✦Legal✦

Privacy Policy

This Privacy Policy explains what personal data BOVA collects, how we use and protect it, who we may share it with, how long we retain it, and the rights you may have under Philippine data protection law.

Last updated: 28 August 2026

1. Who we are

BOVA (Back Office VA) operates bovaoffice.com and provides back-office virtual assistance and related digital support services.

For personal data that BOVA collects and determines the purposes and means of processing, BOVA acts as a Personal Information Controller (PIC) under the Philippine Data Privacy Act of 2012.

When BOVA processes personal data on behalf of a client in connection with contracted services, BOVA may act as a Personal Information Processor (PIP) and process that information according to the client's instructions and applicable data protection requirements.

This distinction means that the appropriate party responsible for your personal data may depend on how and why your information was collected.

2. Personal data we may collect

The type of personal data we collect depends on how you interact with BOVA.

Website visitors

When you visit our website, we may collect limited technical and usage information, such as:

  • IP address or similar network information;
  • Browser and device information;
  • Pages viewed and interactions with the website;
  • Referring website or source;
  • Approximate geographic location derived from technical information; and
  • Cookie, local-storage, or similar technical information where applicable.

Prospective clients and inquiries

If you contact us, request information, or schedule a call, we may collect:

  • Name;
  • Email address;
  • Telephone or other contact information;
  • Company or organization information;
  • Information included in your inquiry; and
  • Scheduling and meeting-related information.

Applicants and candidates

If you apply for a position with BOVA, we may collect:

  • Name and contact information;
  • Résumé or CV;
  • Portfolio and professional profile links;
  • Employment and professional background;
  • Skills, qualifications, and experience;
  • Information provided during interviews or assessments; and
  • Other information you voluntarily provide as part of the recruitment process.

We process applicant information for recruitment, candidate evaluation, communication, onboarding, and related employment administration.

Clients and business contacts

If you engage BOVA for services, we may collect information necessary to manage and perform the engagement, such as:

  • Contact and business information;
  • Account and administrative information;
  • Billing and payment-related information;
  • Service instructions and communications; and
  • Other information reasonably necessary to provide the agreed services.

Information processed on behalf of clients

As part of providing services, BOVA may process personal data belonging to a client's customers, employees, applicants, leads, suppliers, or other individuals.

Where BOVA processes this information solely on behalf of a client, the client generally determines the purposes of processing and may be the Personal Information Controller, while BOVA acts as a Personal Information Processor.

The handling of such information may also be governed by the applicable service agreement and data processing terms between BOVA and the client.

3. How we use personal data

Depending on the relationship and the information involved, BOVA may process personal data to:

  • Respond to inquiries and requests;
  • Schedule and manage discovery calls and meetings;
  • Evaluate and manage job applications and recruitment;
  • Communicate with applicants, clients, prospects, and business contacts;
  • Provide, administer, and support our services;
  • Manage client accounts and service engagements;
  • Process billing and payments;
  • Maintain and secure our website, systems, and services;
  • Understand website usage and improve our website and services;
  • Prevent fraud, misuse, unauthorized access, and security incidents;
  • Comply with legal and regulatory obligations; and
  • Establish, exercise, or defend legal claims or protect BOVA's legitimate business interests where permitted by law.

We do not collect or process personal data for purposes incompatible with the purposes disclosed to you, unless otherwise permitted by applicable law.

4. Lawful basis for processing

BOVA processes personal data only where a lawful basis exists under the Data Privacy Act and other applicable laws.

Depending on the circumstances, the applicable basis may include:

  • Your consent;
  • The performance of a contract or steps taken at your request before entering into a contract;
  • Compliance with a legal obligation;
  • Protection of vitally important interests;
  • Other circumstances permitted by law; or
  • BOVA's legitimate interests, provided those interests do not override your fundamental rights and freedoms.

Where processing is based on consent, you may withdraw your consent subject to applicable legal or contractual limitations and where another lawful basis does not permit continued processing.

5. How we collect information

We may collect personal data:

  • Directly from you through website forms, applications, emails, calls, meetings, or other communications;
  • From information you provide during a service engagement;
  • Automatically through website technologies such as cookies or local storage, where applicable;
  • From third parties where permitted by law and reasonably necessary for the relevant purpose; or
  • From a BOVA client where BOVA is processing information on that client's behalf.

We aim to collect only information that is adequate, relevant, and reasonably necessary for the applicable purpose.

6. Third-party service providers

BOVA may use third-party service providers to operate the website, manage communications, schedule meetings, analyze website usage, store information, provide security, and deliver our services.

