposes, and without being used as basis for carrying out any activity or taking any decision regarding you as the Data Subject. Your rights as a Data Subject are also subject to other limitations provided by law. The law requires you to exercise your rights as described in this Policy in a reasonable and non-arbitrary manner, and with due regard to the rights of other parties. All requests, demands or notices which you may make under this Policy or applicable law must be made in writing and duly received by Mind You. Data Protection Officer The Data Protection Officer (DPO) is the individual principally responsible for ensuring Mind You’s compliance with applicable laws and regulations for the protection of data privacy and security. The DPO is responsible for the supervision and enforcement of this Policy, and the relevant contact details are as follows: Data Protection Officer: Amina Boncales firstname.lastname@example.org Inquiries and Notices For any inquiry related to this Policy, please contact our Data Protection Office through the contact details indicated above. All requests, demands or notices which a Data Subject may send or submit to us under this Policy must be in writing, should be addressed to the Data Protection Officer using the contact details above, and will be deemed duly given (i) on the date delivery if delivered personally; (ii) on the third Business Day following the date of sending if delivered by a nationally recognized next-day courier service and the service has confirmed delivery; or (iii) if given by electronic mail, when such electronic mail is transmitted to the email address specified above and the appropriate confirmation has been received by the sender via email.