This Privacy Policy explains what personal data BOVA collects, how we use and protect it, who we may share it with, how long we retain it, and the rights you may have under Philippine data protection law.
Last updated: 28 August 2026
BOVA (Back Office VA) operates bovaoffice.com and provides back-office virtual assistance and related digital support services.
For personal data that BOVA collects and determines the purposes and means of processing, BOVA acts as a Personal Information Controller (PIC) under the Philippine Data Privacy Act of 2012.
When BOVA processes personal data on behalf of a client in connection with contracted services, BOVA may act as a Personal Information Processor (PIP) and process that information according to the client's instructions and applicable data protection requirements.
This distinction means that the appropriate party responsible for your personal data may depend on how and why your information was collected.
The type of personal data we collect depends on how you interact with BOVA.
When you visit our website, we may collect limited technical and usage information, such as:
If you contact us, request information, or schedule a call, we may collect:
If you apply for a position with BOVA, we may collect:
We process applicant information for recruitment, candidate evaluation, communication, onboarding, and related employment administration.
If you engage BOVA for services, we may collect information necessary to manage and perform the engagement, such as:
As part of providing services, BOVA may process personal data belonging to a client's customers, employees, applicants, leads, suppliers, or other individuals.
Where BOVA processes this information solely on behalf of a client, the client generally determines the purposes of processing and may be the Personal Information Controller, while BOVA acts as a Personal Information Processor.
The handling of such information may also be governed by the applicable service agreement and data processing terms between BOVA and the client.
Depending on the relationship and the information involved, BOVA may process personal data to:
We do not collect or process personal data for purposes incompatible with the purposes disclosed to you, unless otherwise permitted by applicable law.
BOVA processes personal data only where a lawful basis exists under the Data Privacy Act and other applicable laws.
Depending on the circumstances, the applicable basis may include:
Where processing is based on consent, you may withdraw your consent subject to applicable legal or contractual limitations and where another lawful basis does not permit continued processing.
We may collect personal data:
We aim to collect only information that is adequate, relevant, and reasonably necessary for the applicable purpose.
BOVA may use third-party service providers to operate the website, manage communications, schedule meetings, analyze website usage, store information, provide security, and deliver our services.
Depending on our current technology stack, these may include providers such as:
Third-party providers may process personal data on BOVA's behalf or, depending on the service and circumstances, process information under their own terms and privacy practices.
Where BOVA engages a provider as a personal information processor, we take reasonable steps to require appropriate privacy and security safeguards.
The exact providers used by BOVA may change as our technology stack develops. Where appropriate, this Policy will be updated to reflect material changes.
BOVA does not sell personal data.
We may disclose or share personal data where reasonably necessary and permitted by law with:
We limit disclosures to what is reasonably necessary for the applicable purpose.
Some third-party service providers used by BOVA may process or store personal data outside the Philippines.
Where personal data is transferred or made accessible outside the Philippines, BOVA will take reasonable and appropriate measures to protect the information and comply with applicable data protection requirements.
Our website may use cookies, local storage, or similar technologies.
The website may use browser local storage to remember preferences such as your selected light or dark theme. This information is used for website functionality and is not intended to identify you personally.
Where analytics tools are enabled, they may use cookies or similar technologies to distinguish visits, understand how visitors use the website, measure website performance, and help us improve the site.
You can manage or delete cookies and locally stored information through your browser settings. Disabling certain technologies may affect some website functionality.
BOVA implements reasonable and appropriate organizational, physical, and technical measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, destruction, or other unlawful processing.
Access to personal data is limited to authorized personnel and service providers who have a legitimate need to access it.
We periodically review our security practices and take reasonable steps to address identified risks.
No electronic transmission or storage system can be guaranteed to be completely secure. However, BOVA is committed to maintaining safeguards appropriate to the nature and risks of the personal data we process.
BOVA retains personal data only for as long as reasonably necessary for the purpose for which it was collected, to fulfill contractual or business requirements, to comply with legal obligations, or to establish, exercise, or defend legal claims.
Retention periods may differ depending on the type of information and the purpose for which it is processed.
When personal data is no longer required, BOVA will take reasonable steps to securely delete, destroy, anonymize, or otherwise dispose of it in accordance with applicable requirements and our retention practices.
BOVA maintains procedures for identifying, responding to, and managing personal data breaches.
Where a breach is subject to mandatory notification under applicable law, BOVA will notify the National Privacy Commission and affected data subjects within the period required by law and in accordance with applicable notification requirements.
Where appropriate, we will also take reasonable steps to contain the incident, assess potential risks, and reduce the likelihood of further harm.
Subject to applicable conditions and limitations under Philippine law, you may have rights as a data subject, including the right to:
For a more detailed explanation of these rights and how to exercise them, please see our Data Privacy page.
For privacy questions, requests, or concerns, contact:
Email: contact@bovaoffice.com
Please provide enough information for us to identify the relevant records and respond to your request. We may request reasonable information to verify your identity before providing access to personal data or making changes.
We will handle requests in accordance with applicable law and our internal procedures.
You may also contact the National Privacy Commission where you believe your rights under applicable data protection law have been violated.
We may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices, or applicable legal requirements.
When we make changes, we will update the “Last updated” date at the top of this Policy.
Where required by law, we will provide additional notice or obtain consent for material changes to the purposes, scope, or manner of processing.
For more information about your rights under the Philippine Data Privacy Act, please see our Data Privacy page.
For information about how we process personal data in connection with a specific BOVA service engagement, the applicable service agreement or data processing terms may also apply.