Depending on our current technology stack, these may include providers such as:

  • Calendly, for scheduling meetings and managing booking information;
  • Google or other analytics providers, for website usage and performance analytics; and
  • Hosting, cloud-storage, communications, security, and other technology providers used to operate BOVA's business.

Third-party providers may process personal data on BOVA's behalf or, depending on the service and circumstances, process information under their own terms and privacy practices.

Where BOVA engages a provider as a personal information processor, we take reasonable steps to require appropriate privacy and security safeguards.

The exact providers used by BOVA may change as our technology stack develops. Where appropriate, this Policy will be updated to reflect material changes.

7. Data sharing and disclosure

BOVA does not sell personal data.

We may disclose or share personal data where reasonably necessary and permitted by law with:

  • Authorized BOVA personnel who need the information to perform their responsibilities;
  • Service providers and personal information processors;
  • Hosting, cloud, analytics, scheduling, communications, and security providers;
  • Professional advisers and contractors;
  • Government authorities, regulators, courts, or law enforcement where required or permitted by law;
  • A client where BOVA is processing information on that client's behalf; or
  • Other recipients where disclosure is authorized by you or otherwise permitted by applicable law.

We limit disclosures to what is reasonably necessary for the applicable purpose.

8. International processing and transfers

Some third-party service providers used by BOVA may process or store personal data outside the Philippines.

Where personal data is transferred or made accessible outside the Philippines, BOVA will take reasonable and appropriate measures to protect the information and comply with applicable data protection requirements.

9. Cookies and local storage

Our website may use cookies, local storage, or similar technologies.

Functional storage

The website may use browser local storage to remember preferences such as your selected light or dark theme. This information is used for website functionality and is not intended to identify you personally.

Analytics

Where analytics tools are enabled, they may use cookies or similar technologies to distinguish visits, understand how visitors use the website, measure website performance, and help us improve the site.

You can manage or delete cookies and locally stored information through your browser settings. Disabling certain technologies may affect some website functionality.

10. Data security

BOVA implements reasonable and appropriate organizational, physical, and technical measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, destruction, or other unlawful processing.

Access to personal data is limited to authorized personnel and service providers who have a legitimate need to access it.

We periodically review our security practices and take reasonable steps to address identified risks.

No electronic transmission or storage system can be guaranteed to be completely secure. However, BOVA is committed to maintaining safeguards appropriate to the nature and risks of the personal data we process.

11. Data retention

BOVA retains personal data only for as long as reasonably necessary for the purpose for which it was collected, to fulfill contractual or business requirements, to comply with legal obligations, or to establish, exercise, or defend legal claims.

Retention periods may differ depending on the type of information and the purpose for which it is processed.

When personal data is no longer required, BOVA will take reasonable steps to securely delete, destroy, anonymize, or otherwise dispose of it in accordance with applicable requirements and our retention practices.

12. Personal data breaches

BOVA maintains procedures for identifying, responding to, and managing personal data breaches.

Where a breach is subject to mandatory notification under applicable law, BOVA will notify the National Privacy Commission and affected data subjects within the period required by law and in accordance with applicable notification requirements.

Where appropriate, we will also take reasonable steps to contain the incident, assess potential risks, and reduce the likelihood of further harm.

13. Your rights

Subject to applicable conditions and limitations under Philippine law, you may have rights as a data subject, including the right to:

  • Be informed about the processing of your personal data;
  • Access personal data and relevant information about its processing;
  • Request correction of inaccurate or incomplete personal data;
  • Request erasure, blocking, or removal where permitted by law;
  • Object to certain processing;
  • Request data portability where applicable;
  • Seek damages where provided by law; and
  • Lodge a complaint regarding the processing of your personal data.

For a more detailed explanation of these rights and how to exercise them, please see our Data Privacy page.

14. How to exercise your rights or contact us

For privacy questions, requests, or concerns, contact:

Email: contact@bovaoffice.com

Please provide enough information for us to identify the relevant records and respond to your request. We may request reasonable information to verify your identity before providing access to personal data or making changes.

We will handle requests in accordance with applicable law and our internal procedures.

You may also contact the National Privacy Commission where you believe your rights under applicable data protection law have been violated.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices, or applicable legal requirements.

When we make changes, we will update the “Last updated” date at the top of this Policy.

Where required by law, we will provide additional notice or obtain consent for material changes to the purposes, scope, or manner of processing.

16. Related privacy information

For more information about your rights under the Philippine Data Privacy Act, please see our Data Privacy page.

For information about how we process personal data in connection with a specific BOVA service engagement, the applicable service agreement or data processing terms may also apply.